Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FEFFA30CAA5411ECB18EEDA05A40D577.roa
File: FEFFA30CAA5411ECB18EEDA05A40D577.roa (raw, json)
Hash identifier: V7oWYfLfVgsm8R4mMrAxjQMzPJ01AuuZbwG6C/LBJp8=
Subject key identifier: DB:0E:C0:5D:EC:41:1E:59:48:5C:F8:9C:1C:64:5E:09:39:37:EE:84
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0339
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FEFFA30CAA5411ECB18EEDA05A40D577.roa
Signing time: Wed 23 Mar 2022 02:57:37 +0000
ROA not before: Wed 23 Mar 2022 02:57:33 +0000
ROA not after: Thu 23 Mar 2023 02:57:33 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 825 (0x339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 23 02:57:33 2022 GMT
Not After : Mar 23 02:57:33 2023 GMT
Subject: CN=623a8ca1-5f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:57:e8:e9:1c:b8:fb:da:3e:4b:f7:12:e4:37:
79:38:af:66:3a:fa:ce:90:c6:b3:6f:2d:a3:32:f6:
cb:bb:d2:71:20:66:f1:a8:2f:c4:74:72:42:6d:19:
6c:79:6c:99:65:be:45:3c:e7:63:cb:a2:79:d5:d4:
a0:6d:2f:46:8e:f0:d7:76:78:ee:50:eb:0b:4c:94:
41:91:67:74:4c:df:33:d0:33:82:bd:0f:52:2c:7d:
9e:3d:cf:69:35:6f:c7:c1:9a:ac:02:69:73:4c:96:
09:8c:cc:10:22:4b:41:c1:7c:28:9d:89:99:bb:a4:
88:55:12:f5:e3:0c:39:c2:37:2b:63:00:7a:0f:77:
2e:9b:75:8d:ec:d1:7d:51:b8:a5:a1:9f:b0:9b:67:
8e:76:ad:f6:57:09:2e:12:7c:b9:36:ff:68:76:fb:
3d:f4:07:97:dc:e1:66:18:3b:2a:8d:2a:51:3f:29:
60:77:3a:27:c4:1f:7f:76:bf:6c:6f:07:7c:51:1c:
a4:0c:e1:0f:f6:a5:f7:68:82:4f:dc:d2:f9:a8:88:
37:70:1e:48:8a:dd:57:eb:13:99:45:46:4f:15:ba:
81:91:bc:fd:32:be:cf:97:d0:a7:20:55:60:da:db:
de:e8:c1:65:40:b9:4b:5e:11:94:c4:b0:c1:87:0e:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:C0:5D:EC:41:1E:59:48:5C:F8:9C:1C:64:5E:09:39:37:EE:84
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FEFFA30CAA5411ECB18EEDA05A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
32:b0:d9:5b:3c:32:61:31:fb:2d:49:36:bc:b7:b0:03:a3:16:
77:51:c1:cd:0a:13:9d:c3:51:c6:b9:d2:94:6e:b9:20:b8:da:
f0:af:43:12:ac:4c:26:3c:54:24:b4:69:65:c1:29:cc:23:c6:
cf:e5:2b:33:06:c8:a7:bf:3c:85:90:09:81:22:68:3f:40:b7:
28:6c:75:a2:04:0e:4a:e1:f3:1f:25:10:01:60:e5:c1:a8:48:
19:98:f4:a9:37:da:e0:39:de:7e:ea:95:2c:b3:4e:f7:0c:c2:
a8:b5:a3:df:dd:ab:67:11:03:9e:d5:90:c8:f3:4c:5a:3b:a2:
2b:79:50:e5:73:e9:97:19:02:97:5c:fa:16:ab:e8:06:82:6b:
71:ac:1a:f1:82:62:3e:6c:20:d8:71:a0:93:c9:3d:18:14:c4:
2d:74:9e:0b:8c:af:fe:6e:e8:b0:f4:69:d3:60:9c:e3:7b:0b:
64:55:8e:45:7a:2e:9b:ed:7d:3f:dd:97:bf:e4:68:39:85:f6:
42:5a:7e:ee:1e:6e:d5:f5:09:79:ba:60:59:6d:ea:2e:f8:2c:
8a:0e:3f:f0:56:fe:f1:be:5e:a7:ac:25:00:ca:31:1a:f4:ce:
89:ef:95:41:72:c5:ef:cc:a0:14:34:78:f5:22:4d:b1:a4:df:
06:2f:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org