Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8493125CAB0811EC82400EA75A40D577.roa
File: 8493125CAB0811EC82400EA75A40D577.roa (raw, json)
Hash identifier: ao0GnllfNhIkWuxSMPdBKOtcvzxsFn9dPRrR9SRQKIk=
Subject key identifier: E1:4E:C6:36:24:9F:76:E0:54:CF:EE:35:68:CE:69:13:D3:B0:60:9C
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 033D
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8493125CAB0811EC82400EA75A40D577.roa
Signing time: Thu 24 Mar 2022 00:22:41 +0000
ROA not before: Thu 24 Mar 2022 00:00:37 +0000
ROA not after: Fri 24 Mar 2023 00:00:37 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829 (0x33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 24 00:00:37 2022 GMT
Not After : Mar 24 00:00:37 2023 GMT
Subject: CN=623bb9d1-0a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:5f:6a:37:80:0d:5f:8d:b5:2f:ef:15:c9:
5d:44:ef:0b:26:36:84:0f:42:07:56:bf:a8:ec:42:
f6:30:1c:32:11:24:63:79:55:b1:22:74:de:1c:88:
17:aa:7a:ab:e0:5c:97:a9:1e:4d:f5:b3:78:db:64:
9a:f5:35:1a:55:88:0b:1d:25:0a:52:76:39:eb:8c:
bd:ab:85:5a:47:5a:d4:4b:0e:d0:47:32:3a:ce:f0:
7a:8e:57:04:ad:ad:fb:6c:56:6a:97:f9:1d:fc:bb:
af:61:70:41:36:2e:e9:e2:26:66:5f:28:af:0d:6f:
52:ea:3f:1e:04:73:b4:94:a7:4b:e9:e9:d5:d1:86:
9c:94:d4:6c:9f:eb:9e:26:b0:0a:d0:f7:67:76:bc:
53:78:80:3e:11:f2:39:c9:3b:6c:90:10:b3:a0:64:
8f:3a:d4:68:1e:87:4a:b8:83:62:e2:09:f4:33:e9:
4a:73:e8:14:25:a7:01:fc:cc:ac:a6:fe:c4:62:56:
0d:0f:3b:1c:54:4a:a9:1e:0a:6c:9c:6e:85:05:da:
41:f8:61:20:ae:91:88:10:42:39:8e:ac:c4:29:90:
9a:e1:da:b9:4d:9d:d2:4b:c1:61:59:f9:47:b1:8f:
e3:2f:ae:16:73:0f:33:d8:46:66:11:f9:e4:a6:58:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:C6:36:24:9F:76:E0:54:CF:EE:35:68:CE:69:13:D3:B0:60:9C
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8493125CAB0811EC82400EA75A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
b1:77:a2:e0:4e:67:48:02:ec:f9:c1:84:bc:03:f7:51:cd:80:
24:51:bd:a3:8f:70:3e:d4:80:d2:e3:b5:ac:8d:ae:44:a7:78:
b4:48:36:5a:bf:9e:99:d5:4c:92:fb:cc:b3:47:39:b8:27:2d:
45:49:f4:e8:c9:64:ee:d5:ec:ca:7c:26:cd:db:54:aa:7c:10:
9f:5a:6d:63:00:d5:17:c6:33:92:c1:d4:83:43:62:ed:fe:7d:
64:3b:39:20:95:78:64:81:d5:08:62:e2:07:7a:d1:81:c5:e2:
b6:2b:04:fc:36:6e:c6:60:31:50:9a:c3:4f:70:30:0b:5b:9b:
e4:7b:0f:05:76:46:50:8d:5a:48:f3:1e:d7:ea:0d:68:75:c6:
cf:e8:e7:e7:53:9b:6f:0e:50:16:32:25:f4:53:6f:f4:35:f5:
a6:85:7c:ba:cf:58:e5:e6:7f:ae:d6:74:8a:c1:e8:89:1d:95:
3c:09:7f:b7:8a:73:21:ff:47:48:33:be:f3:67:fc:6c:7f:79:
f6:60:74:65:33:da:3f:21:fc:f1:c8:33:57:60:28:30:3c:d6:
f2:17:3f:f8:ea:cc:44:58:5e:ff:11:70:8e:ec:99:ac:4f:bb:
58:d8:8c:45:c7:aa:6a:aa:6e:38:76:c4:7d:cf:fc:9e:0c:c6:
7d:1a:ee:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org