Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5655DE56F9A011EC9D0154E3F1222468.roa
File: 5655DE56F9A011EC9D0154E3F1222468.roa (raw, json)
Hash identifier: DGBDXmToQecsj/R9GcEYRMRX/Kqpwv1ASC+DWLVjXgc=
Subject key identifier: 99:5E:49:BE:A5:B5:8E:E8:95:CD:94:53:3C:4D:D5:48:42:44:62:39
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 05DF
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5655DE56F9A011EC9D0154E3F1222468.roa
Signing time: Sat 02 Jul 2022 00:45:58 +0000
ROA not before: Sat 02 Jul 2022 00:00:53 +0000
ROA not after: Sun 02 Jul 2023 00:00:53 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jul 2 00:00:53 2022 GMT
Not After : Jul 2 00:00:53 2023 GMT
Subject: CN=62bf9546-edbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:a1:1a:5f:f4:ad:9a:2e:3d:12:78:67:b0:
8d:72:df:b8:84:bc:af:e6:74:e4:51:bc:a2:42:3f:
69:b2:32:56:97:2d:76:ce:d6:b5:92:2a:75:1e:fd:
03:38:1e:d6:f3:de:3e:45:e4:2e:d0:a7:7e:a7:05:
76:aa:68:7e:07:8b:4f:ee:9c:1e:2c:f7:9c:e1:f0:
ec:d1:ed:38:45:11:34:d8:99:bf:d6:fa:df:2f:ea:
1c:9d:da:ca:77:b8:e4:13:19:4f:01:1c:8f:94:4e:
11:b6:60:2d:29:eb:37:9b:5a:91:1d:96:86:4f:1f:
57:62:90:71:e3:ba:37:7a:2b:60:8d:aa:ca:58:78:
50:1b:89:df:f0:4c:4f:17:2c:4f:d9:59:07:ec:dc:
a9:62:6e:ca:f7:42:9c:eb:7f:c1:99:5c:96:66:af:
b4:4a:c0:36:72:ae:d9:ff:d1:50:8e:aa:08:fb:ce:
8b:f1:28:ea:cf:24:05:c5:1a:62:b7:a4:1d:a6:a7:
da:ba:f4:c7:ac:d3:02:5f:2c:91:4c:7b:d3:14:4f:
08:8e:e9:c8:fd:b9:8b:53:58:08:bd:71:75:27:33:
00:30:7c:4a:65:51:14:8f:04:e4:cc:2f:40:fc:fe:
1b:5e:1c:d9:b8:b4:2b:39:a0:b7:ca:90:42:b3:cc:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:49:BE:A5:B5:8E:E8:95:CD:94:53:3C:4D:D5:48:42:44:62:39
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5655DE56F9A011EC9D0154E3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
1e:ff:f7:b3:cc:1a:39:32:3b:16:95:9d:da:72:21:4d:1c:4e:
1a:76:d4:11:a9:eb:43:15:31:58:16:ad:7f:af:55:54:36:1e:
54:62:fe:29:69:8f:91:d3:c6:a9:9b:67:04:54:25:5c:10:c1:
96:be:19:40:17:3b:97:a1:46:23:65:0e:89:9c:ee:08:7b:12:
05:03:22:64:8d:f4:9c:e2:6e:b2:14:1b:3c:10:f2:a9:03:dc:
c0:e0:0d:91:e4:60:bc:ce:5e:24:8b:2c:89:37:c2:19:2a:45:
39:50:1d:5b:98:3c:0f:29:de:37:b1:0a:46:96:73:4e:cf:c4:
d4:82:fa:f2:22:4d:1c:31:3f:30:cc:ed:77:2c:e5:54:14:d8:
94:15:c5:32:f1:86:a2:0c:94:98:6f:2d:d5:bb:22:00:b1:95:
0a:62:5d:97:b0:9f:1d:58:7b:9d:b9:91:36:64:84:f1:fb:d6:
69:4c:14:31:1d:f2:b6:9e:6a:11:3c:51:bf:20:51:c8:04:0c:
ea:33:69:05:c2:74:35:15:00:14:7c:58:1f:75:58:4e:48:68:
2d:48:f6:b4:7e:d8:fb:85:ea:cb:bb:e3:f6:e0:36:f1:3c:ec:
2b:c9:5f:f4:5c:42:bd:03:bb:0f:a1:bf:09:70:5f:e4:27:4c:
13:ac:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org