Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C9E9A6BC3BBE11EDBBEE5483F1222468.roa
File: C9E9A6BC3BBE11EDBBEE5483F1222468.roa (raw, json)
Hash identifier: RBYd/inaG18NDwRLKzxvZ5XxxpqnyA1YiQW6oUpveWs=
Subject key identifier: A0:EC:74:2D:FB:C8:0D:73:69:AE:A2:99:89:F5:4B:4E:FD:89:1D:33
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0723
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C9E9A6BC3BBE11EDBBEE5483F1222468.roa
Signing time: Sat 24 Sep 2022 04:10:14 +0000
ROA not before: Sat 24 Sep 2022 04:10:08 +0000
ROA not after: Sun 24 Sep 2023 04:10:08 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827 (0x723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 24 04:10:08 2022 GMT
Not After : Sep 24 04:10:08 2023 GMT
Subject: CN=632e8325-ce25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:cb:34:69:25:b9:63:54:c4:07:47:da:c2:
d1:9d:62:11:3e:c7:ea:aa:05:e9:cb:02:a6:02:33:
a1:2a:c5:c4:6e:6a:a3:d3:50:ca:31:f0:5b:73:31:
df:2d:c9:3c:88:21:00:24:cc:26:f5:de:4a:88:e4:
04:99:71:a5:dd:ae:fa:dc:7d:78:c2:0f:b6:08:ab:
41:81:d3:c2:67:09:f6:f3:10:10:c3:1b:d5:c6:48:
53:7c:36:ff:ec:ef:52:e2:7d:c1:e8:e4:cf:79:a1:
62:1e:ff:d9:86:57:8b:57:45:24:44:6f:91:9a:32:
c2:78:45:7f:b6:7e:58:9f:d7:2f:59:3b:75:1d:14:
e7:fb:92:b2:39:8a:54:81:3d:f9:f9:d3:68:8d:1f:
56:57:a8:be:af:9e:49:f4:40:05:36:03:0f:66:e0:
ea:d8:11:ef:80:1e:11:f1:d0:90:23:b6:b5:70:ec:
7a:fe:75:ce:a8:6a:3f:9e:e4:28:91:3d:4f:df:16:
68:ff:9e:c7:47:47:2d:9d:ee:22:41:8d:a2:44:7b:
f0:7b:33:d8:d6:0d:3b:56:aa:9f:08:da:01:60:ec:
50:5e:1b:51:73:9c:41:0e:8e:10:05:20:c5:d3:b3:
4f:5f:28:ed:d6:25:51:34:e5:c5:bc:b2:20:f5:80:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:74:2D:FB:C8:0D:73:69:AE:A2:99:89:F5:4B:4E:FD:89:1D:33
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C9E9A6BC3BBE11EDBBEE5483F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
76:a9:f7:56:03:65:9f:22:cc:a1:c4:d2:2e:a4:70:0a:d1:fe:
b2:f2:ab:06:d2:17:c1:9a:18:2c:37:04:87:c4:91:ed:ad:d6:
f6:20:b5:10:48:68:0c:29:e9:94:52:f1:ad:5c:12:b1:2a:70:
31:65:50:9c:24:e3:97:eb:4f:11:9b:05:53:4d:da:73:e3:7c:
3b:10:7e:90:84:2e:aa:3d:6f:aa:7c:c8:ac:7e:29:99:61:2d:
ec:20:7e:68:6d:07:c1:90:f8:10:78:4e:74:24:4e:41:be:01:
d7:1e:99:58:db:88:d2:9c:cc:36:7e:3e:c8:42:6e:34:68:8a:
1e:84:33:a0:40:06:66:ed:1b:2d:db:e5:9f:36:95:fb:4c:aa:
a5:9f:4b:d6:f1:ee:7f:d2:45:1f:11:23:48:79:a8:15:fb:69:
ff:4c:c5:2a:6b:4a:d8:65:0c:ef:a0:c3:23:b8:11:85:f1:3e:
b3:a9:3f:6d:89:e7:0a:04:88:0b:7d:98:c1:57:cc:a8:d0:44:
c8:a1:40:2d:26:b5:73:d1:d9:a6:34:e6:a9:56:2d:20:bf:c7:
8d:26:a1:15:55:9b:25:ec:34:8b:ba:3e:c6:ca:e9:e4:bf:01:
a7:3f:58:35:63:a2:be:f4:bd:32:70:eb:82:65:d6:23:5e:d6:
66:48:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org