Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5A9C12DADC8D11EC8768E6B5F1222468.roa
File: 5A9C12DADC8D11EC8768E6B5F1222468.roa (raw, json)
Hash identifier: HK97RRL5yTIIq9CSnD5Yd+CDYovInY18GAk//O1CRck=
Subject key identifier: ED:3F:89:7F:8B:A5:D7:A6:79:08:A4:02:DB:2B:73:9E:51:6A:51:C8
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04E0
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5A9C12DADC8D11EC8768E6B5F1222468.roa
Signing time: Thu 26 May 2022 00:47:01 +0000
ROA not before: Thu 26 May 2022 00:00:57 +0000
ROA not after: Fri 26 May 2023 00:00:57 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 26 00:00:57 2022 GMT
Not After : May 26 00:00:57 2023 GMT
Subject: CN=628ece05-63b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:9d:fd:d7:5e:92:6b:3c:b4:05:de:89:17:
2f:2d:4a:b3:fb:73:a0:ac:3f:a8:33:b2:ef:31:bd:
a1:2b:98:5f:9a:73:68:00:04:5a:d3:ae:49:0a:e5:
f9:ac:41:5b:c7:01:fa:f6:ed:91:06:2c:f5:f7:fd:
be:92:5b:c9:9f:7d:ab:28:bb:e2:2d:d5:8c:6e:9b:
9d:2a:f4:3a:02:be:67:b6:42:e5:f0:17:96:04:0e:
03:82:47:57:80:b0:6b:3f:9f:8f:e6:c0:23:1d:19:
a1:6d:79:6e:7d:61:74:9d:a2:5b:e4:52:2a:98:05:
67:f6:33:b5:9e:bf:26:ac:62:a9:73:a2:fb:c4:d3:
a6:3d:0c:1a:6a:a4:60:c5:4c:71:ed:a5:06:fd:1d:
db:f5:ee:1e:03:5e:4b:96:a7:80:ab:5b:59:b0:22:
02:ee:13:4e:fa:45:cb:1a:f4:24:22:e3:bd:c7:23:
e8:e8:db:aa:f1:89:86:ce:bf:cc:64:36:51:a0:94:
8b:f9:0f:40:4c:5d:87:78:9f:01:8f:6b:ea:6b:7f:
fb:33:dd:45:7e:50:4e:06:ec:62:7c:03:34:2f:c2:
ae:90:6d:6e:ef:c9:d4:fb:d9:56:48:a7:87:9e:43:
89:9c:53:15:f5:5d:cf:86:6a:ee:d0:e3:59:59:46:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:89:7F:8B:A5:D7:A6:79:08:A4:02:DB:2B:73:9E:51:6A:51:C8
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5A9C12DADC8D11EC8768E6B5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
a2:01:e8:21:d4:25:f8:e3:d5:80:50:f7:f1:35:bb:4b:65:3d:
03:79:3b:8b:35:2a:be:e2:bb:40:ef:a5:77:da:fa:dc:40:31:
3a:06:c9:5f:f3:ec:93:47:e0:08:56:97:85:ce:81:52:bd:ab:
b6:7b:4f:33:3c:4c:0f:56:04:13:57:a1:e4:13:2c:b5:53:e6:
ab:e2:eb:06:68:ac:75:c0:e5:99:b5:99:3d:b3:bf:ca:50:75:
13:ea:73:13:7c:cb:b4:3a:4a:72:87:5b:1e:94:a9:04:48:4f:
cc:41:9d:c4:76:3b:fd:cf:43:c9:5e:ac:59:57:1d:b7:90:3f:
76:14:8d:24:32:02:cd:08:7d:74:f2:18:56:b2:36:f7:5e:3a:
62:89:96:7a:8c:2e:f2:3f:0d:3c:12:f1:87:7e:17:56:48:da:
18:4f:48:08:ea:0c:1d:93:28:1b:9b:58:a4:b6:10:97:20:8f:
f4:2b:07:46:fa:1e:9f:d1:de:af:42:03:7f:6d:8c:2d:4f:73:
d5:2a:a0:6f:0b:6b:09:ac:5c:75:02:2f:bc:db:fa:87:03:92:
4b:b5:fe:b6:fa:77:de:2d:44:dc:af:47:ee:0e:94:97:bf:f7:
08:56:4b:f0:61:94:35:cc:a9:0f:c9:b2:65:2b:50:ae:53:a1:
10:54:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org