Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FEF6D5A4CCCF11ECBEF13EB3F1222468.roa
File: FEF6D5A4CCCF11ECBEF13EB3F1222468.roa (raw, json)
Hash identifier: 9OnbU1dG8ymh6p3dEVUcWWbvKrN+AmxbkBbTOUdBQxg=
Subject key identifier: 82:89:30:FA:93:7D:BA:A9:DF:09:EA:67:95:67:00:EB:0C:82:72:C4
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 045D
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FEF6D5A4CCCF11ECBEF13EB3F1222468.roa
Signing time: Fri 06 May 2022 00:03:45 +0000
ROA not before: Fri 06 May 2022 00:00:40 +0000
ROA not after: Sat 06 May 2023 00:00:40 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: May 6 00:00:40 2022 GMT
Not After : May 6 00:00:40 2023 GMT
Subject: CN=627465e1-7ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:49:c9:98:e3:37:2b:80:4c:88:85:6a:7e:
b5:87:56:96:e1:b0:c9:dc:f0:0b:02:e7:f9:cc:72:
b2:b0:b3:a6:cc:7b:47:0d:5b:68:84:bd:fc:7f:54:
9a:0e:4b:ae:00:5b:06:6f:94:45:e8:e8:f9:ca:e9:
ed:bc:39:e5:de:b9:ab:4b:01:57:04:ef:5a:c8:49:
0f:b1:b8:d3:bb:99:64:4b:98:e3:cc:a5:6b:f1:5f:
51:ea:53:b5:55:65:6e:7c:87:e4:f2:fe:c6:8f:fd:
01:20:78:08:c7:51:f4:86:8d:43:c1:ac:53:58:2c:
35:05:fa:40:ab:19:8d:a9:0d:86:5d:22:5e:a4:04:
33:2f:23:9d:ca:e0:cf:79:62:c8:72:26:d8:89:4e:
97:6a:1e:ee:10:4e:97:6e:29:85:7b:e1:19:10:ae:
51:b2:f0:a9:1d:39:3e:94:ba:a9:c3:18:26:97:be:
f4:50:4d:7f:88:05:d7:80:64:ba:50:ee:77:ae:93:
2d:0b:bc:73:bb:57:42:b5:03:8d:bd:de:76:d2:63:
1c:55:2b:68:bd:cf:e6:ef:3e:80:6b:df:2c:ea:28:
0a:c1:4a:64:2f:9c:7c:96:25:08:39:35:98:69:eb:
2f:8c:5c:c8:7f:33:c5:cb:3f:60:c4:4f:59:d1:13:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:89:30:FA:93:7D:BA:A9:DF:09:EA:67:95:67:00:EB:0C:82:72:C4
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FEF6D5A4CCCF11ECBEF13EB3F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
84:23:06:e1:c0:ea:2a:6c:88:42:59:36:98:d4:0d:54:2d:eb:
02:31:48:aa:68:01:ed:78:c8:c5:ae:0a:7f:b3:c9:76:46:9b:
12:39:64:bb:1f:eb:ed:77:bc:ea:ab:74:77:57:7a:e5:2c:24:
86:78:4c:7b:21:51:1d:fe:72:44:b3:7b:7a:9d:9a:cb:c6:32:
f4:b4:21:df:eb:07:17:e1:2a:b7:02:f8:ae:23:a8:52:f6:77:
90:04:2a:4a:10:e9:a4:16:c5:f9:b1:96:2f:5e:d6:e0:62:cd:
47:c3:cf:57:82:ee:6a:7a:3f:58:c6:22:d6:ac:b3:01:bb:ea:
d7:24:8c:3e:16:7e:15:54:96:5d:ac:6f:54:05:47:b8:02:06:
cd:cd:59:5a:ae:8d:30:c9:15:33:e6:7d:bf:17:07:1e:31:12:
9e:97:f9:8b:e7:b7:18:42:de:90:92:8d:f5:a4:1b:71:0a:a5:
3e:9b:8f:01:43:93:e7:9e:32:b7:37:70:af:cc:58:45:ab:8d:
f7:cf:a4:d8:52:c5:75:d6:e4:d1:89:04:23:6e:5e:2e:f2:80:
35:e0:5e:bb:c0:fb:fb:46:2d:80:1f:3f:1c:c3:a9:87:40:48:
97:92:f4:c1:32:5c:e3:83:c5:d2:9a:aa:2c:40:e1:e3:8d:39:
25:b4:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org