Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/91F2E496394611EDB9865FDEF1222468.roa
File: 91F2E496394611EDB9865FDEF1222468.roa (raw, json)
Hash identifier: ZWCY2VTKpW9JJgvJwHGXwJFUP0gAAw+DN9jtNIs7kXI=
Subject key identifier: E4:26:E7:F8:9F:E7:06:93:5C:95:36:B1:79:CC:EA:02:D5:27:4A:63
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 070D
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/91F2E496394611EDB9865FDEF1222468.roa
Signing time: Wed 21 Sep 2022 00:44:38 +0000
ROA not before: Wed 21 Sep 2022 00:00:32 +0000
ROA not after: Thu 21 Sep 2023 00:00:32 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 21 00:00:32 2022 GMT
Not After : Sep 21 00:00:32 2023 GMT
Subject: CN=632a5e76-50c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:85:8b:4e:fa:02:d1:9c:f5:3d:46:45:c7:
e6:d1:93:aa:5d:ea:d0:9e:0b:77:4c:94:5c:e6:55:
e7:8f:a2:3b:5d:b4:cb:62:a4:d2:5c:36:59:d2:41:
57:3d:18:1c:cd:9a:5f:24:64:34:70:c4:4a:e0:a3:
f2:6c:d9:8d:17:5a:7a:69:bc:19:df:de:30:42:11:
97:bc:2b:5e:63:05:6f:74:05:d6:3c:07:58:8f:b4:
92:66:d1:7b:0c:7d:f2:3e:c2:d2:cc:12:07:8e:e1:
51:8b:5a:d7:aa:1f:82:bb:d3:4d:26:b3:10:83:43:
ab:37:25:02:26:b6:cf:c2:cf:4d:96:78:a7:1e:e2:
a0:08:56:d2:93:91:2a:5c:05:78:10:e7:6a:86:ca:
dc:4c:2d:6a:7e:11:18:e8:7d:dc:11:2e:12:22:a4:
c4:60:c7:38:54:e4:a3:cd:c0:51:c8:36:a3:ff:83:
1d:93:01:91:65:f8:a6:31:bb:e0:bf:84:45:c7:36:
d1:fd:15:0c:6b:3f:00:2d:2f:40:96:4b:f8:c9:d0:
48:03:e5:28:c2:88:f2:ef:aa:94:36:93:3d:b3:3b:
66:71:bc:78:22:a8:7c:13:3b:50:28:07:0f:0b:22:
1a:f9:18:07:3c:60:66:ca:1d:9d:b3:df:2e:b0:15:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:26:E7:F8:9F:E7:06:93:5C:95:36:B1:79:CC:EA:02:D5:27:4A:63
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/91F2E496394611EDB9865FDEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
47:7c:5d:e3:62:71:4a:dc:c1:f9:96:1e:da:80:f6:9e:48:17:
58:54:b2:93:08:f8:73:f4:ee:c1:29:10:73:aa:38:15:6b:2e:
74:08:6f:45:32:87:fd:8b:d1:e2:9f:8e:53:17:11:dc:8a:95:
02:89:fd:e2:25:c5:1b:c8:2c:a5:2e:4e:89:e9:02:67:d9:0b:
b6:de:b5:5c:b7:6f:34:96:cd:90:2b:8c:4a:cf:c3:81:ed:9d:
4e:c9:16:32:0a:2c:64:f0:9b:0e:e4:3b:fc:08:5d:ea:3d:95:
4c:34:4c:02:b8:e5:d7:78:b7:1f:ff:d5:5e:0c:ef:a0:1b:13:
7a:14:5f:33:ed:98:dc:4d:e2:ea:10:6c:80:5e:a8:db:00:01:
0f:a3:88:c1:4a:a2:a5:5a:de:66:7f:64:f8:df:45:f1:a6:36:
24:80:d7:da:eb:a4:67:10:7a:a5:d1:3e:ef:4b:7a:b3:0b:91:
2f:aa:77:50:91:df:25:ba:ad:e3:6a:06:35:62:4d:b1:ab:ed:
24:ae:e3:51:b1:05:cb:08:69:46:26:e3:c4:d5:c5:5f:80:66:
23:4e:d3:b2:9b:f4:27:c8:0f:18:ab:0d:27:cc:e8:f1:5a:d8:
af:6e:90:a8:cc:04:3d:b8:d5:99:b9:67:74:96:b4:64:7b:f2:
30:12:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org