Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/946735D22A5B11ED91D48CB1F1222468.roa
File: 946735D22A5B11ED91D48CB1F1222468.roa (raw, json)
Hash identifier: EgzD1+3vkABZ+emP/WWCEikuVAS0iSGTiaI6xcQ7pYo=
Subject key identifier: 22:7E:A1:70:50:C4:19:55:EC:D3:A0:4A:45:B9:C6:1A:67:70:B9:14
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 068B
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/946735D22A5B11ED91D48CB1F1222468.roa
Signing time: Fri 02 Sep 2022 01:07:14 +0000
ROA not before: Fri 02 Sep 2022 01:07:09 +0000
ROA not after: Sat 02 Sep 2023 01:07:09 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 2 01:07:09 2022 GMT
Not After : Sep 2 01:07:09 2023 GMT
Subject: CN=63115742-cba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:94:d9:31:c9:c6:1c:26:3f:89:b3:e4:65:
9f:01:63:bf:54:66:1a:07:4e:10:76:ad:d7:58:0c:
a3:06:94:e4:9f:4e:09:d5:05:fe:9c:97:2c:6b:86:
b6:4b:11:9a:c3:9b:6f:ac:fc:03:3c:19:13:1e:ff:
bc:55:d9:9b:03:24:6f:81:de:60:75:2f:ee:ea:d2:
36:82:30:ff:07:26:dc:39:ed:57:da:a6:3a:9a:d1:
6e:11:9a:1d:3e:45:ab:d9:fc:a4:99:81:7d:03:e0:
7e:85:f8:32:1e:a4:f9:4d:7d:5a:52:98:81:ea:58:
dc:0b:af:69:16:ea:ae:cc:f0:08:b1:b2:14:4a:da:
19:78:ab:18:4e:d5:5f:48:db:e0:85:06:6d:1f:72:
8b:65:68:5c:5f:a7:70:61:80:99:04:a2:80:e2:69:
de:32:2f:68:9e:aa:a2:8c:f2:72:b3:5f:31:3d:99:
fa:67:9a:02:0f:ef:ce:2c:16:a1:d8:45:0f:8c:9a:
b9:b5:1a:18:5b:bb:2a:d2:8c:98:42:f6:b5:27:40:
e9:0a:d3:be:bd:45:be:25:ec:9d:b2:97:88:05:b3:
29:df:c9:f9:6d:12:2b:bf:af:03:c8:ab:bd:33:05:
09:98:48:43:db:6b:41:66:17:fe:4b:84:7e:a1:ea:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:A1:70:50:C4:19:55:EC:D3:A0:4A:45:B9:C6:1A:67:70:B9:14
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/946735D22A5B11ED91D48CB1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
32:e2:0b:50:8c:14:f7:01:ac:d2:25:18:f4:f1:b4:ef:7f:d0:
5f:ae:4a:d6:50:11:0b:2d:db:3c:08:3b:7a:76:13:bf:ea:98:
21:74:c9:54:d7:ef:42:e3:17:4b:a4:fe:2f:f3:e2:1c:2d:74:
56:fb:d9:f2:55:90:47:6e:0f:c5:cd:b1:e2:ca:3f:67:5f:d4:
6c:a4:f5:f2:dc:1b:34:34:9e:19:c4:3c:d9:95:cf:65:cb:0c:
88:4e:e7:4d:cc:ce:60:89:09:c0:48:22:d1:ce:b9:84:9b:ca:
a9:fa:a2:53:47:35:98:eb:6e:ab:8f:9a:76:00:65:03:c3:39:
73:85:c6:b0:62:8b:97:a9:a3:93:26:28:c8:b7:94:9d:ca:14:
da:17:92:84:b9:64:18:79:bc:fc:33:d9:bc:dc:88:83:ee:48:
0d:3b:56:e9:4c:80:24:d0:47:4e:8d:36:2a:6b:f0:86:ad:69:
2a:03:51:8f:85:b9:c5:f1:05:b3:46:db:3c:ca:f9:56:20:d8:
0c:72:54:a8:23:d0:d2:b8:cc:f9:85:28:7f:b2:e7:4f:dd:46:
6f:ae:eb:3d:4c:cb:68:ec:20:fc:83:c8:ab:16:a6:6e:c1:cd:
2a:6f:60:37:bf:58:45:9d:6b:c7:a6:38:e6:cd:a3:24:38:16:
72:35:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org