Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F6C49D2C9BD11ECB6F16294F1222468.roa
File: 7F6C49D2C9BD11ECB6F16294F1222468.roa (raw, json)
Hash identifier: pE1aKvUZfRjgiDxpgMb19ZQSfuePUr03mkC2hBO8UvE=
Subject key identifier: 64:F8:7D:63:A0:26:1D:C3:8B:B1:74:45:B4:33:8D:D3:8A:1F:FA:BD
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0442
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F6C49D2C9BD11ECB6F16294F1222468.roa
Signing time: Mon 02 May 2022 02:13:47 +0000
ROA not before: Mon 02 May 2022 02:13:42 +0000
ROA not after: Tue 02 May 2023 02:13:42 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 2 02:13:42 2022 GMT
Not After : May 2 02:13:42 2023 GMT
Subject: CN=626f3e5a-3a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:3b:c6:3f:41:03:b6:51:73:90:68:7a:7f:
df:70:dd:d1:33:a4:62:08:1b:ec:da:4e:3c:eb:3f:
8e:ce:fd:c4:de:3c:f3:3d:0b:45:f5:37:c0:05:ed:
f9:48:a5:d9:bc:20:e2:bb:8a:bb:a8:97:50:08:da:
44:32:81:6f:df:b3:19:49:cf:aa:a2:bd:6c:6c:ef:
a2:e1:ce:d4:41:52:82:e8:dd:6c:9b:92:62:07:21:
55:19:93:c9:1f:0e:0d:bd:b4:38:71:70:26:05:a1:
a9:a1:7b:58:55:79:d7:6f:db:45:e2:8d:1d:ae:55:
32:d0:84:d1:dd:df:7b:12:75:92:46:bb:2a:6b:e4:
fc:b8:17:ca:05:1a:f5:aa:37:b1:67:cb:89:5a:02:
46:a0:63:3a:0a:c5:e4:ad:01:ed:66:03:6c:10:cf:
33:e7:0d:cb:b2:31:6f:50:92:03:e9:b0:ac:cc:29:
26:c0:f7:0f:8e:58:f4:a3:5a:dc:43:76:d3:8d:78:
69:9d:8c:6c:52:e2:2a:49:2a:15:ff:2e:41:3e:a5:
18:49:ef:ba:76:6c:d8:e2:be:81:5e:21:a9:04:40:
ca:36:1e:d7:38:b7:10:e9:1e:e7:b1:82:99:8f:eb:
d3:a8:cb:5f:6f:c5:a7:c7:14:83:6e:98:49:12:76:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F8:7D:63:A0:26:1D:C3:8B:B1:74:45:B4:33:8D:D3:8A:1F:FA:BD
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F6C49D2C9BD11ECB6F16294F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8e:6e:04:16:47:cc:4c:86:0e:6b:68:6b:f2:24:85:ad:50:
c4:ef:bf:70:9c:34:bd:2b:00:b0:80:b2:b2:23:68:0c:bd:8c:
8a:bd:98:4a:f8:b0:73:06:4a:ce:8b:76:e5:fe:a1:93:91:6b:
99:d0:e3:9f:40:22:00:b7:a5:ae:0d:a1:2c:1f:71:80:0e:0b:
37:26:2a:6e:d0:8f:53:39:f6:a4:9b:0c:bc:bb:22:b5:d7:fc:
f4:fe:dc:42:00:6f:96:4a:26:74:c9:de:9e:42:4d:10:09:d1:
35:d1:06:9d:02:f9:ba:10:97:f3:de:7e:76:3d:49:77:0f:95:
f4:03:19:0f:7e:13:48:09:1f:7d:fd:0f:80:d8:b3:13:72:eb:
cf:89:0c:b3:83:c3:bc:c5:52:45:24:2f:6c:cc:92:81:2e:e8:
4c:ee:49:39:16:dd:32:41:bc:5a:a6:a1:41:26:89:f4:86:d6:
7b:d2:25:a3:d5:0a:92:ba:59:bd:cd:26:32:a4:f1:a8:6c:5d:
34:38:09:80:d7:e5:31:18:ec:50:53:f2:1c:c7:87:e2:18:3a:
be:52:55:a8:d5:da:f6:70:a8:87:b5:38:5d:6b:68:7b:e1:91:
0e:6a:f3:f4:70:6a:fa:be:2f:90:4d:cd:61:5c:91:d4:19:21:
a1:2a:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org