Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8820FA54F2AE11EC97A7B6D8F1222468.roa
File: 8820FA54F2AE11EC97A7B6D8F1222468.roa (raw, json)
Hash identifier: D+awMhQVcZwBMjupBK8XCswOiwhBfAS90/3iYm1sEII=
Subject key identifier: 15:DC:77:AA:7F:8C:C1:9F:37:2B:29:49:1E:EC:0B:24:70:08:F4:FC
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 05A6
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8820FA54F2AE11EC97A7B6D8F1222468.roa
Signing time: Thu 23 Jun 2022 04:39:56 +0000
ROA not before: Thu 23 Jun 2022 04:39:51 +0000
ROA not after: Fri 23 Jun 2023 04:39:51 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jun 23 04:39:51 2022 GMT
Not After : Jun 23 04:39:51 2023 GMT
Subject: CN=62b3ee9c-5e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:7a:97:b8:96:1f:cc:92:50:f8:2a:7c:11:
5a:cd:c5:bc:d3:e6:75:e1:62:16:ba:60:33:d0:08:
fc:a0:5e:2f:ee:91:e6:8e:12:30:9b:26:70:1b:fe:
9d:4e:70:5b:63:d0:93:11:01:cc:19:b1:6f:ff:ec:
9a:65:8b:b4:c7:b4:ee:04:e5:7a:dd:4b:42:44:c6:
99:85:d7:dd:e3:15:02:a8:57:fe:ac:d4:36:1a:ec:
6c:f1:21:e4:2c:ec:fa:d8:43:90:8f:b0:4a:d9:0a:
84:50:a3:8e:b9:c8:18:06:b2:d7:1f:bb:57:b3:62:
03:6f:25:21:46:65:63:03:52:3e:1d:44:f7:1b:28:
0e:b3:76:b5:75:11:98:bd:68:b3:6e:0c:37:15:3f:
eb:c1:f1:6b:78:6c:ee:e0:3a:57:3c:2c:22:8f:a1:
97:d6:00:95:e6:52:59:db:5e:af:ac:1f:4f:ab:b8:
43:de:ed:c3:3d:d0:ff:ed:09:df:ed:1b:27:b9:9e:
e0:93:b0:a6:b3:f1:c1:3c:2f:e4:e0:8f:2e:e7:d0:
11:1b:7d:7b:3f:f2:61:aa:87:77:73:9e:b5:0a:8c:
3a:e1:38:60:f7:57:ca:5e:2f:d1:b0:37:dd:d0:d3:
e9:7e:af:0a:f6:cd:7d:8c:91:fe:9d:62:13:b4:54:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:77:AA:7F:8C:C1:9F:37:2B:29:49:1E:EC:0B:24:70:08:F4:FC
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8820FA54F2AE11EC97A7B6D8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
61:63:77:f4:1d:09:50:33:96:09:5d:ae:1e:09:07:ff:f4:90:
5e:7a:47:6a:6d:c4:c8:56:1a:23:c2:d2:28:e1:8d:99:eb:97:
1d:2f:66:17:88:b9:77:2a:77:21:10:0e:6d:db:c3:d0:63:2b:
5b:e1:47:a8:27:34:d4:7a:8e:95:b9:ea:00:16:de:67:d1:3a:
79:ff:d3:6a:e4:cc:34:f4:6e:7c:8d:f0:b8:77:b9:d2:6d:64:
28:72:6c:38:88:1a:1c:0c:fb:67:4d:36:76:d2:fb:8a:8d:31:
bd:18:8a:18:08:2e:df:a1:21:c7:d5:3d:20:ff:e5:55:3e:24:
8c:f4:f6:f5:fa:ae:b0:53:03:18:8c:17:e8:f8:8e:2c:8d:bb:
84:81:80:05:17:5c:83:45:9c:73:4a:cc:ea:4e:6e:19:c0:19:
c3:c0:21:bc:a1:85:c5:80:99:dd:2d:38:01:c1:68:3c:54:4c:
78:e7:01:df:3b:f2:28:0f:8b:9a:b5:ab:28:48:cd:81:01:d8:
a0:9b:d0:b7:21:09:31:bd:4b:9d:d2:20:b5:4f:ee:00:ac:6a:
56:59:81:cd:54:46:d5:71:70:09:7e:c2:0f:3a:2c:50:05:a3:
a4:bd:26:f3:76:3a:d2:3e:c6:83:27:c8:2c:a1:ab:30:28:87:
86:19:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org