Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7C918EBE8EC311ECA608B99F5A40D577.roa
File: 7C918EBE8EC311ECA608B99F5A40D577.roa (raw, json)
Hash identifier: 5+Rv/E8EAOkmVN9lG5Teh5KC3CPENIVgmPPYZ5FCeCM=
Subject key identifier: FB:BD:0F:25:6B:82:62:99:73:88:71:3B:CD:F8:52:52:16:E2:BC:EE
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0295
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7C918EBE8EC311ECA608B99F5A40D577.roa
Signing time: Wed 16 Feb 2022 00:58:00 +0000
ROA not before: Wed 16 Feb 2022 00:00:55 +0000
ROA not after: Thu 16 Feb 2023 00:00:55 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 16 00:00:55 2022 GMT
Not After : Feb 16 00:00:55 2023 GMT
Subject: CN=620c4c18-a8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:a2:94:83:02:a6:25:20:8d:e2:70:69:71:
ca:80:fe:8b:ec:a1:09:44:e0:57:4e:39:5c:39:09:
12:d6:c7:09:d5:6e:24:91:c5:05:f1:ab:09:15:5b:
41:16:04:ce:fa:1b:a4:76:0b:8a:e5:f8:df:14:cf:
47:41:e5:30:8d:9c:7d:f9:3c:12:ba:45:ba:8a:f1:
45:cd:dc:0f:79:8a:03:3c:7f:ae:6d:2c:21:d2:15:
a5:b6:3c:05:c5:2f:26:88:3b:81:3e:b8:88:6c:6c:
0e:a7:af:4c:a2:46:e4:fb:15:1f:11:20:97:82:c8:
2c:69:63:b3:a6:ca:89:f6:69:21:ca:b4:e1:be:8c:
d2:1d:21:bb:a4:0e:dc:ab:19:65:e8:ab:08:2d:7d:
de:93:40:17:cf:7b:aa:5e:90:08:80:2c:85:34:5c:
aa:eb:cc:fd:2d:45:cd:20:5a:21:60:54:40:f7:1a:
a4:59:8f:87:66:9f:94:bd:be:88:df:12:0a:52:3b:
cc:12:6e:7a:e7:b2:cd:fd:91:36:a2:0c:41:96:97:
b7:08:c8:b1:b6:73:04:06:17:ba:d6:06:c4:28:cc:
e6:a7:3d:73:1e:0a:ba:26:64:e8:88:e9:6a:a9:af:
2d:6a:96:c6:d6:48:91:15:6b:00:5d:dd:f1:4b:fa:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:0F:25:6B:82:62:99:73:88:71:3B:CD:F8:52:52:16:E2:BC:EE
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7C918EBE8EC311ECA608B99F5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
cb:6b:f7:21:f0:6e:11:3d:f8:68:bf:fa:b3:0c:08:e3:a4:64:
25:3a:d2:81:0d:97:5f:9f:23:5e:85:fd:50:fc:6f:67:ca:53:
34:fa:be:f0:5f:3f:7d:46:04:98:63:50:9a:de:81:09:a2:a8:
89:cd:6e:0b:25:45:02:0f:24:29:fd:d6:44:b0:37:cb:01:ac:
c6:97:84:2e:44:47:b8:26:b7:22:f5:13:f8:0e:a0:74:6b:07:
aa:19:08:7a:8f:26:1a:14:07:0e:f1:7a:80:aa:74:a7:49:0a:
9c:af:ab:57:d3:07:e0:32:6b:f5:cd:9a:fd:50:ec:7d:e1:47:
f8:86:a6:09:0b:28:70:7a:ed:ce:0b:dc:8a:e1:6d:60:ac:7c:
25:63:ee:d7:96:de:aa:b2:b2:aa:bf:9e:7e:20:4c:4b:0b:52:
02:a8:80:c6:07:b2:09:35:94:40:5e:32:56:2c:93:2d:57:10:
ac:4f:34:09:81:6b:7d:09:80:91:0a:43:c8:0f:35:48:1a:a2:
b5:8d:fd:09:ed:ef:1f:48:53:fb:a5:95:96:95:44:95:44:db:
6c:95:e5:d9:de:95:ff:d0:e6:c9:8f:4e:de:fc:c0:96:19:b2:
e6:0b:82:c4:7e:dd:de:18:67:e1:68:4e:69:b4:1c:ca:07:45:
66:76:fb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org