Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E574F820CE8411ECB3D00E9EF1222468.roa
File: E574F820CE8411ECB3D00E9EF1222468.roa (raw, json)
Hash identifier: U/HYXblGudbDGM4H6GEdr8nKS9gt/RfycIZ6QuOTkcg=
Subject key identifier: B2:09:AB:DF:90:F2:BD:E4:76:21:CD:94:26:87:09:B1:C8:4D:C0:D8
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 046E
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E574F820CE8411ECB3D00E9EF1222468.roa
Signing time: Sun 08 May 2022 04:11:12 +0000
ROA not before: Sun 08 May 2022 04:11:08 +0000
ROA not after: Mon 08 May 2023 04:11:08 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 8 04:11:08 2022 GMT
Not After : May 8 04:11:08 2023 GMT
Subject: CN=627742e0-f3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:52:97:0f:f7:ae:3d:b0:0c:68:19:46:42:
a2:38:01:5a:b1:6f:0f:e3:ad:c6:46:9e:f5:94:3f:
ad:1d:27:c4:b6:15:6b:80:55:02:70:10:cb:5d:ae:
06:a5:ed:9d:8d:2a:94:ca:88:38:fd:20:4f:25:38:
ec:fa:7d:e1:3b:ba:b2:15:b0:35:27:9f:a5:e1:4e:
ee:9a:88:bb:ec:52:23:b5:97:03:72:55:e9:e4:ef:
ad:b2:d8:97:be:dd:e1:9a:90:4b:01:87:70:4c:8d:
7d:80:9b:a4:78:ce:f0:fd:aa:5f:6f:27:50:5a:6f:
49:ff:fd:74:19:38:8d:88:5c:5c:f6:02:60:8e:1a:
d6:25:32:ff:dc:f9:9b:a6:b7:95:39:c7:a4:86:b0:
8e:2b:dc:90:16:8f:8a:c1:74:0d:ac:e3:97:0b:58:
03:ed:d1:14:e9:48:ee:a9:f8:2e:cf:da:93:95:3a:
1e:5e:db:fd:c1:bb:30:b6:ee:3f:22:22:39:93:68:
2b:aa:47:41:95:1a:71:2b:1c:82:36:6c:80:ff:e1:
8b:31:98:62:08:7b:ad:db:c5:90:f9:65:b5:02:43:
65:a9:a9:1c:19:e5:be:6e:0c:ee:e2:b8:9a:50:99:
72:49:6c:72:13:99:ce:e2:01:09:a2:80:3b:fc:6b:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:AB:DF:90:F2:BD:E4:76:21:CD:94:26:87:09:B1:C8:4D:C0:D8
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/E574F820CE8411ECB3D00E9EF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
42:8a:99:cb:9f:e4:75:cb:b5:2f:9d:fa:22:c5:8a:d2:3d:43:
1f:28:0d:0c:54:b1:b9:44:4e:03:f7:7c:d9:86:49:32:fb:85:
fc:8f:be:52:dd:68:0a:d8:c0:d7:ee:0a:d6:04:f1:65:03:b1:
46:61:c7:9f:6b:76:6f:0f:15:b3:ef:a8:36:c1:b3:30:3f:d2:
50:ab:13:6c:2a:98:ac:3d:22:a5:45:a1:6a:45:bd:54:d1:fa:
ee:aa:98:e9:0d:a8:e2:c7:2c:81:15:d3:5e:2b:96:00:84:d8:
79:2f:20:54:e1:d3:2f:24:22:5f:6b:c4:41:86:1e:9b:10:1c:
4e:b2:31:bc:ff:6d:f4:c1:aa:d6:85:4a:93:57:f8:94:ee:8e:
fc:9f:d6:20:9d:83:44:fd:41:69:e6:7c:8e:7b:61:51:17:37:
e0:45:9f:df:9e:33:bc:d9:31:9b:7e:b5:87:6c:cd:8d:18:a5:
ef:5f:fb:41:cd:91:fd:d4:ae:3a:c3:d7:c6:6b:69:bf:b4:f9:
7d:56:2d:5c:e8:c9:0d:c9:1d:ac:a1:fe:4f:73:55:66:51:26:
3c:6b:eb:3b:93:99:00:5e:30:59:98:87:8d:a1:b9:93:5a:54:
62:ab:ab:38:b9:3a:1d:e1:36:e7:01:55:74:60:ae:ed:df:10:
ab:e5:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org