Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C2A9E616830C11ECAA8162BE5A40D577.roa
File: C2A9E616830C11ECAA8162BE5A40D577.roa (raw, json)
Hash identifier: ymokM7oQqCIlKk/D7x20gBhWm0m8zwiwv1sB46PhfQc=
Subject key identifier: 52:1D:38:5C:75:50:E9:76:E0:AB:A5:FE:30:C8:3B:9D:EF:DB:E0:8A
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 022E
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C2A9E616830C11ECAA8162BE5A40D577.roa
Signing time: Tue 01 Feb 2022 03:12:17 +0000
ROA not before: Tue 01 Feb 2022 03:12:13 +0000
ROA not after: Wed 01 Feb 2023 03:12:13 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 1 03:12:13 2022 GMT
Not After : Feb 1 03:12:13 2023 GMT
Subject: CN=61f8a511-4155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:c1:56:59:25:f9:2b:55:4a:f8:6c:bd:0c:
48:1c:c1:72:85:31:c6:fc:21:29:b1:25:e3:8b:d4:
6a:d3:6d:d5:fb:a7:d1:10:67:35:13:6b:23:5a:b8:
a8:27:3a:f6:16:2d:49:e3:4f:14:13:cd:41:6e:04:
87:96:10:04:80:b7:3a:84:fa:7d:cf:f4:4c:30:ef:
de:8c:17:dc:90:93:b9:bf:a2:46:99:3f:62:73:b6:
4e:40:23:90:e0:19:aa:c9:44:da:97:50:1f:69:18:
4d:cf:0e:ae:cc:f9:55:1d:f9:98:e3:91:0a:67:75:
f5:f9:0c:7b:af:52:c1:ab:4d:ab:f2:f3:2b:4d:d4:
7c:7b:b7:b1:b3:6b:d6:1e:11:5e:a6:10:44:58:c1:
6e:31:5c:aa:d8:5b:72:76:56:84:94:b8:98:0b:02:
a2:59:45:e9:56:8c:2d:80:11:ce:85:22:80:b8:00:
12:c7:62:c5:7c:f9:24:34:25:d6:e6:91:99:79:95:
9c:f7:42:af:7d:f8:6e:8a:30:37:65:1e:ba:52:85:
71:c6:28:c3:05:79:32:d2:55:c0:32:8a:80:a8:ec:
fa:b7:73:80:ba:a8:ed:52:59:13:e5:df:43:70:c9:
5c:8e:8f:38:c3:f9:13:47:65:4e:24:4b:d4:15:da:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:38:5C:75:50:E9:76:E0:AB:A5:FE:30:C8:3B:9D:EF:DB:E0:8A
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C2A9E616830C11ECAA8162BE5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
63:13:79:17:f0:d1:ad:4e:0a:e6:8e:19:4f:1f:90:33:39:5a:
d4:12:6a:57:f3:77:71:57:32:55:f3:73:f3:68:da:dc:1c:e8:
a9:3d:79:aa:0a:be:1d:99:ee:c3:94:ae:18:4e:2e:97:57:64:
4a:16:63:a5:8d:b3:00:ad:70:34:06:8b:14:45:e8:00:36:0d:
85:6d:cd:52:fa:17:e4:54:8c:8f:90:e6:a9:5c:3a:d5:52:f8:
5a:17:00:0c:a4:5f:17:af:d4:09:63:22:c0:8d:dd:3f:51:8c:
f1:0a:a4:ff:39:a6:8b:d2:f7:05:97:cd:ad:94:7c:78:03:65:
6f:ff:59:ba:87:56:68:b9:d0:86:40:b4:a6:08:0a:30:f5:ca:
26:50:03:57:b1:b8:db:d5:df:c4:1d:1b:2e:4c:cc:89:0a:62:
ad:a0:91:e7:b2:25:d3:54:d1:ac:21:3b:af:bf:b1:db:75:0b:
2f:29:09:f3:58:8f:66:8f:bd:92:1a:16:c1:3c:1a:4a:aa:0b:
2c:7a:9b:f1:e7:1d:bb:bc:03:37:18:0e:3d:29:e9:f3:3a:d8:
54:ce:93:7c:c4:52:49:d2:ac:b1:2d:70:1e:af:ca:8a:75:33:
da:b3:c5:63:bb:8c:6b:b1:59:ca:b0:9b:af:14:f2:a7:1f:f7:
72:0c:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org