Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/666E1CB4330B11EDAA0CB2E6F1222468.roa
File: 666E1CB4330B11EDAA0CB2E6F1222468.roa (raw, json)
Hash identifier: QN6nnzccwvlTbfIl+QGcrsVzkBzweTAqyEU7q6amr/U=
Subject key identifier: A7:78:5C:F5:3C:E8:2F:F8:DD:52:89:82:20:06:F1:B6:EE:CE:DF:C8
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 06DB
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/666E1CB4330B11EDAA0CB2E6F1222468.roa
Signing time: Tue 13 Sep 2022 02:25:57 +0000
ROA not before: Tue 13 Sep 2022 02:25:54 +0000
ROA not after: Wed 13 Sep 2023 02:25:54 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 13 02:25:54 2022 GMT
Not After : Sep 13 02:25:54 2023 GMT
Subject: CN=631fea35-3c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:ac:a3:9e:1a:73:62:e3:e9:e9:28:c0:09:
01:7b:a0:02:82:e6:57:69:5e:6e:79:6d:18:1e:b4:
09:43:3c:64:bf:be:35:b1:9d:bd:a0:a1:24:41:16:
27:e7:12:3c:21:5e:50:ca:f4:29:b7:dd:a2:27:0b:
46:63:ee:e3:03:0f:7c:3a:82:7a:81:7a:fe:89:5d:
0b:72:84:58:74:7a:92:37:f8:51:f6:d8:3a:71:f1:
16:98:8d:e1:e3:16:db:d2:22:f7:1b:ef:d9:2d:0b:
c4:35:6a:dd:32:b1:14:5c:55:3d:00:f3:ff:84:55:
a7:d1:46:10:ab:c7:fa:aa:de:d4:cd:a6:11:36:b3:
4c:ba:91:40:23:5f:21:0e:31:4b:c0:20:d5:bd:03:
6f:4d:16:65:e5:2f:d5:76:79:ce:fc:d2:7b:8d:ec:
e6:c3:f8:30:18:a7:a5:5b:f1:1b:55:54:13:54:c6:
30:f3:02:51:5b:57:45:e7:f3:6d:b6:c1:10:e2:11:
61:ae:ad:18:77:22:90:80:41:f9:a6:d7:8f:af:8b:
83:4a:21:9a:37:b0:be:6f:ae:8e:35:ca:e3:c2:4c:
7a:04:65:37:29:f8:7e:30:ff:9b:ff:d2:00:a1:5b:
f9:b4:1b:cb:83:e3:ac:d3:10:2d:09:f7:a6:49:70:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:78:5C:F5:3C:E8:2F:F8:DD:52:89:82:20:06:F1:B6:EE:CE:DF:C8
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/666E1CB4330B11EDAA0CB2E6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
27:b8:4a:ed:05:fb:aa:3a:45:05:12:01:28:60:3c:a0:97:98:
a1:65:a1:38:32:06:05:5c:a0:32:e1:9f:ef:6a:40:b9:e8:5a:
61:fd:56:14:ed:8f:99:78:2f:9a:25:5d:15:25:ae:d5:34:65:
29:e6:50:31:1c:de:00:49:ae:93:52:f3:0b:8d:db:20:0d:a6:
59:6c:7c:6a:29:ca:a8:57:d1:0b:02:67:47:1c:30:ee:2a:9a:
84:8a:9a:54:47:71:e2:38:1a:ab:08:6c:22:93:0c:dc:54:b3:
7e:3c:93:67:f5:94:66:0b:24:f6:19:e8:3a:23:dc:b1:ae:5e:
8d:66:63:e4:15:ff:23:e6:94:2c:3e:68:bb:89:7b:89:e5:f1:
bb:0f:84:5a:0f:72:c8:c3:c6:bf:ac:50:25:1d:94:f1:c1:fd:
15:3f:6f:d4:ce:36:ec:89:6c:65:42:09:2a:c0:a1:a8:f8:cd:
7a:76:fa:1a:11:ae:68:c7:7b:92:20:80:84:a0:8e:ad:0e:dd:
c9:45:a3:63:58:c1:f2:03:51:07:08:1e:ef:c4:94:49:3a:ee:
be:5a:06:bf:06:77:ad:1b:5b:5d:9c:a4:8c:b9:be:16:3f:09:
4f:44:c3:f8:69:16:62:61:c8:80:6f:87:19:bd:55:65:eb:77:
8d:a1:e0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org