Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EA414AE4B6D211EC8DB23CC45A40D577.roa
File: EA414AE4B6D211EC8DB23CC45A40D577.roa (raw, json)
Hash identifier: b1k/8o6iVNdQ2yc9GtxnTqUIgziJ1S0k5MLNMuzvAJM=
Subject key identifier: 64:82:CC:0D:7D:0B:DD:B3:4F:C5:20:B9:F5:BD:CC:89:AB:3C:53:22
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 03A0
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EA414AE4B6D211EC8DB23CC45A40D577.roa
Signing time: Fri 08 Apr 2022 00:29:13 +0000
ROA not before: Fri 08 Apr 2022 00:00:09 +0000
ROA not after: Sat 08 Apr 2023 00:00:09 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 928 (0x3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Apr 8 00:00:09 2022 GMT
Not After : Apr 8 00:00:09 2023 GMT
Subject: CN=624f81d9-7ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:46:94:ec:2c:f5:4c:ac:ed:a1:bf:6d:ce:ee:
6f:cf:39:26:45:38:f4:b3:ca:ea:8c:30:2f:86:76:
48:43:d6:f5:03:db:6b:5c:cf:4c:bb:4f:ac:8f:28:
bc:2e:ae:b2:06:9c:a1:f8:d1:6e:50:59:8a:da:44:
5f:b8:8a:46:e4:c3:b9:a1:ee:76:d4:ad:36:25:f1:
69:dd:0b:3f:3c:d7:20:19:35:2f:f2:ff:85:8f:54:
15:2b:00:8b:aa:b8:bc:10:d2:30:79:e5:f1:87:c3:
10:c1:84:ee:7e:d2:11:7b:76:5b:9b:64:7c:0a:6c:
e1:d1:af:82:78:17:0c:31:b8:ff:63:9b:4f:b6:54:
b0:2f:fd:d6:6b:ab:b2:1b:60:8a:b3:95:fd:f8:b7:
43:87:e9:64:69:d1:dc:be:9d:a3:3e:1b:c7:0e:9c:
75:cd:8a:0b:e1:9a:03:4d:8e:57:9f:e3:ab:df:1c:
24:2d:93:a7:15:4f:63:b5:4f:6a:97:53:dd:74:2b:
aa:0f:3b:96:72:2c:aa:fb:3f:f9:9d:ec:35:d2:06:
06:8b:d3:12:84:a7:8d:e0:4e:67:22:16:72:71:e5:
ec:48:3f:0a:29:ee:9f:d4:af:57:90:9e:b8:ee:18:
ba:f1:75:68:7d:07:79:7c:91:2c:fb:4d:73:67:02:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:82:CC:0D:7D:0B:DD:B3:4F:C5:20:B9:F5:BD:CC:89:AB:3C:53:22
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EA414AE4B6D211EC8DB23CC45A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
c3:73:d8:7c:34:e3:85:e0:41:f7:cc:61:a1:10:3e:f2:c0:b5:
a4:00:0c:94:20:bb:48:3b:82:38:2b:7f:43:3b:0a:f6:cd:ed:
a4:54:79:10:b5:8e:4d:17:4a:5e:34:ca:1e:71:fa:08:43:cf:
5b:00:8f:cd:c3:d8:a9:bf:f7:dc:8d:82:6b:8b:56:55:1e:ff:
af:0f:02:69:16:9d:a1:d1:02:85:1c:de:27:ae:30:d2:d2:3c:
c3:a1:d7:d8:b1:33:ae:50:ca:57:f3:67:c5:ef:e6:50:b0:fc:
9a:a6:3f:21:dd:da:39:28:7e:97:51:70:0e:6b:34:25:39:23:
d6:ac:37:0b:d8:3e:7f:c4:00:9f:37:7d:48:2b:60:2a:cf:72:
e2:79:1a:32:5c:c8:0e:0b:e2:f9:2c:e5:c9:9f:eb:65:4e:d0:
8c:12:11:b4:61:fe:0f:d0:6b:6b:fe:96:ea:c1:74:05:c5:75:
db:31:13:42:e8:6e:c6:52:61:2d:28:c9:b3:86:56:30:77:ce:
24:a9:dd:30:7a:df:d8:a0:a5:b0:d3:fb:3f:ef:f8:6c:92:83:
2a:0b:c9:fc:53:5b:92:d3:f3:e1:63:13:31:c2:e7:42:20:d8:
09:b3:d6:6f:be:c8:d4:ac:70:b2:43:69:06:6c:95:de:9d:ba:
1d:fd:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org