Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7B11CFE2D8BD11ECAB955EBFF1222468.roa
File: 7B11CFE2D8BD11ECAB955EBFF1222468.roa (raw, json)
Hash identifier: 6TD7NWDu+F8v6FdWvsHwt4/IMDk1SYccjyqxWET3O/I=
Subject key identifier: E8:54:57:C4:56:9E:82:BD:75:E4:62:51:7D:BD:46:28:00:49:4D:11
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04C3
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7B11CFE2D8BD11ECAB955EBFF1222468.roa
Signing time: Sat 21 May 2022 04:21:27 +0000
ROA not before: Sat 21 May 2022 04:21:23 +0000
ROA not after: Sun 21 May 2023 04:21:23 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 21 04:21:23 2022 GMT
Not After : May 21 04:21:23 2023 GMT
Subject: CN=628868c7-14b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:f3:8c:43:09:ba:f1:f2:ba:a1:96:eb:cf:
42:51:b2:53:72:d0:1b:76:c4:b5:1b:50:e6:6c:1f:
ae:35:76:9a:78:22:05:a4:df:a0:a3:ab:db:57:3f:
66:ad:32:6e:43:cb:8f:41:86:ff:99:c5:65:dc:a0:
74:e8:48:41:11:9f:8b:aa:56:e9:92:21:6b:d8:90:
29:3c:e6:02:27:80:57:5f:db:1f:98:93:1f:18:fa:
5f:b5:a2:bd:88:64:dd:9a:13:2b:63:cc:0f:38:4e:
80:02:00:75:34:d1:a1:47:26:0d:0d:ad:3b:81:35:
81:d8:12:ad:32:f6:da:0c:10:3f:9d:5c:7e:65:00:
46:83:1f:52:12:76:ef:5a:47:74:b9:7f:8a:fa:b9:
6f:bf:a2:27:67:d8:97:e2:ca:1e:c4:80:64:3d:28:
cd:e5:7c:8f:b6:10:5a:f2:15:8e:c1:b0:89:dc:1a:
61:84:d9:bd:69:67:9c:df:43:6a:22:cc:9b:26:13:
20:f9:15:b9:b1:85:ab:40:2d:80:ff:8b:3a:e9:09:
ca:a0:b3:54:be:90:5f:a9:2b:ea:3c:4e:7f:9a:11:
e2:7a:45:43:02:2d:df:12:64:35:73:94:72:52:4c:
78:96:44:f3:50:75:84:96:d1:31:a8:fd:c9:0b:c2:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:57:C4:56:9E:82:BD:75:E4:62:51:7D:BD:46:28:00:49:4D:11
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7B11CFE2D8BD11ECAB955EBFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
6b:36:c7:b4:e1:02:cc:6e:e6:98:0e:6c:96:3b:99:ce:00:c7:
42:39:f6:a5:e5:f7:08:83:f3:00:70:34:f2:d4:1c:97:5f:7a:
de:7b:b8:0f:e5:8d:90:78:b9:e8:db:3a:4e:05:08:02:ba:d9:
11:3a:9a:17:c4:52:f5:b8:46:e0:36:e8:27:3d:a6:ad:5c:82:
0f:fc:3d:58:57:18:8f:07:3b:d4:17:bd:12:b6:5c:ec:01:b9:
ba:12:30:1b:8e:b2:2c:ec:ce:4e:65:73:7e:40:bf:d1:1c:92:
3b:c8:88:92:03:fc:de:37:61:05:09:a9:49:3c:4f:60:7a:9b:
10:68:dc:83:79:c8:34:c9:33:a1:43:8a:e1:97:20:d6:5c:41:
9a:27:0a:b1:a9:07:9c:66:6b:b9:ad:74:0d:fb:56:da:5e:53:
3b:23:3f:f5:c7:4f:b7:c1:ca:61:77:c9:db:f6:64:da:ea:86:
ef:b5:ad:95:2e:1f:db:95:99:7e:3f:25:84:ea:04:d1:ce:93:
4e:75:a2:73:a7:f9:61:69:e6:b1:38:09:af:7d:75:ba:cc:ea:
2c:c7:85:9b:eb:be:63:97:a7:76:8c:e9:69:66:7e:19:67:a9:
57:bf:55:c7:ed:45:13:b0:75:4a:d4:6d:44:8f:14:ae:62:5f:
a1:ac:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org