Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DD32B7D62FD911EDB12260D9F1222468.roa
File: DD32B7D62FD911EDB12260D9F1222468.roa (raw, json)
Hash identifier: 5YX7oimFvbA2pO/COwcBDOBvQmCHWv1JIRWNR9hQ4ls=
Subject key identifier: 99:07:E5:16:42:D3:F8:56:57:68:94:3A:64:72:FE:7D:8A:63:D6:5C
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 06BC
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DD32B7D62FD911EDB12260D9F1222468.roa
Signing time: Fri 09 Sep 2022 00:53:48 +0000
ROA not before: Fri 09 Sep 2022 00:00:43 +0000
ROA not after: Sat 09 Sep 2023 00:00:43 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724 (0x6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Sep 9 00:00:43 2022 GMT
Not After : Sep 9 00:00:43 2023 GMT
Subject: CN=631a8e9c-c95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:5f:38:ed:c1:84:f5:ef:1a:ef:2f:f6:44:
17:24:59:dc:46:29:9f:1c:0b:97:b5:2d:75:6d:5e:
d6:d0:57:a2:b9:01:f9:f2:4b:3d:e0:cb:a4:23:8a:
95:bf:33:f0:85:34:37:36:de:29:a0:56:a6:14:d7:
90:9b:8a:06:93:e1:52:9d:b7:7d:97:50:9e:e6:e3:
18:14:75:1e:cc:66:69:b0:62:75:f8:a9:6b:49:64:
98:68:5d:bb:7b:b6:b6:c0:e9:2b:6a:20:9b:bf:d4:
d0:00:1c:ad:1e:18:da:16:07:79:c3:f7:b6:2b:09:
7a:b1:18:dc:0d:3b:af:32:ac:91:99:e6:96:b0:c9:
38:e4:7f:ff:6b:4a:79:2e:e8:a0:29:f4:b0:c5:8c:
65:47:06:92:9c:62:4c:94:e6:2b:69:09:1e:09:82:
68:20:72:82:89:a2:ca:e4:ce:3d:30:37:0a:92:52:
26:ee:6c:6d:0e:cf:66:4f:f9:63:11:05:4b:e0:ba:
8b:fe:9f:37:83:04:32:4d:c7:f3:b7:9f:da:f8:8b:
cb:05:95:f6:97:52:26:48:da:14:c0:4b:98:ef:c7:
76:e4:66:67:1b:ff:02:1e:e7:9b:b6:f4:01:0d:ce:
cb:b4:7f:4f:71:19:f7:23:6e:57:46:63:7b:65:f5:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:E5:16:42:D3:F8:56:57:68:94:3A:64:72:FE:7D:8A:63:D6:5C
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/DD32B7D62FD911EDB12260D9F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
88:39:3c:0b:74:7d:48:07:5a:54:f7:84:c0:7b:92:ea:97:28:
d3:26:1a:e0:a6:30:89:16:80:42:a0:26:52:3d:ea:07:04:9f:
c0:4f:2e:11:a8:f8:3f:95:fc:2b:55:a9:85:e7:71:59:e6:3d:
c1:ec:c7:6d:5b:7c:bb:b7:3c:57:c1:82:6d:3d:1b:29:88:5b:
fc:a8:02:d5:5b:d4:c6:58:d8:7e:92:64:b6:a6:f7:a9:22:4d:
81:de:d8:7c:ac:40:8b:bb:4d:19:bf:da:65:93:f8:db:8e:8d:
39:af:ed:73:14:98:f6:12:1a:61:dc:cc:14:75:7b:be:dd:5f:
be:6b:7b:fa:1a:6d:5b:0c:65:8c:eb:54:8c:a3:90:93:77:36:
ce:33:a1:a8:b5:5e:43:bf:c5:a4:bf:d2:68:64:0f:e6:d7:52:
31:ba:01:0a:89:5f:58:38:ee:30:9a:e4:eb:d5:63:ea:c6:d9:
c0:0c:01:e9:8b:2b:67:b0:ea:e0:3d:17:48:5d:00:42:56:3d:
4e:5e:44:6b:6b:6d:ae:12:d6:3b:e6:31:13:89:35:7e:66:d2:
08:84:04:dd:93:38:38:11:e7:41:aa:5a:31:7e:0b:b3:ee:40:
f9:d6:b0:5a:8a:5b:7f:d5:fc:ee:cf:4d:08:e7:52:99:af:22:
30:76:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org