Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5C31E5E492AE11ECA702039F5A40D577.roa
File: 5C31E5E492AE11ECA702039F5A40D577.roa (raw, json)
Hash identifier: 7MRVdKI3B7vO/ClEfT0u9cYUrKZierz49GVjrOmXoLs=
Subject key identifier: 32:54:EC:E9:F8:81:F0:0F:70:6B:EA:A2:FF:C5:79:67:52:0E:E8:F6
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 02B8
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5C31E5E492AE11ECA702039F5A40D577.roa
Signing time: Mon 21 Feb 2022 00:36:51 +0000
ROA not before: Mon 21 Feb 2022 00:00:46 +0000
ROA not after: Tue 21 Feb 2023 00:00:46 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 21 00:00:46 2022 GMT
Not After : Feb 21 00:00:46 2023 GMT
Subject: CN=6212dea3-eeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:a3:1e:68:88:50:30:9a:eb:95:92:f0:98:
28:c7:51:d7:88:6d:9a:df:25:5b:3c:19:76:25:9d:
a3:de:0f:88:d9:eb:57:97:56:d7:74:cf:6a:57:46:
41:09:e3:b1:ae:2d:5e:3b:06:49:dc:a1:46:95:f4:
d4:f2:a5:97:e2:5a:b8:74:fe:c5:d2:2a:72:fa:27:
67:fd:b8:12:93:18:9d:c8:08:e5:8c:05:81:f4:69:
4d:6a:77:66:f6:6e:40:37:cd:47:1a:5a:65:bd:34:
8b:2e:ad:d0:f4:89:f2:ba:7b:4c:f9:8c:fe:50:e9:
54:5f:de:0a:b8:af:1c:b8:63:5a:54:46:2c:a0:55:
f2:b4:ab:b0:4d:4e:fb:9f:c1:5c:d7:38:45:4b:44:
f6:e3:f0:d1:26:cb:f9:4b:bb:46:66:93:5f:1a:35:
b1:32:d4:d6:63:6a:88:94:b1:12:4f:2e:67:35:94:
af:12:e8:5d:46:c2:1a:48:5f:44:fb:13:0d:0e:10:
cc:a0:30:27:af:4e:10:a5:72:be:5e:60:28:c3:81:
7a:73:80:9c:d9:ed:b8:70:3b:04:0e:a2:45:49:59:
72:b9:8d:bb:f2:5f:56:3f:4b:da:a8:27:21:37:1a:
b1:23:92:05:38:9e:c8:b7:47:01:6a:21:a6:a0:21:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:54:EC:E9:F8:81:F0:0F:70:6B:EA:A2:FF:C5:79:67:52:0E:E8:F6
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5C31E5E492AE11ECA702039F5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
67:8d:75:a6:30:d1:70:7d:2a:03:11:14:f7:24:46:e4:50:c6:
a3:29:40:ef:2b:19:12:ea:ab:86:93:66:43:c1:a7:db:90:46:
f3:d0:df:0d:56:2c:89:4d:61:14:e7:1b:42:48:a7:1e:5c:57:
36:83:9b:49:3f:02:3d:94:49:62:20:5e:a5:99:f2:a8:19:94:
b5:00:99:12:de:49:0a:95:cb:ff:0d:ff:86:7c:c2:27:ae:fc:
cf:ed:23:4f:d4:2f:99:18:8a:70:82:96:fe:d9:21:bb:e6:95:
e1:ed:19:09:b8:cc:c1:8a:db:ab:3c:4d:e7:7d:1f:da:e8:8b:
37:b5:b1:b1:31:1b:18:c5:31:15:19:a7:30:ec:1f:6a:a5:b3:
06:e1:40:e6:64:dc:fc:e3:ff:7f:43:03:0c:b5:49:be:bf:95:
dd:cf:6d:6d:bf:34:f9:ff:cb:03:7d:9b:84:f4:ea:24:64:e1:
fd:ac:2c:7f:c6:7b:a8:30:2e:a3:c9:80:bb:c1:29:c8:dc:d9:
ed:36:cb:8e:7f:8e:0d:0e:45:0b:85:80:ea:97:d8:b7:f6:c2:
2a:e3:d6:0c:a6:77:e9:b6:a9:42:10:0f:4e:dd:81:94:88:07:
2c:db:71:ec:64:b4:e6:f5:54:fc:00:cd:27:4c:da:7e:6b:7d:
2f:8e:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org