Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/52CD44D2BE1C11EC8543A8BC5A40D577.roa
File: 52CD44D2BE1C11EC8543A8BC5A40D577.roa (raw, json)
Hash identifier: zAbQXQ9PCzJL8jZgxWKugyBkSyeo3N5YWwLZl5INTRA=
Subject key identifier: 16:52:04:E9:52:3F:52:FC:CE:3E:57:05:13:0D:46:58:BA:7F:F6:F5
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03DB
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/52CD44D2BE1C11EC8543A8BC5A40D577.roa
Signing time: Sun 17 Apr 2022 07:02:20 +0000
ROA not before: Sun 17 Apr 2022 07:02:15 +0000
ROA not after: Mon 17 Apr 2023 07:02:15 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 987 (0x3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 17 07:02:15 2022 GMT
Not After : Apr 17 07:02:15 2023 GMT
Subject: CN=625bbb7c-ea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:c1:ec:ed:c9:92:35:c7:b2:de:0e:1c:8c:
d4:e2:49:b0:b2:19:53:5c:b9:51:91:a1:e1:d8:e0:
4f:04:82:18:50:7f:15:9c:94:a3:27:58:c7:9b:48:
d9:81:f5:eb:b2:a4:8a:e9:97:d6:84:6f:ed:e2:f1:
5d:0a:c8:7c:65:35:57:27:99:5a:8f:44:7c:26:96:
76:71:d2:b2:d7:c0:a6:ea:62:d2:2e:7f:8d:08:0f:
49:8f:a2:11:fb:5f:05:30:b7:ed:61:55:50:a9:de:
5e:8e:0e:c0:54:b8:12:5b:8d:77:f0:b9:b9:ab:6f:
75:c7:16:f4:3d:f6:92:f8:a5:27:bf:1d:4a:f9:e1:
4f:d7:62:fb:aa:bd:fd:6e:32:68:79:bd:00:10:b2:
1c:b1:e7:ca:d0:52:85:a0:cb:9d:26:1e:10:f7:ba:
ac:82:89:e0:ff:19:57:9f:3d:51:76:e7:f3:83:55:
8a:37:2b:3c:78:29:d5:f5:46:ca:01:60:13:f6:a9:
07:ab:08:e1:f9:d8:fa:d7:90:ae:0b:5c:f8:e5:13:
82:0e:ee:08:67:61:5c:47:7d:b8:27:c4:e0:e1:db:
2e:a4:be:ff:3b:8c:5f:0f:66:5a:18:34:44:34:ad:
f6:cd:73:c6:e9:1e:c1:0d:c9:45:30:82:14:74:a9:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:52:04:E9:52:3F:52:FC:CE:3E:57:05:13:0D:46:58:BA:7F:F6:F5
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/52CD44D2BE1C11EC8543A8BC5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
bc:61:40:b7:13:c6:35:5a:8b:48:81:ec:3b:44:e2:09:6b:7b:
62:9a:23:51:35:c3:16:ab:98:f0:b3:0d:0d:a6:41:4f:34:4e:
dd:e0:a8:cd:f2:44:f9:4a:f8:e0:53:c4:cd:ea:db:ed:44:08:
e5:93:62:57:11:ac:70:ca:55:10:5c:57:b2:00:79:ff:94:01:
71:3b:68:f7:59:02:e5:8e:2e:c1:4d:6f:8c:95:74:04:41:3c:
14:aa:3f:96:0c:42:c0:cd:8f:ce:15:d0:5a:db:3c:95:8e:42:
87:ff:7a:e0:3b:a8:b0:94:6d:57:d8:d6:3d:1e:6e:27:07:9c:
20:01:14:52:7c:49:c5:8b:cd:5a:8b:d6:7e:5a:3b:78:0d:0f:
a5:5d:d6:07:b1:81:f6:42:8a:91:5e:ab:eb:cf:5c:07:a5:82:
3d:c7:7a:4e:9e:66:e0:a1:19:92:75:18:ed:8a:7a:cb:04:9b:
74:28:eb:db:c1:a1:6c:ff:17:c9:fb:42:fe:c9:1c:41:a9:04:
43:93:5a:d5:9f:75:dc:2e:03:3c:a4:9e:40:0a:d8:eb:e4:05:
92:c0:e7:04:46:39:89:51:66:cf:fe:d2:df:e3:d9:e1:6b:91:
92:5b:06:61:d0:22:02:e0:76:e9:3b:55:24:7c:79:64:f0:5e:
ee:0d:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org