Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/818BDB16DBCD11ECA325FEE0F1222468.roa
File: 818BDB16DBCD11ECA325FEE0F1222468.roa (raw, json)
Hash identifier: 3UjXfTqpBcJ2XgbBTRBtOQPZ7rhgUMcgl3g7B3ht4Mc=
Subject key identifier: C7:D3:2D:33:12:EC:57:AC:F1:E2:76:83:D4:60:0F:42:1E:0A:DB:B2
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 04DD
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/818BDB16DBCD11ECA325FEE0F1222468.roa
Signing time: Wed 25 May 2022 01:53:43 +0000
ROA not before: Wed 25 May 2022 01:53:38 +0000
ROA not after: Thu 25 May 2023 01:53:38 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1245 (0x4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 25 01:53:38 2022 GMT
Not After : May 25 01:53:38 2023 GMT
Subject: CN=628d8c27-1397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ee:6e:06:d1:45:69:bd:c6:86:ca:3d:1d:f2:
e4:07:27:f3:91:51:5d:98:2d:2c:cf:04:9e:a9:7d:
5e:57:5b:52:46:6f:25:ea:c3:2a:c7:5b:a4:85:74:
f0:f8:7d:87:72:42:bd:d5:80:6b:e2:95:1f:71:04:
9f:d2:95:30:76:ef:9a:61:c8:25:bf:60:37:29:8e:
47:95:41:24:10:99:2c:57:eb:77:09:80:03:8c:3c:
50:f8:e3:0d:dc:9d:ae:b8:c8:4a:93:1d:c0:ac:9e:
b1:74:40:ee:37:2e:19:45:c0:d8:eb:6d:b3:4c:95:
34:b2:b0:f5:94:cb:cd:1c:03:02:11:c2:7d:94:02:
d3:11:46:ca:78:df:3d:25:39:f9:dd:3a:f7:1d:01:
d0:18:4b:5e:df:bb:b5:dc:b7:c1:36:bc:71:80:c1:
3a:6e:ce:bd:c5:89:e7:a9:32:0d:c1:b9:39:c6:6f:
23:5b:4f:9c:c4:e0:ef:de:4e:06:c3:9b:bc:b0:a4:
f5:25:83:b7:ac:74:c4:09:02:0e:a3:2b:cd:38:a5:
71:a6:e3:f8:a6:40:96:c6:04:5d:b0:5d:c0:31:0b:
dc:51:ab:6e:99:dd:cc:d7:19:fd:47:46:43:07:b9:
65:16:ea:6e:1c:56:47:4c:a2:e5:17:52:33:d7:4b:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D3:2D:33:12:EC:57:AC:F1:E2:76:83:D4:60:0F:42:1E:0A:DB:B2
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/818BDB16DBCD11ECA325FEE0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
7b:c0:4b:e3:30:15:3a:54:40:fc:87:34:50:fe:0b:31:d9:92:
2e:22:29:01:9d:f0:5b:38:1a:30:a0:97:2a:de:c8:0c:98:41:
de:24:74:01:02:bb:77:99:5b:c0:e6:f5:95:b2:96:71:80:a6:
9b:bd:25:a5:8c:56:d2:86:de:be:eb:1d:96:55:73:bf:54:28:
02:fd:11:02:a9:28:98:b7:58:dc:5a:1b:60:30:4e:0f:8c:f2:
4c:79:2a:94:26:84:31:c7:e0:78:82:37:18:f4:2a:ef:2a:fb:
a3:b1:ee:c3:b2:03:db:38:7d:cd:26:5f:57:14:39:d7:17:06:
1d:e1:b8:95:5e:28:13:f5:21:c0:c6:f6:4d:78:ba:ba:ef:42:
f8:51:f5:a8:16:8c:90:53:07:02:67:f1:77:a2:63:1a:5b:72:
bb:89:a6:6c:43:cc:22:e4:32:fc:94:93:24:7d:bf:a4:a2:00:
52:d8:76:8e:3c:64:48:09:22:95:12:4f:48:94:dc:a1:61:84:
d8:e2:6e:71:cf:86:89:25:95:8f:9f:1d:05:75:0c:32:a4:ab:
5f:77:14:bc:05:89:50:d2:70:f4:24:68:2a:84:11:bb:73:ba:
bf:53:e2:e5:9b:bc:c9:91:95:c4:1f:37:ba:4a:b8:83:59:9d:
84:77:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org