Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AA70DC06C45E11EC9F7F9DAAF1222468.roa
File: AA70DC06C45E11EC9F7F9DAAF1222468.roa (raw, json)
Hash identifier: rEkQltUuhqTX9qQCU5qT37gXX6jJBSGGO7+/gz87CXs=
Subject key identifier: 45:48:7A:38:1A:4E:48:B4:6A:F1:54:6B:79:36:38:CC:87:3B:49:B1
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0414
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AA70DC06C45E11EC9F7F9DAAF1222468.roa
Signing time: Mon 25 Apr 2022 06:12:21 +0000
ROA not before: Mon 25 Apr 2022 06:12:16 +0000
ROA not after: Tue 25 Apr 2023 06:12:16 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 25 06:12:16 2022 GMT
Not After : Apr 25 06:12:16 2023 GMT
Subject: CN=62663bc5-b2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:52:65:2c:2f:71:26:4e:df:a6:05:f9:63:
82:0d:e0:a0:e8:a5:9e:73:5e:08:f0:8a:1e:ed:d3:
06:1f:f3:31:e6:ca:c9:06:de:0a:46:c5:40:e8:7b:
23:05:fb:89:cc:d5:af:66:1a:90:e6:af:9f:86:9b:
7b:70:59:27:2e:c8:5b:08:3d:a2:8d:6e:4a:64:17:
28:07:b0:cc:70:9f:1f:38:2c:48:c2:7f:cf:2d:d8:
c8:87:38:1a:f8:e1:b4:5a:d1:e3:00:9f:b7:fd:85:
ec:2c:e5:2f:fc:b1:bb:5d:03:fb:c3:b1:6a:e3:1e:
fa:15:d5:d6:1f:ca:dd:1c:9e:f5:95:b9:1d:20:23:
45:b0:4a:47:84:49:4f:3a:98:c1:24:2d:63:ae:ed:
76:ca:7f:13:74:81:68:0d:c0:4c:6e:0b:77:56:9a:
4b:6a:f4:a3:0c:98:b2:09:2d:55:4c:8d:c3:65:7d:
c2:95:cd:5a:e8:ce:04:f1:37:e4:89:4d:f2:ba:61:
b6:2d:f8:0d:72:2d:59:f5:f4:56:f0:16:06:83:91:
6f:05:f8:98:4f:1c:49:ac:fb:3f:11:81:10:25:de:
09:76:b9:e2:c2:5b:85:45:19:56:1c:80:b8:fd:5b:
3c:3d:c7:10:e0:ea:59:5e:4d:8c:21:c5:61:cb:b2:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:7A:38:1A:4E:48:B4:6A:F1:54:6B:79:36:38:CC:87:3B:49:B1
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/AA70DC06C45E11EC9F7F9DAAF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
c7:c6:f9:91:05:ad:56:1a:a8:60:71:23:fb:71:3c:d3:48:c9:
42:35:8d:6e:27:65:5b:bd:69:02:73:6a:8a:94:e2:d9:92:9c:
c5:b3:88:a8:5b:d7:a3:01:39:db:68:eb:91:c0:ae:61:01:5c:
94:b8:cc:d5:a9:21:5d:b1:fd:89:c6:01:da:66:37:b5:b2:c6:
0c:87:7e:b2:ed:64:51:be:91:04:ee:9c:95:c0:10:96:90:6a:
87:38:c1:54:4a:4c:f6:73:10:63:60:de:61:09:f5:f7:03:20:
29:f5:44:38:c3:e5:19:1a:5c:0a:b2:2b:a8:28:61:f4:a2:4b:
fd:17:76:5c:84:77:78:53:23:54:92:a2:2c:ef:71:a5:2f:79:
8f:f3:84:be:5d:dc:97:14:93:7a:4c:b0:8a:f7:3d:c9:b3:bc:
59:38:15:77:12:e9:f9:81:40:59:b9:56:c9:b4:71:2c:34:4b:
8b:4f:87:12:98:7b:31:18:6f:b4:e2:01:59:1c:2a:3a:a4:41:
dd:b0:c8:0d:fa:6f:35:98:9c:9a:d7:49:9a:35:f4:64:34:45:
5b:9d:06:ad:08:e6:48:1e:ea:32:d4:57:fd:fa:a2:21:a7:f5:
2d:52:f4:7d:dc:52:0e:5c:b8:98:51:bb:02:6d:2b:02:3a:c0:
af:56:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org