Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7B8713D2AD7B11EC8523A9E15A40D577.roa
File: 7B8713D2AD7B11EC8523A9E15A40D577.roa (raw, json)
Hash identifier: VeUI+TitEvui8ePL3GVoBxoc1KQ5A4KM9PXDgwZUOpw=
Subject key identifier: 86:FC:FC:54:DC:32:F6:8C:6D:D0:27:17:06:87:75:2C:09:D2:2C:84
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0356
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7B8713D2AD7B11EC8523A9E15A40D577.roa
Signing time: Sun 27 Mar 2022 03:10:41 +0000
ROA not before: Sun 27 Mar 2022 03:10:36 +0000
ROA not after: Mon 27 Mar 2023 03:10:36 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854 (0x356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 27 03:10:36 2022 GMT
Not After : Mar 27 03:10:36 2023 GMT
Subject: CN=623fd5b1-f855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:ba:87:15:f0:d4:02:fb:07:0d:18:e4:2b:
1b:12:b0:cf:0a:0f:c1:71:28:17:da:d7:21:f6:63:
e1:41:98:0f:a4:ea:4b:cd:60:f2:b2:7d:5c:3f:8c:
57:c4:d3:1d:83:8c:ce:af:5e:6c:43:de:c4:39:fb:
5f:9f:5e:a8:90:34:d4:79:f4:a7:80:28:40:65:2a:
bb:75:5b:1b:43:10:07:2c:d8:bd:6b:5f:c4:f2:05:
c1:0c:cb:c5:38:90:ee:f9:de:ca:c4:3d:85:e6:e5:
fc:a3:e0:68:c2:64:03:e9:c8:ae:a3:43:85:01:41:
07:7d:d5:10:c3:6b:ac:77:bd:64:7c:45:f2:db:b6:
31:0b:71:e3:0c:5b:27:dc:09:a2:83:26:8e:c5:6d:
65:42:74:b1:6f:cc:61:24:da:77:9d:08:0c:7f:4b:
01:5c:7b:2b:c8:18:eb:04:a2:0e:a1:02:3e:ac:db:
ee:e6:6a:b8:28:54:5b:41:5e:40:fd:12:5b:98:de:
dc:0f:82:d3:3f:42:30:d6:ea:97:59:13:05:e1:02:
21:06:d4:63:00:3d:0a:06:87:e0:3b:5b:42:58:d1:
0c:6d:60:6d:60:a9:52:99:80:27:a3:fc:ce:fa:72:
9b:62:80:49:1c:fa:5a:b9:e9:3e:b2:8a:12:4e:c4:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FC:FC:54:DC:32:F6:8C:6D:D0:27:17:06:87:75:2C:09:D2:2C:84
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7B8713D2AD7B11EC8523A9E15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
1e:1d:8e:4f:72:e8:3f:ca:ca:a3:90:58:2f:23:0d:97:82:32:
5e:7a:03:ca:8a:3c:0f:b5:23:2e:db:9b:b1:64:77:d2:89:68:
51:d1:8e:b7:e5:78:9e:03:e8:93:39:92:09:6f:b3:c3:c1:af:
1a:8c:b0:74:25:21:aa:36:d1:0f:13:3c:67:79:f9:29:f3:25:
be:4c:d3:ea:31:e8:26:e6:9d:fc:54:2e:d6:ce:4c:b3:05:8f:
ed:a1:95:b9:37:29:8a:d3:6b:ec:69:c8:68:09:1a:0e:d3:d0:
be:e4:22:c7:ae:94:4b:93:33:5d:6b:dd:e7:a7:d6:13:5e:40:
7d:59:82:43:3a:1f:5e:c6:f5:95:1e:85:ed:47:6b:6e:37:2c:
ad:40:53:77:36:10:ab:d0:34:5b:a2:84:66:58:f1:c5:56:24:
2d:37:96:b7:29:0a:3f:72:55:fe:f7:5f:f9:6a:4f:ad:b5:99:
5e:e5:8e:ed:d2:9f:31:20:aa:61:5a:98:b5:45:5a:10:c4:6e:
bf:8c:fe:2b:18:41:1a:d3:69:70:56:68:74:25:c3:8f:7e:8c:
1f:3d:24:2f:00:38:4c:dc:36:b8:a8:e5:63:a5:d4:7e:97:78:
a9:a2:d2:5b:61:0e:cf:1d:b9:59:05:be:32:44:61:e1:10:0e:
a1:17:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org