Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4681F6F2BA4611ECAAE7A7745A40D577.roa
File: 4681F6F2BA4611ECAAE7A7745A40D577.roa (raw, json)
Hash identifier: nvtTYKfl+UeYSbJrxfSVOh1Dy/WZHwbiAuD/gSzcWJU=
Subject key identifier: 70:66:47:F2:CF:D4:4C:A9:D7:90:86:0D:27:F1:6D:25:60:66:F5:EC
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03BF
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4681F6F2BA4611ECAAE7A7745A40D577.roa
Signing time: Tue 12 Apr 2022 09:52:34 +0000
ROA not before: Tue 12 Apr 2022 09:52:29 +0000
ROA not after: Wed 12 Apr 2023 09:52:29 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 12 09:52:29 2022 GMT
Not After : Apr 12 09:52:29 2023 GMT
Subject: CN=62554be1-9068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:26:52:1e:31:6d:1c:f5:71:1e:78:42:7b:
b6:3e:ce:a3:23:13:ba:a4:eb:3d:5e:9a:20:77:21:
f6:ca:5b:e3:f9:76:1c:5e:b4:db:4e:f7:48:4b:af:
eb:d1:cb:22:c6:88:86:11:b3:01:07:18:fc:dd:7f:
07:9f:20:82:a0:2a:ef:c3:37:af:9a:ca:f0:e4:03:
aa:48:ad:3a:f0:95:54:f4:b4:19:d5:f6:5d:f1:14:
b6:2f:68:57:38:9d:e2:f9:2c:95:23:9d:5e:89:1c:
37:30:01:41:d5:51:2e:00:00:15:e2:bc:e8:9f:dc:
e5:ea:d3:d1:3c:e9:48:27:55:12:2c:cf:d5:fa:22:
61:50:04:5a:21:fa:d2:9c:e1:6f:f4:a2:41:a1:b8:
89:1f:b8:e7:ae:65:fc:09:80:df:76:2a:13:86:c6:
8c:4c:23:76:bf:3d:2b:73:c8:60:06:b6:c0:f5:79:
c5:8d:c4:47:de:49:ac:34:f3:cd:34:79:96:34:d6:
89:0f:e2:35:df:00:0f:e1:f5:99:a6:41:70:a2:cb:
25:ed:b8:b5:43:30:e2:1e:09:29:a1:4b:92:c7:7d:
08:6b:d4:a2:ed:49:9c:68:ef:11:4b:48:7e:f5:5c:
46:ea:41:5a:e5:40:93:b3:ec:d0:f7:91:ef:34:25:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:66:47:F2:CF:D4:4C:A9:D7:90:86:0D:27:F1:6D:25:60:66:F5:EC
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4681F6F2BA4611ECAAE7A7745A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
71:17:ae:f0:e4:22:f3:02:5e:45:be:7f:54:56:97:b8:78:95:
d1:30:a4:fb:ff:d8:b1:5f:73:72:1a:f5:6a:5c:85:f0:3d:a5:
98:21:34:42:da:87:19:67:f8:01:22:d6:f5:6e:46:3b:09:34:
00:8a:48:ee:21:c2:4a:66:bc:b2:50:32:dd:fe:34:f7:a7:53:
4c:96:b8:79:b0:9e:fc:c1:64:ef:d1:9c:36:a4:e4:eb:02:96:
71:3f:72:3e:2d:35:d9:e1:56:18:53:80:96:65:b8:23:ad:32:
0c:df:52:3f:af:be:78:09:95:65:56:23:62:d8:82:24:b3:2e:
63:7f:0f:71:d8:46:b8:73:f0:aa:2e:0c:44:9f:7c:fa:76:db:
d5:95:54:ef:ae:c1:ca:c7:44:20:4c:42:c1:05:b5:7a:86:32:
a2:75:58:07:98:fb:7c:93:88:96:f6:cb:49:d4:97:b9:cd:4b:
d5:18:2d:c4:20:f5:fe:19:de:96:a5:b3:e8:0d:42:b5:1e:24:
24:fd:0d:76:ce:89:2f:ba:70:83:fa:3a:02:0a:a3:32:0e:8f:
63:dd:fe:51:66:c3:a7:62:09:03:c3:8d:6f:f3:63:48:1c:88:
f7:9e:6a:5f:5c:7b:db:ed:7a:4a:1c:fb:78:5e:af:07:ab:b7:
69:0d:16:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org