Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/850B2B0ACC0C11EC9A9BA4CEF1222468.roa
File: 850B2B0ACC0C11EC9A9BA4CEF1222468.roa (raw, json)
Hash identifier: i2lIoR0JiuCSeHgqSjtk/8mvPqVxWaK2IXfeL+yI6Dc=
Subject key identifier: CB:1E:97:00:E7:7E:63:A2:A9:26:54:C5:9B:5E:3F:9E:F2:EE:AB:EB
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0456
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/850B2B0ACC0C11EC9A9BA4CEF1222468.roa
Signing time: Thu 05 May 2022 00:44:28 +0000
ROA not before: Thu 05 May 2022 00:00:24 +0000
ROA not after: Fri 05 May 2023 00:00:24 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 5 00:00:24 2022 GMT
Not After : May 5 00:00:24 2023 GMT
Subject: CN=62731dec-a02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:ba:e7:a7:a5:a6:23:97:67:49:fa:3c:47:
d6:24:9f:eb:c4:ff:92:59:d0:be:51:76:aa:40:54:
87:fc:c1:81:a7:cf:a1:2f:25:68:42:c0:17:40:eb:
23:9d:2c:cc:fe:34:82:b0:6b:f6:99:40:cc:7a:6e:
e4:60:fc:47:d6:7d:a2:26:2c:f3:6b:07:57:7d:02:
aa:2a:7c:3d:a0:c0:8b:9f:b6:82:05:fd:17:4b:21:
05:b2:e9:19:b4:be:44:67:0f:43:d1:0c:a9:7e:db:
0d:60:5b:a5:81:3f:79:60:f2:b0:d8:ed:11:8e:5d:
98:15:5e:5b:2c:a4:0a:56:14:89:39:9e:7b:17:3c:
b9:51:02:fd:6a:21:6e:2f:d9:dc:41:af:4a:e0:d3:
30:00:f2:77:fa:1a:18:fa:1e:87:24:d2:30:48:48:
08:b3:fa:91:50:44:e8:9b:f2:09:dd:7c:1d:c2:e4:
62:fa:1f:2c:9d:fa:86:c5:8a:72:87:54:29:0f:03:
71:e2:de:76:b4:cb:5b:0d:ec:31:33:3b:78:bf:d6:
58:f2:6f:61:26:f2:56:8b:59:78:1f:7f:b2:dd:e8:
d1:f8:0a:b7:a0:1e:3d:60:39:b7:a5:c4:a2:b0:31:
18:10:6b:e5:59:74:d3:7d:ef:1c:88:37:57:31:0a:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:97:00:E7:7E:63:A2:A9:26:54:C5:9B:5E:3F:9E:F2:EE:AB:EB
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/850B2B0ACC0C11EC9A9BA4CEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
56:41:1b:00:7b:e9:6a:32:fa:ab:96:33:f6:60:0e:de:48:fc:
0c:3a:f9:94:7e:a5:8b:87:89:d3:65:8d:23:55:5f:b1:ff:cc:
c8:13:bb:b2:32:e8:42:85:13:68:b6:f6:6b:f9:68:e1:29:ce:
60:4f:a1:31:7a:ee:6a:e6:88:85:e6:e9:b4:8e:73:15:63:69:
27:f3:a2:78:a1:3a:9b:56:3a:85:6f:f9:d8:3c:0e:f5:f6:ea:
d8:e8:f8:a8:21:a4:31:15:6f:db:73:37:cf:37:62:59:dc:97:
bf:de:eb:01:81:fd:a1:39:da:e4:64:b5:e5:c0:1c:e2:13:c3:
f8:e2:d6:c4:1b:dd:ce:da:b2:5f:e5:f5:fb:b2:d3:b4:a0:94:
69:5a:84:53:0c:10:d9:88:d7:5b:fa:44:3a:90:93:3b:f7:3a:
e8:df:de:c8:9e:6d:37:92:50:39:55:62:75:d9:ee:3f:dd:86:
ad:67:d4:69:dd:b1:5a:fc:dd:42:0f:de:30:af:0f:8b:da:c9:
11:3d:d2:e8:7f:44:ab:eb:a2:3a:e3:42:8e:5b:41:b4:db:b6:
eb:0b:c3:7c:df:2d:b5:b9:da:34:25:af:32:77:b4:13:28:0f:
53:2d:5e:79:c0:9c:e3:9f:d1:5b:07:b0:fc:c5:96:12:c7:4f:
57:d9:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org