Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A3F4D0FAC2E011EC803DE0F6F1222468.roa
File: A3F4D0FAC2E011EC803DE0F6F1222468.roa (raw, json)
Hash identifier: Ug87mTy8+arpz8N74WxSPT6FJ30RNlUvoI75FyFSvQE=
Subject key identifier: 0C:FD:AB:96:86:C7:36:6F:AF:F6:0B:D7:89:A4:70:9E:C9:D6:1A:C4
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0408
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A3F4D0FAC2E011EC803DE0F6F1222468.roa
Signing time: Sat 23 Apr 2022 08:37:42 +0000
ROA not before: Sat 23 Apr 2022 08:37:37 +0000
ROA not after: Sun 23 Apr 2023 08:37:37 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032 (0x408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 23 08:37:37 2022 GMT
Not After : Apr 23 08:37:37 2023 GMT
Subject: CN=6263bad6-6126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:15:a2:0a:b4:72:d6:79:d8:52:ec:db:4f:
13:ba:b8:25:e7:6e:41:40:e9:ae:ba:14:71:73:30:
ef:40:b9:b4:e4:b7:83:94:04:0a:4b:3c:ae:32:15:
4f:fd:62:80:10:7d:4c:1d:45:db:2e:a3:9d:8c:a6:
f9:2d:96:ab:fc:7d:a9:1e:77:aa:31:d2:2a:a2:a1:
ea:17:89:c9:88:d5:b8:6a:08:d2:a6:10:3b:8c:e9:
1e:59:8a:d5:fb:cb:a4:b9:0a:46:ea:98:a9:ad:a1:
f3:a1:98:c8:07:27:a5:45:92:57:5c:a9:96:54:cc:
e6:49:d6:71:d1:34:a6:f8:b7:b6:93:a2:bf:e8:2b:
9a:0f:7a:62:89:11:f7:ac:26:16:d3:0c:0e:8b:78:
cc:1a:aa:9c:02:85:dd:12:e3:3a:c2:03:af:12:d3:
3a:8f:ac:d1:d9:fb:d9:bd:38:14:55:7e:d6:2d:9f:
66:66:8b:6e:69:8b:53:0a:7c:f7:1d:be:13:29:95:
19:76:ac:25:d5:fd:03:9d:d1:c2:23:60:ed:21:fe:
04:89:ff:c6:3a:f5:ec:95:7c:07:a2:ea:04:bb:24:
4b:9d:c4:0b:f4:51:ce:11:c7:60:f0:a6:a1:79:09:
4b:35:f0:a7:a2:0d:fd:97:b6:13:68:9c:5b:f9:e5:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:AB:96:86:C7:36:6F:AF:F6:0B:D7:89:A4:70:9E:C9:D6:1A:C4
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A3F4D0FAC2E011EC803DE0F6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
11:e4:25:49:84:a9:2c:16:dd:79:af:30:6b:ae:d6:75:a3:21:
19:35:44:d9:8e:a6:57:68:39:d3:0d:72:46:d9:75:80:e8:e5:
ce:69:76:7d:8a:7f:fc:0f:8a:d3:ac:26:17:a4:cb:b1:37:20:
f7:d9:89:2b:a2:ef:f1:1b:29:08:fe:cd:fb:78:8f:e7:95:04:
13:90:ce:26:68:e6:35:1d:cc:a0:ef:63:03:10:f7:2a:97:dd:
8d:7f:48:2a:b1:4f:f2:91:7e:35:55:ee:09:c4:78:5f:39:d8:
70:1c:cb:82:44:99:02:94:8c:eb:45:c5:e4:c5:e0:a9:8b:52:
f2:2f:a2:a7:d0:2b:8a:1f:a6:6a:52:e7:01:f0:3f:c4:71:96:
70:3d:e3:20:63:4e:5a:65:28:52:3a:45:1e:c3:63:c7:d9:63:
bc:45:4d:5a:e8:1d:da:7a:71:a1:77:c7:13:80:1c:59:14:64:
42:14:fa:1a:18:ad:5f:29:17:77:91:bd:b7:02:d1:42:7f:54:
eb:42:1b:bb:16:51:d6:5a:58:3b:da:87:3d:fa:23:3c:9e:62:
4d:9e:94:8a:74:90:00:6d:c9:96:15:a9:54:f4:4d:dd:48:c6:
2d:02:f5:55:70:db:45:f8:10:26:dc:68:fd:2a:0f:22:34:81:
b7:6c:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org