Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B2EB25C0B17211EC9F01848C5A40D577.roa
File: B2EB25C0B17211EC9F01848C5A40D577.roa (raw, json)
Hash identifier: 2KgfilRQgc6XBilgpMhKxFRq4RsSa6H6JjtwZnY+lAk=
Subject key identifier: 4E:B0:99:51:D5:2B:7D:9F:08:6D:25:00:94:73:9B:45:AB:28:0A:BF
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0376
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B2EB25C0B17211EC9F01848C5A40D577.roa
Signing time: Fri 01 Apr 2022 04:17:53 +0000
ROA not before: Fri 01 Apr 2022 04:17:49 +0000
ROA not after: Sat 01 Apr 2023 04:17:49 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 1 04:17:49 2022 GMT
Not After : Apr 1 04:17:49 2023 GMT
Subject: CN=62467cf1-0d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:12:d9:55:3f:91:2f:4f:76:a7:cc:98:e2:
fd:9e:6c:1d:dd:d2:92:77:f6:7f:d2:cd:7f:29:04:
5c:a9:ef:92:93:da:a7:f0:6b:2d:4a:ad:52:6f:3b:
51:69:37:d6:b2:74:0f:ec:42:1b:92:78:55:76:bd:
d7:7b:e0:66:d5:3c:86:d4:63:b3:c8:7d:78:fd:17:
ac:25:26:3c:f0:a1:e4:b8:ed:e9:46:a1:4a:23:1b:
f5:26:8b:22:7c:10:55:2e:bd:7f:43:0b:59:b7:25:
93:21:e9:77:3f:d7:7a:c9:16:17:6d:f8:fb:70:e6:
b2:7e:09:09:d7:fd:b0:6b:5d:d6:43:69:c7:07:13:
e7:ae:a4:5c:7d:d5:9d:8f:d4:d3:91:df:9a:87:a4:
79:ae:2c:04:fe:96:a9:fa:c9:57:c8:ea:7e:af:09:
e2:cd:59:da:1e:50:80:a2:da:11:9f:0a:b8:6b:e3:
23:98:6d:16:ae:c6:be:c3:94:27:b7:ee:67:65:34:
6e:e8:48:f0:a3:00:b5:5e:3c:f6:19:94:37:10:14:
9b:50:47:35:00:a6:fd:26:a9:be:8c:90:dc:82:f3:
59:51:aa:26:13:41:68:cb:7b:e1:1f:8b:82:bd:ee:
64:63:e8:26:0f:78:c6:3a:51:96:16:05:7a:e8:ea:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B0:99:51:D5:2B:7D:9F:08:6D:25:00:94:73:9B:45:AB:28:0A:BF
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B2EB25C0B17211EC9F01848C5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:36:14:88:e1:ed:79:eb:0b:2f:0c:a1:48:eb:a4:68:5d:49:
7f:37:df:3d:57:75:c1:56:fb:c0:a9:b0:e7:70:7b:8e:e5:3f:
b0:b2:6c:14:55:8b:5d:ef:10:fc:39:bc:f4:00:1b:96:e9:6e:
90:2c:c6:76:ae:bf:1e:d7:2c:12:e6:da:ab:91:63:fa:91:39:
56:68:e2:80:84:7c:94:de:81:2c:1b:b0:12:71:23:2d:cf:46:
a2:ad:84:ab:02:58:12:f1:37:ca:a8:b0:03:14:62:12:95:a4:
e8:93:80:1d:4a:b9:fd:4b:56:04:16:04:d0:7b:12:e1:f8:54:
d8:f8:b2:1e:58:ca:63:2a:b6:08:ba:51:d7:96:43:2d:84:2a:
60:e5:c7:f6:ef:85:6a:3c:eb:14:3e:74:7c:2d:c3:72:c1:95:
0c:e3:ef:5f:40:bf:68:18:13:41:2e:46:e9:a1:02:cd:04:85:
6f:38:98:00:a0:e3:0d:2c:8f:6c:c4:37:63:32:48:d9:95:b9:
d1:f9:cc:7d:6d:60:70:d5:78:4a:09:5f:b4:df:4e:b9:94:f5:
91:44:76:1d:de:03:b3:81:91:60:ad:5d:45:85:87:d9:3f:83:
b2:59:b3:25:64:e3:9a:d5:f1:36:ff:c1:35:84:e0:d1:7a:f2:
7b:d8:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org