Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CD392100F8F511ECA4CF84CFF1222468.roa
File: CD392100F8F511ECA4CF84CFF1222468.roa (raw, json)
Hash identifier: rZV8C3jenasPaWxSBlblX9IFN19Pud8QiJV/sMHsNsA=
Subject key identifier: 0F:85:92:F2:93:80:C2:1D:BB:81:86:0B:0B:5A:7E:D5:D2:14:9D:3A
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 05DC
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CD392100F8F511ECA4CF84CFF1222468.roa
Signing time: Fri 01 Jul 2022 04:25:14 +0000
ROA not before: Fri 01 Jul 2022 04:25:09 +0000
ROA not after: Sat 01 Jul 2023 04:25:09 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Jul 1 04:25:09 2022 GMT
Not After : Jul 1 04:25:09 2023 GMT
Subject: CN=62be7729-b660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:6a:71:78:55:13:36:da:a8:43:71:74:60:
61:25:aa:41:f3:bb:b7:eb:78:fc:69:bb:1e:f9:1f:
90:ca:09:f2:50:90:d4:d0:d1:e8:d5:f4:4e:0e:c9:
9d:1c:73:12:1b:07:45:13:c6:34:36:74:d9:0f:3e:
8c:61:c0:46:0b:74:c4:ad:47:b0:12:07:31:0e:27:
f6:06:22:cb:cd:e0:54:da:88:52:3a:cf:fe:d3:df:
4f:09:27:14:db:f9:91:57:b9:34:ca:56:ee:02:f4:
a6:a6:ad:ee:af:0d:34:95:7e:10:30:69:d4:f6:69:
d4:1d:1f:fe:e6:b5:fd:eb:9f:3c:a4:5f:8d:8a:ab:
d6:fa:d4:78:dc:1e:fa:85:71:ac:c5:ea:9c:85:48:
6a:34:c5:ed:51:d7:dd:99:f5:4d:20:00:bc:66:2d:
3c:53:4c:2e:8d:c6:b3:d5:84:81:0b:2f:70:1a:7d:
e4:05:a8:12:26:88:4e:66:f1:94:2a:ff:95:f5:7e:
05:61:6b:a0:4d:f5:31:75:d4:32:55:e6:0e:91:cf:
95:7d:46:54:7e:4d:1b:7b:2d:1f:45:4f:09:82:93:
07:57:40:cd:e0:1b:59:07:b5:2a:46:2c:a4:5f:a8:
86:2f:1f:19:0a:90:0e:07:d8:f8:d3:aa:96:2a:83:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:92:F2:93:80:C2:1D:BB:81:86:0B:0B:5A:7E:D5:D2:14:9D:3A
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CD392100F8F511ECA4CF84CFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
72:5e:5f:8a:71:d6:49:e2:69:c3:be:e8:5d:1f:fa:21:3f:f3:
08:c7:5d:13:c1:0d:b9:8a:05:03:94:13:08:08:9a:76:9e:3c:
d2:8b:de:4c:99:03:5a:55:7c:41:b5:b2:ad:6c:a1:40:3c:66:
d3:30:3f:8c:25:1a:c3:6b:55:9a:fb:82:9e:44:d5:8d:22:a9:
0f:05:da:39:84:ad:b2:11:21:79:8a:d2:51:ed:d8:c4:31:87:
bf:a9:3c:df:e1:eb:11:5b:a6:e1:05:0b:e8:3a:d2:2c:a9:f8:
6e:f2:4e:19:d7:24:dd:39:0a:78:ff:4f:ab:9e:e1:d3:7e:7b:
56:2d:70:d8:2b:73:81:54:7b:ee:b6:48:71:58:eb:cf:a4:a6:
b2:da:b7:39:77:a5:bf:28:d7:fb:ce:29:7d:9b:32:10:13:ef:
79:e2:37:97:46:44:8a:9f:d2:e4:77:d6:e6:da:14:df:d4:fe:
85:0f:3d:04:bf:70:a9:23:26:21:8b:b3:4c:5b:6d:80:53:1c:
4b:da:6a:85:f8:97:27:8d:ae:8f:e5:62:60:b6:df:0a:84:1c:
d1:82:3d:1a:06:27:80:a7:fb:fb:0c:0e:90:bf:b6:6a:94:a5:
c6:02:f9:fd:ca:53:5e:a3:9a:68:f7:27:13:a8:89:66:73:2a:
0d:b0:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org