Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5823828EDB0E11ECADA27487F1222468.roa
File: 5823828EDB0E11ECADA27487F1222468.roa (raw, json)
Hash identifier: CnzG7FkGOcu1wADKeXG2U++S2yHnp1AhQ6SbpAs+Ohs=
Subject key identifier: 5C:36:5C:E8:7E:C6:50:BF:06:42:E1:98:4C:1B:8A:DE:A7:EF:09:29
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04D6
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5823828EDB0E11ECADA27487F1222468.roa
Signing time: Tue 24 May 2022 03:05:20 +0000
ROA not before: Tue 24 May 2022 03:05:16 +0000
ROA not after: Wed 24 May 2023 03:05:16 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 24 03:05:16 2022 GMT
Not After : May 24 03:05:16 2023 GMT
Subject: CN=628c4b70-bc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:bd:cb:6c:94:04:a0:16:1c:ee:c7:10:be:
4a:0d:8a:b4:ec:b9:91:7c:26:f7:b5:27:47:eb:8c:
78:5e:4b:30:6c:72:b6:78:ee:d8:0f:4b:47:50:1f:
84:3b:72:26:31:b4:0a:f0:ad:29:a9:25:8f:db:39:
5d:20:ae:16:53:fc:a1:29:7b:fa:68:88:b6:db:b0:
17:dd:78:d2:a1:aa:db:c6:02:4c:c9:ea:e6:f4:e5:
fd:eb:1b:c5:bb:46:b4:2b:7c:da:22:87:50:2c:d9:
e0:e6:4c:d7:02:fd:39:b7:5a:b0:35:aa:1b:fe:5d:
6e:15:50:2b:03:8c:07:22:93:73:c9:ea:04:55:a7:
27:4b:0a:21:6f:96:d5:36:a6:f0:6d:a9:0c:4d:97:
a6:ef:9e:31:03:35:64:4e:71:dd:c8:3f:73:fa:9d:
3a:9e:a9:48:66:fa:35:b7:d2:8c:93:58:81:70:ca:
b6:62:c0:7e:71:cc:82:95:52:0e:47:27:ec:03:d5:
42:ff:ed:58:57:6d:8d:98:ed:10:23:14:62:4a:99:
3f:94:c2:c1:c8:f8:85:66:12:34:61:d9:fd:a2:f5:
69:84:13:73:95:69:3a:79:eb:cc:87:f1:39:38:aa:
d5:db:af:d7:18:cf:75:61:f1:03:89:c5:df:ba:59:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:5C:E8:7E:C6:50:BF:06:42:E1:98:4C:1B:8A:DE:A7:EF:09:29
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5823828EDB0E11ECADA27487F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
92:27:e9:e4:b3:4d:13:cb:7d:83:24:39:d2:f6:fd:a2:d1:31:
2d:8e:4e:95:a1:4a:16:ea:21:10:02:8b:f6:57:16:b8:37:b3:
5a:ea:68:f9:96:4a:08:75:23:1c:fc:95:52:e5:1d:a0:2f:55:
b7:9a:be:9b:a2:af:e0:19:a7:91:18:ca:ea:00:7e:86:40:1a:
60:1f:4a:a4:a6:d7:9c:27:74:ba:34:41:7b:ef:6f:e1:6a:5c:
4f:57:12:5b:99:1e:ef:ec:60:d0:52:83:25:18:7d:ec:4c:8b:
68:09:e4:c3:1a:d4:10:3c:8a:53:31:53:8a:bd:57:7b:1e:0c:
ae:26:12:ba:11:ef:81:9b:d6:90:02:eb:72:0b:4f:fb:37:a2:
38:8f:e2:c6:81:89:8f:3c:74:cf:bd:86:06:9a:40:be:03:ef:
a1:41:ea:c7:d0:bc:0a:04:22:ba:0d:f3:4f:bd:8b:1e:e1:7f:
6f:a8:69:a0:b5:29:c7:09:1c:0a:39:12:b6:21:df:e2:65:96:
a1:9b:0a:31:3e:2a:36:01:03:19:f6:d2:f9:a2:90:21:4b:81:
15:43:b0:db:78:97:be:b8:d3:d1:42:a6:72:60:e5:f4:15:31:
f2:a2:a7:79:ce:00:11:69:ec:78:0a:1b:9c:87:a6:6c:f6:bb:
7c:69:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org