Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EF25BA6C87C611EC9C30F7A25A40D577.roa
File: EF25BA6C87C611EC9C30F7A25A40D577.roa (raw, json)
Hash identifier: iKla2LuFwqXfY7YA0eCGgyQlzJ/rRfOxxtIBk3SKO/g=
Subject key identifier: CC:FF:9E:52:0A:88:50:2D:9A:8A:81:4D:DF:4C:6D:21:4E:0A:A8:4A
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0258
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EF25BA6C87C611EC9C30F7A25A40D577.roa
Signing time: Mon 07 Feb 2022 03:35:03 +0000
ROA not before: Mon 07 Feb 2022 03:34:58 +0000
ROA not after: Tue 07 Feb 2023 03:34:58 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Feb 7 03:34:58 2022 GMT
Not After : Feb 7 03:34:58 2023 GMT
Subject: CN=62009367-dac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:5e:d7:2a:db:dc:34:8d:24:22:58:a4:19:
c8:8c:bd:3d:90:01:50:f8:b3:2c:93:ff:7e:46:d2:
da:9b:f8:44:fe:9b:03:07:ac:52:f4:9d:25:5b:7c:
34:6e:6c:04:06:31:84:89:7b:c5:88:79:cb:a4:b5:
80:15:ba:66:e2:72:5a:cd:9f:62:d1:bc:e7:70:56:
e3:e8:9d:f7:f1:9f:fc:44:2d:99:6d:e8:98:8a:dc:
2e:90:7f:66:66:6b:57:9f:2d:b3:fc:68:fd:f8:16:
ef:c5:90:52:db:04:30:bb:98:57:e0:a1:f2:3c:99:
0a:48:66:95:e7:73:14:24:43:13:1f:22:92:7b:3f:
cb:b0:e7:66:96:4c:33:78:94:cc:a2:bb:f3:ec:93:
a3:f3:c7:e2:0e:f0:85:c9:ff:62:45:d9:42:4a:39:
bd:5b:a6:a1:08:13:db:aa:03:db:ee:ff:54:49:93:
ca:98:e7:b9:7a:20:21:c7:c6:d3:93:e8:77:5a:47:
aa:bb:7e:01:5b:4d:ec:e8:42:0b:88:35:2d:36:e5:
e6:fb:70:94:8e:57:c7:4f:2c:12:4f:cd:76:e4:43:
fd:57:9e:99:6a:cb:fb:4d:e3:c5:20:f7:09:0f:61:
6f:44:e0:4c:d4:86:83:4c:ce:e9:af:b4:9b:4a:06:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FF:9E:52:0A:88:50:2D:9A:8A:81:4D:DF:4C:6D:21:4E:0A:A8:4A
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/EF25BA6C87C611EC9C30F7A25A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
5e:40:58:9f:35:19:0f:d0:c2:22:1b:0f:db:0c:5f:8d:f9:cd:
3d:91:68:7a:6b:26:b8:06:be:dd:e9:75:29:04:c8:e9:ff:d1:
47:0e:0d:01:b6:cf:d4:72:4a:d7:bf:27:4d:ab:b1:b9:6b:7a:
d1:6f:ed:88:17:63:92:18:60:39:d1:bc:be:fd:b4:12:48:76:
17:a0:93:8c:45:e4:00:87:2e:fd:b1:20:b0:4a:61:22:37:dd:
a0:95:e0:0f:ac:bf:ca:b1:38:0f:58:07:04:f0:01:40:6c:13:
45:fa:80:d4:6b:0d:8f:18:f6:24:1f:5d:08:a8:cb:3f:1b:3e:
95:e7:83:45:de:fa:03:1c:be:61:72:2f:42:ba:a2:7a:53:63:
5c:cc:b4:ca:2d:24:20:80:37:d1:92:70:3a:06:10:58:b2:e1:
af:a4:96:38:91:38:be:ee:92:0d:57:a7:1e:f3:c5:a0:bd:38:
20:a4:b4:ad:a8:38:a9:6c:ac:0f:ac:a7:81:f6:c8:f4:aa:53:
ac:e3:44:b2:eb:95:d6:8f:c3:38:c4:2f:82:75:83:da:72:44:
6b:88:fc:b5:18:0e:ef:7a:e4:e6:5a:58:5c:da:11:81:70:e5:
a2:10:17:b2:f0:ac:70:cd:1b:04:cb:05:d1:83:38:86:fa:7e:
d1:79:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org