Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7E9F4D56E3B211ECB0AD04BBF1222468.roa
File: 7E9F4D56E3B211ECB0AD04BBF1222468.roa (raw, json)
Hash identifier: h/oJ+345FI7rDOFzowVR06XBF9EY5N0ABVcDkY+mtHM=
Subject key identifier: F0:D6:2D:7B:31:BE:44:57:B1:27:79:DD:11:4D:40:C8:33:CA:98:0F
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0521
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7E9F4D56E3B211ECB0AD04BBF1222468.roa
Signing time: Sat 04 Jun 2022 03:00:31 +0000
ROA not before: Sat 04 Jun 2022 03:00:25 +0000
ROA not after: Sun 04 Jun 2023 03:00:25 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1313 (0x521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 4 03:00:25 2022 GMT
Not After : Jun 4 03:00:25 2023 GMT
Subject: CN=629acacf-dfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:1e:77:4e:e9:fe:1b:75:b8:97:2f:e2:44:
22:a4:48:60:be:84:6c:53:64:83:74:f9:48:6c:ce:
67:bd:5b:f7:d7:60:b1:0a:81:67:6e:44:45:74:0e:
f4:8b:61:4f:28:f9:13:cd:b2:8a:1b:6c:90:15:bf:
ba:d5:8f:84:7a:61:5e:6a:47:ec:4a:8e:89:e7:c7:
35:5f:d0:1a:ab:ad:2b:e7:5e:95:fc:bd:d6:3d:49:
45:59:8f:04:e1:0d:1c:77:93:59:2f:8a:e1:2c:df:
c6:ac:cd:72:7f:83:5c:d4:6e:56:60:af:2c:e1:60:
55:09:e0:2e:d8:4e:6f:b3:90:19:b2:41:f8:b1:54:
2b:80:6f:8d:ba:ac:fa:ef:8e:b9:02:46:f7:52:0b:
a0:af:a7:78:9c:53:aa:a2:c3:8a:81:bc:92:8b:3b:
00:67:99:fb:1b:d6:d6:cf:21:2e:dc:19:a3:de:51:
fb:63:ee:09:75:6c:78:eb:d4:e1:84:d7:d0:ce:72:
90:78:2f:8a:f2:e9:b6:c5:4e:d8:6d:cb:86:f1:7d:
25:58:05:6e:bf:c5:c8:15:59:5a:a3:35:c3:2b:26:
9e:f9:6c:80:fd:88:3c:8f:44:69:e3:f4:c7:84:84:
64:7b:35:03:56:ed:b9:16:71:d9:d0:e8:e9:88:c8:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:2D:7B:31:BE:44:57:B1:27:79:DD:11:4D:40:C8:33:CA:98:0F
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7E9F4D56E3B211ECB0AD04BBF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
76:0d:c5:ef:ee:28:4e:af:4a:cc:5f:5a:ec:bb:83:6d:a4:ff:
c9:49:af:f6:ab:0e:41:c8:91:35:ef:da:a4:da:2e:2c:48:ff:
cf:01:27:b7:a4:10:cd:f2:61:84:4a:5f:dd:b3:f3:eb:e2:05:
cf:db:5c:60:0f:84:7b:65:a6:12:2d:e5:32:fb:84:64:e1:48:
7a:8c:73:8c:4f:7f:41:41:7c:e6:05:8c:aa:0e:fe:d2:36:39:
e9:5e:cb:66:39:b9:30:97:0b:dd:a7:ea:d0:77:30:8a:2e:f2:
53:30:2a:92:e9:c9:44:f9:8f:40:95:cd:e0:3e:4d:53:52:66:
1e:59:05:10:56:e2:c4:c0:19:bd:c8:47:47:9f:f9:4c:17:2e:
9c:06:3d:04:0d:98:de:c8:f3:19:c2:94:e7:3c:32:af:c7:36:
0e:b8:5a:45:03:5a:47:e0:6f:64:e2:6a:b6:82:1c:90:78:a4:
b6:7d:95:49:7c:03:8e:2c:c4:75:af:94:44:0b:18:ee:92:57:
7c:46:e4:b2:65:25:e9:3d:28:55:42:2a:d8:e7:04:be:31:a6:
7f:f0:c7:50:aa:9d:2d:f7:a7:a6:dd:ef:b5:2b:df:e5:ee:c8:
4c:e2:ce:00:12:ce:2c:d1:0f:44:c7:39:fc:8b:a3:26:d3:97:
04:de:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org