Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5CDB687AF35811EC8F5157EBF1222468.roa
File: 5CDB687AF35811EC8F5157EBF1222468.roa (raw, json)
Hash identifier: vY5ZaSOCFI+Shd68KdO52si+Vy+mOOsm3XdHmpgxr/s=
Subject key identifier: 8F:16:8D:E6:36:3F:7B:8C:2B:3E:3B:A5:ED:0E:82:92:C3:AE:2E:7A
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 05AC
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5CDB687AF35811EC8F5157EBF1222468.roa
Signing time: Fri 24 Jun 2022 00:55:38 +0000
ROA not before: Fri 24 Jun 2022 00:00:34 +0000
ROA not after: Sat 24 Jun 2023 00:00:34 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 24 00:00:34 2022 GMT
Not After : Jun 24 00:00:34 2023 GMT
Subject: CN=62b50b8a-ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:93:bd:d9:94:ec:91:ec:e8:2d:d2:5d:f9:
85:67:d4:cd:9b:31:ea:90:63:b2:a8:06:78:00:0b:
40:ee:8f:46:64:17:2f:c8:be:d8:6f:84:40:65:2d:
0f:f1:46:51:71:ad:af:d9:bb:fc:ab:2f:3d:35:3a:
a5:1f:3b:ff:6a:6a:9b:33:0f:b1:df:9d:c3:77:7f:
25:6b:98:60:a3:a8:ab:19:6d:f9:bf:05:76:21:e5:
0c:e9:22:51:31:65:ba:0f:52:7f:2e:f9:fd:d2:e7:
4a:4e:bd:85:db:d8:38:a5:19:06:41:37:b8:98:93:
34:26:1c:35:33:1d:a1:de:5c:a2:7c:29:89:55:56:
36:eb:8c:f1:b4:c3:49:02:90:30:53:9d:f3:08:44:
bc:46:09:dd:95:d1:1a:79:e5:fa:53:fd:e0:f5:dd:
50:ff:95:f9:cf:21:7c:87:c1:e5:b7:04:07:12:f2:
fb:2f:54:e0:8a:c4:ee:a8:72:da:1b:a9:83:58:e8:
92:87:61:ba:a9:80:67:48:73:61:5d:24:fd:0b:aa:
98:cc:8b:44:bb:02:57:2e:99:3a:4e:a9:3e:87:34:
f1:e9:02:01:7f:96:4f:93:f8:15:08:e3:f2:7d:e4:
84:54:54:db:79:b2:15:2d:7e:3d:76:7c:e5:37:e5:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:16:8D:E6:36:3F:7B:8C:2B:3E:3B:A5:ED:0E:82:92:C3:AE:2E:7A
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/5CDB687AF35811EC8F5157EBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
92:a5:c1:54:a1:f0:68:a4:c7:fc:dc:96:14:42:97:99:2d:58:
9b:39:4a:a0:e5:43:48:01:6b:3e:9f:ee:22:c8:d6:a6:cc:07:
fc:d2:1f:18:78:ed:19:ba:5e:fb:15:d9:52:6f:25:22:42:6b:
b4:8a:21:d9:13:96:bc:7b:64:1a:b3:e2:24:ae:28:bd:34:3c:
ad:f3:bc:f7:1d:3c:a8:a3:b8:db:48:14:4c:9f:04:08:dd:30:
7c:fb:a8:54:63:11:3f:5f:19:9d:c7:9f:55:e7:99:03:c2:b8:
28:70:f2:58:d6:54:6f:14:aa:fc:00:e8:2d:1c:d8:06:54:20:
f8:4d:31:94:9c:05:6f:ee:b8:a9:1d:64:23:57:9d:36:f5:dd:
ae:63:06:13:9f:4c:42:41:06:ed:7a:c5:1b:24:63:cb:9c:63:
58:f2:e1:1b:da:f5:91:d1:1f:2c:aa:3d:7f:91:68:a6:00:e9:
61:8f:5c:f0:27:6e:43:f8:7e:75:8f:0d:1f:cf:d7:7d:7c:68:
97:af:e3:c9:c7:4a:64:e9:10:e2:54:e7:62:fd:b2:0d:c9:8a:
54:4f:5e:65:d2:e0:a6:85:9b:e4:c7:02:f9:cc:ab:03:43:3b:
b4:09:c0:47:e9:28:74:24:66:2a:f4:d2:71:d8:40:bf:cb:84:
f6:0c:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org