Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F0F2252848511ECAE8AB2885A40D577.roa
File: 7F0F2252848511ECAE8AB2885A40D577.roa (raw, json)
Hash identifier: hOWrVR3YJpOegPV42QVH8m5+/nwtIAmfNH0IrBMUb88=
Subject key identifier: D0:F4:40:28:A4:95:95:3E:AE:D9:42:F5:FC:56:68:11:52:9B:61:15
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 023B
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F0F2252848511ECAE8AB2885A40D577.roa
Signing time: Thu 03 Feb 2022 00:09:04 +0000
ROA not before: Thu 03 Feb 2022 00:00:59 +0000
ROA not after: Fri 03 Feb 2023 00:00:59 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 3 00:00:59 2022 GMT
Not After : Feb 3 00:00:59 2023 GMT
Subject: CN=61fb1d20-91eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:d2:ab:94:4c:af:54:2e:9d:98:a2:79:0a:
eb:c7:c8:ef:73:2e:68:e3:d2:01:b6:9f:7d:17:85:
0b:5d:56:e6:b1:50:d2:e1:e7:23:fb:49:95:32:c1:
3c:06:d0:b3:e0:d7:b8:41:61:4e:7d:60:0c:f3:98:
3a:69:af:80:d4:b3:c0:da:b6:21:d4:51:4c:7b:61:
4b:51:d7:73:06:37:2f:39:f1:2a:98:54:04:ae:e6:
9f:1b:c8:b0:5d:01:4f:6b:f6:47:fd:8b:6b:53:62:
c1:e9:4c:0a:15:85:6c:99:27:71:23:f5:74:88:4e:
68:44:bc:44:34:83:a9:e8:2a:7d:07:39:b1:50:25:
06:19:97:bb:ff:67:00:7f:46:06:02:90:74:56:6f:
11:81:5e:bd:c9:a4:7d:78:ec:28:6c:c0:e4:45:bc:
01:f9:4d:9a:1d:26:d3:6c:3a:e4:3e:33:07:a9:99:
66:a2:62:d8:ce:63:92:66:ae:97:2c:cc:b0:b7:a2:
c9:3a:45:ff:81:b1:7a:0d:04:9f:f8:06:de:28:7e:
ac:23:6b:5e:4c:4f:91:4c:47:f3:b1:31:b0:64:27:
07:cd:ba:7d:0a:48:1b:56:b8:20:9d:a9:45:8a:01:
56:f3:2a:ab:02:04:60:0f:68:18:a7:f3:83:22:ce:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:40:28:A4:95:95:3E:AE:D9:42:F5:FC:56:68:11:52:9B:61:15
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F0F2252848511ECAE8AB2885A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
0f:5d:3e:7b:c3:82:d3:29:4e:0f:20:f3:84:a1:34:25:70:b5:
94:47:b9:29:b5:28:d5:7b:4c:c6:e9:1a:03:18:1e:8a:7f:ea:
bf:77:ba:f6:28:f0:c4:b4:8f:8e:c7:28:a1:c7:ba:b4:1c:52:
2a:2d:92:de:f7:58:f9:37:c8:64:f5:be:86:cb:1e:59:79:86:
c3:02:39:0a:c0:91:e2:d5:56:54:37:3c:9d:22:7c:b7:54:fc:
53:fc:e2:2c:04:c8:2a:db:55:99:8d:b6:a2:aa:60:4f:de:c6:
75:f2:ab:25:eb:05:4b:54:78:cd:37:ea:b3:82:e5:ff:d9:55:
59:5e:c7:e8:cc:06:7f:73:74:49:7c:f1:7f:c0:e1:68:9b:93:
e8:0c:7b:1d:8f:26:26:17:14:59:f4:83:c9:87:29:3a:d9:4f:
de:af:08:87:cd:7c:90:88:bf:e3:1a:e9:05:cb:86:53:15:0b:
2e:19:81:5f:9c:18:3d:9c:85:c7:5e:73:b8:71:b9:33:60:fa:
14:74:65:b0:4e:f6:a6:02:81:63:40:01:b1:ee:92:cc:71:76:
21:1c:5c:40:94:aa:ef:19:c8:b5:da:25:d5:56:72:dd:e4:23:
71:c2:60:04:d1:b0:8c:e1:67:7e:67:b8:66:6e:72:d1:6a:02:
0f:93:66:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org