Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/54CFF5F425C811ED935E0AC3F1222468.roa
File: 54CFF5F425C811ED935E0AC3F1222468.roa (raw, json)
Hash identifier: VArfP+gHAcrPh5bADtBLlm6k2pLyH80QqpXui9C0B2k=
Subject key identifier: 20:A9:C4:3E:AB:06:86:45:1A:A3:80:BE:D5:25:4C:35:7A:2B:62:EF
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0662
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/54CFF5F425C811ED935E0AC3F1222468.roa
Signing time: Sat 27 Aug 2022 05:23:07 +0000
ROA not before: Sat 27 Aug 2022 05:23:03 +0000
ROA not after: Sun 27 Aug 2023 05:23:03 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1634 (0x662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Aug 27 05:23:03 2022 GMT
Not After : Aug 27 05:23:03 2023 GMT
Subject: CN=6309aa3a-40bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:c4:06:24:34:ce:6a:8b:5f:ad:06:b1:df:
9f:fd:2b:e6:fc:de:05:25:65:c5:ed:cf:ec:4b:00:
38:1a:a1:84:8f:9e:d3:c5:9d:87:5f:31:ca:35:ad:
95:2e:01:ec:d0:2c:46:a2:2e:cc:4a:ec:4a:75:e2:
b5:0c:eb:61:0d:ee:79:dd:3e:64:24:6d:cd:65:86:
1a:a6:01:01:7b:77:a6:e7:4c:01:e5:37:d0:14:37:
1a:ca:03:a1:c9:c2:9f:18:dc:1e:6d:ee:db:20:78:
57:60:5b:82:d6:99:fb:9c:4d:df:ce:3e:4a:8e:16:
49:f3:de:46:07:75:d0:30:91:70:87:17:21:76:10:
c0:f9:43:20:a0:61:02:cf:3c:07:28:86:13:7f:a9:
72:f6:1f:97:79:5c:96:ea:06:90:a9:ab:3e:17:98:
d6:cc:38:21:93:b0:8e:53:ed:b4:9d:47:78:b8:8d:
d2:9c:7d:2a:11:b7:1d:e8:95:c7:23:fa:03:5c:ad:
10:86:27:6a:47:4c:55:03:04:c9:c6:5a:7e:2b:e1:
b5:41:07:7f:a9:ce:5b:d1:e6:57:27:7c:9a:39:23:
75:77:9f:59:ec:ed:19:0a:a5:cd:68:ed:a7:87:fb:
77:55:19:33:10:7d:4a:9c:4e:51:34:97:49:9a:f8:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:C4:3E:AB:06:86:45:1A:A3:80:BE:D5:25:4C:35:7A:2B:62:EF
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/54CFF5F425C811ED935E0AC3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
a2:4d:23:cb:40:0a:0a:34:21:76:52:55:a2:a5:b7:a3:d9:0c:
b5:50:34:0b:e1:22:24:69:5e:96:fe:0d:d3:7e:86:b8:af:30:
32:de:64:49:cd:5c:89:dc:20:4c:de:c4:ee:a0:63:69:8a:26:
1a:09:a2:1d:a9:30:83:fa:8d:fa:fc:a2:8c:b3:48:07:b2:e9:
e6:54:e7:8d:f8:73:6a:19:d6:88:d4:61:c5:df:8c:db:eb:18:
73:59:19:b9:36:05:1d:87:36:9d:2c:c4:1f:43:9e:90:e6:f6:
5b:49:9c:c0:2d:50:27:99:de:2c:00:87:d3:35:08:be:1a:4a:
8e:e0:fb:23:65:7a:c0:97:16:22:fe:fd:3e:8b:46:b3:b8:b2:
64:37:71:67:b3:a5:cd:66:19:29:ae:a6:60:6d:ad:52:2c:1a:
ab:23:5f:4a:a8:78:2a:c0:48:0c:72:af:c1:c7:76:26:69:8b:
48:b8:3f:93:25:86:04:1f:e1:35:c8:ad:7a:18:25:62:7b:34:
d4:2b:a2:bc:28:d1:8a:5c:94:fa:0a:b3:e5:8f:b9:c6:d2:3b:
e6:44:73:ab:b5:13:a6:75:e0:3b:d5:71:76:6f:0a:cc:76:db:
47:30:5e:13:d6:7b:c1:40:22:11:8f:b8:79:0f:ed:c5:5a:cc:
1c:c2:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org