Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D6D97FADA4A11EC8FE604A0F1222468.roa
File: 3D6D97FADA4A11EC8FE604A0F1222468.roa (raw, json)
Hash identifier: 6j8uUErt6x7t7X+HXtF8w5aXow8zY/XIOnRpiuR0YAo=
Subject key identifier: 53:91:50:8E:82:36:E5:38:3D:8C:9B:9C:55:63:82:FC:43:79:C8:1C
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04D1
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D6D97FADA4A11EC8FE604A0F1222468.roa
Signing time: Mon 23 May 2022 03:41:33 +0000
ROA not before: Mon 23 May 2022 03:41:29 +0000
ROA not after: Tue 23 May 2023 03:41:29 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233 (0x4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 23 03:41:29 2022 GMT
Not After : May 23 03:41:29 2023 GMT
Subject: CN=628b026d-3de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:f7:d4:73:a5:09:5c:92:81:f6:96:c4:3c:
36:b5:00:a3:9e:39:d2:da:ba:84:b3:c3:30:31:e6:
58:94:22:5a:db:f3:ed:4e:f1:65:16:d7:98:7a:f0:
fe:b1:26:ae:04:f4:10:ba:f8:2d:43:e7:ee:96:90:
e5:70:1f:38:62:ba:9f:19:a0:28:99:26:85:84:68:
ce:a3:5f:e8:e0:97:35:9d:c0:e8:d0:c0:61:77:6d:
94:c4:bd:d8:a6:68:d3:d1:5f:53:03:b4:a6:d9:28:
42:9c:f9:da:91:41:95:06:2f:b9:df:e7:80:27:3b:
28:da:8e:53:1b:55:86:7f:ec:fb:22:0f:7d:df:d8:
0d:b7:74:b3:8e:be:07:6a:0e:5b:32:6b:86:ed:56:
13:7e:1e:0a:a0:c7:a4:cf:1d:b4:f5:83:ef:22:db:
25:bd:e4:87:5f:d9:65:1d:a7:d4:bb:1f:04:4b:aa:
ac:21:04:e2:e1:af:bb:e4:13:d2:20:f6:fa:13:16:
67:b7:ff:9d:8c:6e:c0:f6:32:27:e6:04:e1:99:98:
31:d7:e8:c0:56:1a:f5:79:e9:af:64:00:a8:37:b7:
a1:11:dc:cb:6e:12:c9:f0:1c:ca:a3:45:c2:2c:a7:
8d:f5:88:a5:7c:7e:81:72:4f:28:1f:cb:92:00:da:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:91:50:8E:82:36:E5:38:3D:8C:9B:9C:55:63:82:FC:43:79:C8:1C
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/3D6D97FADA4A11EC8FE604A0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
08:91:c1:cf:be:d5:22:d2:43:2c:c1:bf:62:b7:4e:a7:96:94:
a8:59:8d:61:a5:9f:fb:52:73:60:ab:99:b0:66:55:a9:7b:a1:
86:59:0d:3d:06:2b:0e:d1:14:65:8e:4f:1d:24:8b:0e:cb:ed:
ed:0d:90:e7:94:98:40:66:90:94:a0:dc:b3:28:d1:c2:16:f3:
67:9c:b3:b1:5b:f5:87:6a:95:65:ac:ca:d7:6b:82:ce:73:47:
41:c9:3b:00:20:ae:d1:a3:3e:ad:72:83:77:4c:97:cd:17:8c:
4f:43:1e:4a:cc:7f:84:e9:da:08:ac:00:a4:52:db:2d:8c:15:
19:f5:d9:ef:0d:db:51:63:fa:66:8f:c2:26:7a:86:8d:c9:e1:
ab:b2:7d:a9:42:f9:db:ad:2f:05:71:dd:d0:d7:61:fb:56:9b:
c4:ae:5f:4c:eb:40:1a:82:c1:81:4a:51:d8:7a:fe:8d:29:48:
00:94:45:70:79:cd:32:ad:9c:c9:76:bb:3e:74:c6:2b:cf:ef:
6e:a9:64:06:ef:8f:4a:33:8e:9b:3b:fb:e9:72:96:24:bb:c4:
e0:14:0a:22:80:7b:84:48:88:6f:20:01:32:65:70:e1:93:17:
c7:24:e7:c4:6b:b8:be:f3:79:7d:65:37:a1:21:12:e0:cc:64:
eb:ba:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org