Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8F47A29C95F211ECBF9303C15A40D577.roa
File: 8F47A29C95F211ECBF9303C15A40D577.roa (raw, json)
Hash identifier: XAisHzB/YNeEptwr9bz8Obn9oywfHOyRdBtC4esBVa4=
Subject key identifier: E3:49:0F:FF:8A:09:F8:21:0D:4A:69:6F:36:25:0F:8C:01:1C:FD:54
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 02D7
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8F47A29C95F211ECBF9303C15A40D577.roa
Signing time: Fri 25 Feb 2022 04:22:36 +0000
ROA not before: Fri 25 Feb 2022 04:22:31 +0000
ROA not after: Sat 25 Feb 2023 04:22:31 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 25 04:22:31 2022 GMT
Not After : Feb 25 04:22:31 2023 GMT
Subject: CN=6218598c-cb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:96:18:22:86:88:6d:d1:75:84:cf:0d:f9:
4e:76:8b:bc:9d:7c:50:0f:46:cc:9f:ec:ce:30:a9:
55:30:e3:ca:2a:3e:d5:a1:e0:6a:29:65:99:a8:fb:
7a:d7:66:8a:ee:d4:47:2a:a2:b0:8d:ca:1a:1c:57:
1d:c7:d3:f4:09:9d:48:1e:7b:e9:bb:4a:8e:3e:f1:
ec:39:10:0b:d5:a1:31:2f:6d:c0:03:6c:31:b8:14:
43:e4:c8:b2:cc:d6:6c:d7:11:fd:cd:26:a9:8d:8c:
e1:ed:e5:f1:7f:5e:d9:19:7d:b7:e7:4d:fa:f1:d3:
c0:c4:3d:bf:4e:ad:b1:63:14:08:e2:6f:a9:f4:81:
61:ed:2d:00:1f:a8:a9:f7:c2:f8:f7:5c:5d:19:22:
35:44:bd:9b:91:90:ff:e2:83:66:9d:f9:cc:9d:dd:
8d:eb:71:0f:98:13:88:f2:e8:99:d2:6d:e8:cf:c7:
88:37:c2:81:64:61:9c:7d:47:5a:f5:40:c7:02:8a:
d5:38:d2:45:9d:72:40:d6:96:c5:5d:c1:ec:bb:55:
49:15:c7:c5:70:1f:42:1a:e7:3a:bb:9b:eb:95:84:
1c:af:da:b5:f9:b8:fc:5c:cc:32:af:31:f2:3f:6d:
be:49:19:8e:67:0b:d3:69:33:00:f3:d6:15:a9:89:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:49:0F:FF:8A:09:F8:21:0D:4A:69:6F:36:25:0F:8C:01:1C:FD:54
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8F47A29C95F211ECBF9303C15A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
d0:50:e2:9c:27:93:75:10:fc:a8:0a:a6:f9:d9:4b:09:f1:1b:
51:6b:d0:05:75:c0:71:bb:6c:11:7d:1f:f1:fb:b8:9f:ce:21:
80:ff:43:e5:b6:d5:b7:7d:12:9e:8f:a4:d8:eb:da:f0:58:15:
02:56:7b:b9:5f:40:d6:13:48:cf:5b:27:89:48:ce:39:d3:dc:
e7:da:37:1c:63:f4:81:a6:a6:d4:2b:5b:5c:50:47:84:81:ff:
c3:c8:88:59:4a:fa:95:76:8b:1c:14:43:37:11:21:39:30:97:
de:6e:50:92:ec:57:41:6a:1f:06:15:c9:12:c1:f7:c0:55:89:
f8:50:18:d3:01:ae:7f:b2:46:63:a6:af:5e:fd:00:71:6f:74:
94:22:af:c6:d2:f9:e4:1d:31:2b:b0:9e:e5:41:e9:6b:02:f2:
7b:8c:0d:9d:38:75:df:68:01:e3:fd:cd:0f:d3:0f:bb:71:df:
48:e4:7e:b8:62:22:4d:91:11:82:22:c4:fd:b6:80:81:13:52:
05:65:13:a8:b8:a8:00:ef:c2:4d:0d:8a:78:9b:9a:0f:62:6e:
29:13:22:5f:2c:47:35:9e:80:7e:f2:c6:6c:ab:99:a0:9e:5f:
31:81:5e:55:9b:96:02:22:86:42:f3:f5:18:4d:ca:c2:8e:82:
54:a2:ec:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org