Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A8D86598A71811EC8DCDD7965A40D577.roa
File: A8D86598A71811EC8DCDD7965A40D577.roa (raw, json)
Hash identifier: +5Y/pN2GltrbIxwbR/YUfi3A4FoHqaMY8kJdG+4owyk=
Subject key identifier: AD:A8:36:A5:A1:DE:04:C4:FC:72:1B:B2:B3:E8:A8:99:DF:69:5E:F9
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 031A
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A8D86598A71811EC8DCDD7965A40D577.roa
Signing time: Sat 19 Mar 2022 00:08:10 +0000
ROA not before: Sat 19 Mar 2022 00:00:05 +0000
ROA not after: Sun 19 Mar 2023 00:00:05 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 19 00:00:05 2022 GMT
Not After : Mar 19 00:00:05 2023 GMT
Subject: CN=62351eea-370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:38:66:d2:b9:68:44:83:17:22:67:1e:a6:
18:b4:9b:7c:8a:53:56:d9:51:5f:f5:42:0c:30:2a:
bd:fc:41:f7:f1:3c:80:19:b2:b8:d2:2f:50:d2:9f:
63:d9:5f:83:85:4c:1b:6a:37:bd:e7:81:a6:5b:92:
49:67:0f:2b:87:b7:b6:93:85:6f:43:c4:81:f8:95:
77:f9:94:ba:be:d5:57:8f:3e:3e:01:26:59:68:3e:
d1:6f:40:50:b4:a6:6b:97:d3:bf:5e:43:a2:f6:fb:
34:e6:d2:2f:aa:54:42:7f:6b:32:ad:61:79:98:25:
2a:e2:b4:4f:35:1e:3d:52:06:55:55:10:17:5b:95:
53:ef:72:6e:d9:be:dc:7f:4e:59:e5:21:7e:8b:15:
98:21:30:b8:e6:54:20:86:23:a4:78:32:a4:fa:10:
30:b1:6a:fe:06:5e:ed:7b:be:14:7f:ce:9c:65:53:
87:cd:58:0d:bd:6c:c4:df:4e:a2:2d:99:ce:a0:9a:
fc:be:59:00:12:65:2b:6b:87:fe:aa:61:fa:e5:3f:
9b:c0:fd:92:7a:b8:4b:2b:95:b7:44:21:6f:50:5d:
c1:8e:6f:53:d1:86:67:c3:9b:a5:bd:80:de:89:ac:
ed:2d:ef:c1:0c:23:a1:67:d1:e3:b1:68:b4:c1:88:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:36:A5:A1:DE:04:C4:FC:72:1B:B2:B3:E8:A8:99:DF:69:5E:F9
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/A8D86598A71811EC8DCDD7965A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
67:11:3a:ce:05:3c:85:e6:58:e9:da:18:4c:e6:58:5f:5c:bc:
84:58:43:49:d6:e9:a5:38:e5:34:51:0d:a4:d1:f8:6c:c0:14:
6d:60:5d:8f:05:5a:f3:ed:6a:e5:e0:03:78:61:d5:8d:ad:51:
f0:02:7d:f4:36:a3:76:bd:1a:85:09:2a:17:44:12:c5:a1:d5:
8d:22:f3:f6:13:b7:c0:6a:8f:66:cd:50:e5:3a:d8:ef:da:5a:
ca:65:c5:22:03:18:17:b6:40:68:bb:22:27:38:5b:80:78:68:
c0:12:b6:58:41:1d:08:fd:12:ee:42:dc:24:29:4f:3b:15:00:
09:aa:ec:a8:6d:b6:72:7d:fd:5e:2f:fb:33:26:1f:d7:76:9f:
7b:12:d1:28:d0:65:3f:fa:52:99:cb:a6:29:d5:eb:8f:d8:1a:
47:90:fb:1a:fa:72:46:f1:11:af:12:52:0c:b9:a9:14:cd:87:
4d:24:9d:ce:ba:49:af:6f:81:8c:37:00:19:56:f9:19:73:bb:
8f:ed:23:e0:94:fa:d0:4f:4d:44:1d:6c:27:6a:16:5f:ea:8a:
97:95:88:b8:70:c1:27:3b:ee:ca:d8:32:c2:d2:73:22:8b:0d:
02:f8:88:ba:a4:58:e3:27:83:bb:20:fb:ea:d9:8e:d9:3d:21:
52:79:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org