Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CF9736E0B3C611ECA135D4E25A40D577.roa
File: CF9736E0B3C611ECA135D4E25A40D577.roa (raw, json)
Hash identifier: KVAzw5pivP/FnR9UxUduoZOdLMxmd/Niy4chySuAG/c=
Subject key identifier: 33:46:39:13:28:FB:5C:B8:CF:49:CA:FF:FC:68:7F:89:04:98:D3:75
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0389
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CF9736E0B3C611ECA135D4E25A40D577.roa
Signing time: Mon 04 Apr 2022 03:25:01 +0000
ROA not before: Mon 04 Apr 2022 03:24:56 +0000
ROA not after: Tue 04 Apr 2023 03:24:56 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 4 03:24:56 2022 GMT
Not After : Apr 4 03:24:56 2023 GMT
Subject: CN=624a650d-f1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:6c:89:6d:ff:b6:f5:d8:46:53:80:1a:db:
f9:40:8b:5f:08:01:46:88:02:ac:bc:78:06:3d:30:
7e:95:2a:84:c4:96:49:43:50:55:f6:fd:06:7a:1f:
96:d0:3a:ff:23:25:97:29:07:7c:37:55:8a:c8:bd:
fe:ed:37:77:e6:5c:f6:40:00:36:09:b2:96:ca:b0:
03:90:55:ae:20:01:b0:b5:e8:d1:3d:6b:22:af:6a:
f3:38:65:34:82:07:dd:15:91:26:25:7a:b9:89:33:
79:2c:fd:7c:f0:c8:49:4d:0f:72:f9:13:9d:5e:41:
73:32:64:98:22:09:98:57:87:53:19:56:de:1c:47:
c4:29:8c:56:e5:c6:a0:e5:aa:6d:ee:f9:24:1f:76:
b1:eb:a6:68:0b:0f:85:70:80:4f:2e:47:5f:85:2b:
30:05:b4:74:3b:21:47:8b:bb:81:f6:de:49:96:f7:
1b:c5:54:9b:f8:b7:f7:bb:97:56:f7:b0:14:a6:c4:
79:22:60:30:7f:74:9f:43:51:bb:d3:ac:f0:20:38:
ea:0e:98:28:8f:93:7f:26:5e:90:22:63:8c:bf:a6:
b0:0b:1c:5d:84:4d:22:46:cf:ed:0d:84:aa:45:1c:
f7:45:83:f4:82:d6:11:68:d9:f1:a3:2f:4d:52:28:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:39:13:28:FB:5C:B8:CF:49:CA:FF:FC:68:7F:89:04:98:D3:75
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/CF9736E0B3C611ECA135D4E25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
24:d0:53:e8:83:d3:c8:c1:31:7d:c5:29:6d:c0:c4:93:33:67:
87:09:c1:43:be:a3:17:5b:7b:3f:63:83:af:d7:e2:bb:4e:df:
41:23:09:a2:0e:7d:e0:43:fe:ac:b7:b2:d7:54:c5:9c:d2:1b:
20:d4:06:01:8a:73:93:d9:cb:46:81:a4:39:9a:cf:a6:c2:c4:
cb:71:3b:12:3a:ae:4d:cf:68:53:24:bd:2b:19:b5:f7:4a:ed:
df:8a:ec:7b:75:00:e5:1b:4a:24:1d:18:7c:4e:e7:ab:f1:44:
99:af:81:70:90:bc:1b:99:fa:b6:e7:34:b2:b0:02:51:cb:95:
47:9e:f8:4e:8e:9e:bd:6d:6d:8e:d7:a8:66:e2:56:2d:fd:63:
af:8c:de:f7:29:8c:06:35:35:1f:44:0a:ca:81:bb:2f:13:9d:
89:37:0c:45:7b:0c:e1:9b:96:cc:50:18:78:4d:0e:42:8c:50:
90:ef:cb:d3:9a:c7:f3:24:d3:26:33:c7:b5:5e:c1:9d:cb:d6:
4d:bd:d2:88:40:5d:dd:ac:80:bd:30:dd:9c:1a:4d:67:e1:10:
40:0f:70:80:95:9e:4d:80:e2:1f:c8:70:c7:fa:36:a2:4e:41:
0d:54:bd:ff:91:93:f0:2b:43:5a:a7:3f:20:ec:ab:35:e7:8f:
32:63:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org