Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C9E73B8ACDAE11EC9D7C12F9F1222468.roa
File: C9E73B8ACDAE11EC9D7C12F9F1222468.roa (raw, json)
Hash identifier: hH5HYzCjH43m/f8ONq7GFqWFFg2H5flR7M7xLIHp/vs=
Subject key identifier: 7E:7D:DC:73:BB:CF:2A:D4:53:47:D0:04:04:43:83:0A:9B:F9:2F:6B
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0465
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C9E73B8ACDAE11EC9D7C12F9F1222468.roa
Signing time: Sat 07 May 2022 02:38:34 +0000
ROA not before: Sat 07 May 2022 02:38:29 +0000
ROA not after: Sun 07 May 2023 02:38:29 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 7 02:38:29 2022 GMT
Not After : May 7 02:38:29 2023 GMT
Subject: CN=6275dbaa-19f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:e7:92:68:23:ab:41:d2:de:65:9b:f4:c4:
80:cb:ee:bd:0a:14:cf:2f:04:9b:aa:d6:7b:35:9a:
6f:37:80:ec:49:b7:c6:49:88:7b:3a:d6:01:c1:36:
91:ba:09:c1:27:84:75:40:3f:d8:78:7a:6e:be:59:
d8:1a:88:40:96:1c:c6:79:db:1c:77:02:89:d0:b7:
d1:ce:d1:cc:93:56:6f:37:78:ad:ca:d5:50:26:92:
ba:4b:e2:73:69:91:6c:07:e5:47:24:c4:d9:2f:7c:
ec:ab:0e:90:8a:2f:d8:32:c3:35:2c:43:f8:20:c6:
d3:b9:7d:a7:0f:e6:71:0e:04:16:0b:ac:61:f9:cb:
47:b2:26:04:2e:8f:d1:e1:f2:c1:56:f0:85:cb:06:
b8:d8:24:82:99:70:9b:6f:d1:cb:38:b2:36:61:b9:
72:d3:7d:bc:91:0d:b3:12:8a:08:de:b6:ae:a9:53:
7a:05:42:f5:37:43:13:10:e5:6c:ea:4c:1a:48:36:
4f:31:69:54:96:2e:53:4f:19:dc:93:23:1d:63:07:
e7:30:35:7e:f7:0c:7f:de:ba:a4:e8:f1:18:41:28:
f7:65:89:a1:99:fb:2c:9d:c8:7a:c5:e3:e6:26:2c:
be:77:61:03:7d:10:f6:99:c5:7f:0a:a7:3d:27:1a:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7D:DC:73:BB:CF:2A:D4:53:47:D0:04:04:43:83:0A:9B:F9:2F:6B
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C9E73B8ACDAE11EC9D7C12F9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
ab:ac:d1:da:9c:26:52:10:bc:32:02:21:11:c6:e3:d8:74:d9:
13:e5:df:0f:48:c7:07:7c:0e:23:81:1c:8a:2a:be:0e:b9:84:
94:c5:0f:f1:18:6b:ec:28:77:c9:92:84:78:83:d6:2a:85:d4:
aa:9a:a4:41:0f:f9:f4:51:0a:40:65:fd:aa:c1:09:ee:0f:92:
03:6d:92:14:84:ce:3c:38:29:95:99:94:2c:72:07:69:88:57:
b5:08:5c:a0:3a:b3:d1:82:17:33:b2:99:bd:7e:06:09:6f:f1:
3a:b0:1a:e3:ed:2f:31:53:86:70:86:ad:87:62:41:11:0c:2b:
54:6f:e1:8c:5f:5d:48:0c:aa:5b:95:34:ad:45:69:b5:da:4e:
fa:dc:48:2c:f7:6e:ed:7d:ca:fc:e9:65:1e:a5:b8:13:d7:6c:
5c:e4:af:81:0b:9d:66:67:00:95:16:57:a7:6e:3c:78:37:b5:
e0:62:fe:41:c2:56:5e:3d:19:63:d0:38:d9:35:ab:b1:12:cc:
cf:39:82:4d:a1:d3:71:40:42:a2:50:f5:4b:f5:7c:03:1a:0e:
97:3f:56:5d:42:e0:9a:29:4d:f6:e3:98:d4:ab:49:19:c0:48:
c0:41:54:bd:e4:f6:ea:5d:aa:cf:8a:e5:4b:df:e3:b3:85:d5:
9a:2b:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org