Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4D0FE888889811EC86B50D8A5A40D577.roa
File: 4D0FE888889811EC86B50D8A5A40D577.roa (raw, json)
Hash identifier: nQznIrmEIP3K4VO3kHStGybIw989mR+Gi6HXkSxibuk=
Subject key identifier: DA:74:BD:2B:C5:5D:82:55:02:C3:49:82:04:43:EB:1D:F4:51:E5:6C
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0261
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4D0FE888889811EC86B50D8A5A40D577.roa
Signing time: Tue 08 Feb 2022 04:33:45 +0000
ROA not before: Tue 08 Feb 2022 04:33:41 +0000
ROA not after: Wed 08 Feb 2023 04:33:41 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 8 04:33:41 2022 GMT
Not After : Feb 8 04:33:41 2023 GMT
Subject: CN=6201f2a9-aaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:1a:f7:2b:6e:26:23:3b:d7:95:2f:7f:db:
15:ae:f1:34:30:5b:db:e7:5b:d9:d3:f4:99:ae:00:
29:60:a4:65:20:fc:c1:32:29:f0:c7:e4:75:0b:23:
f4:3a:56:58:84:04:fe:e2:d2:85:c7:72:16:2d:2f:
4d:36:2d:41:dd:da:9f:a4:d7:76:b5:7b:64:40:f7:
08:af:5a:f9:50:92:65:ca:08:cb:4c:d3:6e:cf:ef:
c1:64:a0:6f:6a:2f:b4:6b:45:5b:59:ac:48:3f:08:
9b:c2:c7:30:b1:58:0e:ce:e1:7e:81:a6:68:d4:11:
ae:61:98:7a:32:59:d5:34:07:87:4b:fc:39:a5:5c:
08:0d:c3:60:77:b9:78:1a:59:95:af:89:9f:67:55:
cb:6f:09:46:b9:70:a9:68:ad:2c:60:72:32:71:77:
5e:4a:bc:b3:a7:be:64:90:da:0e:f0:67:60:84:f4:
d3:e6:26:00:8a:e6:5d:e6:79:b7:d9:11:b4:58:88:
4a:99:e0:cf:66:f2:35:73:40:3f:84:e4:72:f6:17:
16:37:6f:c8:77:52:8e:e9:6b:81:b9:23:c8:c2:9d:
12:0a:c2:49:9a:67:7c:5d:e1:da:c5:80:09:66:2f:
e8:e4:ae:ba:02:e5:94:56:f0:eb:e4:60:8c:cd:00:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:BD:2B:C5:5D:82:55:02:C3:49:82:04:43:EB:1D:F4:51:E5:6C
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/4D0FE888889811EC86B50D8A5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
b5:04:a9:c7:2b:4c:3c:64:12:f0:69:de:00:54:16:24:37:fe:
00:de:76:b4:de:cb:96:01:98:ff:db:2d:3c:96:db:fb:56:f0:
86:96:52:62:86:af:f0:0b:d5:64:23:36:11:4f:5d:20:1a:d2:
01:7b:41:86:9b:0e:f5:8f:c2:8a:ee:78:9a:8d:e2:9a:61:2c:
7e:fe:3f:94:88:27:12:6f:9e:b4:94:d6:4d:9a:3b:b5:75:c1:
7f:a8:72:1b:fc:a2:0f:a4:79:cc:e7:be:36:a2:23:74:41:e2:
15:2f:40:8e:a8:e4:3a:62:95:65:14:7d:4b:05:4e:20:be:81:
63:20:a1:3a:7d:a6:6d:22:0d:e4:81:f8:da:77:ab:bb:ed:c3:
19:51:01:a8:b8:6d:e9:11:05:93:42:f7:de:c1:59:26:15:52:
b9:7e:ce:c2:2c:07:98:56:b3:eb:d4:89:47:ea:34:6a:a5:c4:
1b:ed:d5:ef:75:50:78:16:01:ab:37:34:2f:b3:03:08:a4:42:
a5:4c:53:d0:5e:77:bb:f7:d9:a5:55:0e:52:2e:08:b7:99:0d:
fc:bb:57:d6:01:0d:2a:b8:46:88:24:0a:e6:9b:e3:98:70:23:
30:a5:34:c0:98:79:7b:e4:03:b0:3d:7d:6b:1c:47:02:7c:dd:
f3:e3:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org