Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BF4FA5EA29B111EDA23DD3F0F1222468.roa
File: BF4FA5EA29B111EDA23DD3F0F1222468.roa (raw, json)
Hash identifier: xJRwtrCzHYEX1ouESaTG5t+nICTxV/KGogpUWUH3xYE=
Subject key identifier: C3:F7:2B:9B:5F:4A:63:6B:EA:8C:B3:73:6A:5D:4D:6F:93:0C:2F:60
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0687
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BF4FA5EA29B111EDA23DD3F0F1222468.roa
Signing time: Thu 01 Sep 2022 04:51:31 +0000
ROA not before: Thu 01 Sep 2022 04:51:26 +0000
ROA not after: Fri 01 Sep 2023 04:51:26 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 1 04:51:26 2022 GMT
Not After : Sep 1 04:51:26 2023 GMT
Subject: CN=63103a53-1f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:15:53:a4:0a:e5:88:1b:7b:98:2a:8b:05:
75:c0:05:ba:d8:19:1a:7e:dd:38:8a:e9:9e:7b:f0:
c0:ce:f8:33:c7:dd:43:03:44:88:35:03:bd:77:a3:
96:7a:db:46:0e:f1:05:26:8b:d4:39:58:e9:b5:4b:
39:02:6c:e9:d9:b4:bd:cd:6c:71:eb:d5:38:d4:7d:
b2:43:38:a1:4d:29:3b:f0:4f:da:f4:35:ef:52:19:
97:57:9a:bc:74:d0:93:b2:45:01:e1:fe:07:f7:e9:
31:ca:de:52:63:a1:42:cc:1f:2c:eb:94:cd:09:72:
a1:7f:7f:03:16:19:28:1f:56:c4:c3:c3:e0:61:f1:
4a:bc:7e:44:8f:ed:a6:b9:78:95:48:84:3b:45:1a:
d7:93:f5:bc:0c:a9:5b:2b:c4:1d:3b:1d:64:7c:c5:
35:78:4f:83:9b:c1:96:6d:3d:83:45:28:29:a8:10:
93:14:d6:0d:98:fa:ce:ea:38:41:8f:d7:a2:76:b7:
dd:b5:71:f9:f3:5c:dd:c2:f8:6e:ad:d3:b7:aa:2d:
dc:d0:47:12:e9:7b:6e:08:80:84:c3:27:d1:06:09:
e9:11:21:ea:7e:94:02:6c:56:0c:ce:fa:a7:26:58:
d4:f9:ca:ea:d3:c5:1c:d4:56:21:f8:a6:88:d4:3f:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F7:2B:9B:5F:4A:63:6B:EA:8C:B3:73:6A:5D:4D:6F:93:0C:2F:60
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/BF4FA5EA29B111EDA23DD3F0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
8c:87:9b:65:7f:b8:96:4c:dc:c3:14:92:df:dc:55:38:95:02:
42:97:c1:8e:8d:78:f2:4b:c8:36:d5:92:4b:82:6b:57:3f:1c:
af:90:81:b2:12:53:4e:2e:24:b0:0a:38:0a:3c:71:0c:30:0b:
77:ee:3d:98:ca:4a:88:3b:cd:34:06:82:b1:09:17:6f:d1:5c:
58:15:bf:15:cd:c2:3f:09:08:40:64:13:e2:23:f2:5a:03:80:
e9:17:51:e1:98:53:dc:28:aa:c8:40:63:88:ee:d1:6c:bd:d6:
8c:d9:1c:2f:55:0d:bf:f3:1d:d4:29:f6:e5:ac:9b:bb:3a:47:
56:c3:c3:62:46:d5:92:66:2a:0c:81:da:63:7a:52:e1:1c:1c:
0b:e3:97:fc:1a:24:96:0c:93:43:ef:2a:bd:2d:9a:ba:67:aa:
88:5b:79:18:60:0f:02:58:d3:f4:3c:dc:15:1f:7a:23:1e:84:
20:79:b9:9a:82:14:94:e7:77:60:e0:7d:ef:7f:bd:31:15:ea:
c7:a4:4f:b5:e0:a5:cd:0d:01:c2:b3:db:1c:01:14:ad:53:5f:
f8:5c:e8:cf:d2:5a:50:02:60:f0:c4:fc:a2:de:a7:ee:2f:75:
4e:36:d5:18:b1:54:ad:e4:19:a7:33:fc:03:ed:8e:0f:f3:b2:
2f:87:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org