Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FF9F6AD4A3F311EC8E4E88DA5A40D577.roa
File: FF9F6AD4A3F311EC8E4E88DA5A40D577.roa (raw, json)
Hash identifier: gfLL18AlEHUMcZN6nZ9BbezvUpuUOSkfs5DdUgaz/G4=
Subject key identifier: 09:65:14:84:31:11:1E:34:E2:E5:99:83:BD:4E:BC:3B:7E:87:4E:2E
Certificate issuer: /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial: 0301
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FF9F6AD4A3F311EC8E4E88DA5A40D577.roa
Signing time: Tue 15 Mar 2022 00:08:10 +0000
ROA not before: Tue 15 Mar 2022 00:00:05 +0000
ROA not after: Wed 15 Mar 2023 00:00:05 +0000
asID: 3970
IP address blocks: 2001:43f8:df1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Validity
Not Before: Mar 15 00:00:05 2022 GMT
Not After : Mar 15 00:00:05 2023 GMT
Subject: CN=622fd8ea-861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:42:56:32:f9:f9:1e:f6:10:ba:af:fb:a9:
59:9b:4a:d8:9b:db:f0:33:e1:a7:14:5b:f9:b7:dd:
19:d2:7d:41:93:fd:b7:df:06:f6:23:09:6c:af:7d:
ac:98:e8:77:35:45:54:06:aa:85:ab:7b:e8:c3:4b:
de:6c:31:e3:79:5d:6e:1f:e1:41:98:04:15:54:99:
67:b1:6d:57:4f:5f:f7:dd:02:ad:be:bd:ba:28:dd:
ba:e1:9d:8c:df:d3:a1:6c:0a:f1:cb:a6:fe:b4:7b:
19:d2:f0:61:d5:5b:e9:32:cc:09:91:92:41:3f:3b:
ad:6a:f9:94:72:a9:08:e7:5f:7e:2a:7a:4e:c1:86:
38:17:eb:05:5f:6e:33:61:41:fe:9a:21:e6:bb:d9:
41:01:08:1a:7b:14:94:40:ad:ee:c0:fa:b1:d2:fc:
22:f1:4c:6a:67:81:17:34:8b:94:30:35:c5:00:24:
59:ac:ba:5c:48:3a:c5:a8:af:7f:4d:1c:bd:79:6a:
2f:2c:23:2d:e4:ae:d5:79:82:10:d1:b0:9a:39:af:
73:0c:51:56:d1:a5:51:fc:24:c7:40:94:84:18:bf:
cb:4c:82:ed:99:56:ac:27:e4:94:90:a4:4e:1c:3b:
20:13:3c:5e:80:3a:ed:c1:24:e3:a6:36:bf:b1:f1:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:65:14:84:31:11:1E:34:E2:E5:99:83:BD:4E:BC:3B:7E:87:4E:2E
X509v3 Authority Key Identifier:
keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/FF9F6AD4A3F311EC8E4E88DA5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:df1::/48
Signature Algorithm: sha256WithRSAEncryption
26:9c:95:38:98:5d:76:19:32:73:b4:43:54:2d:cb:26:0d:32:
5e:a0:62:b2:92:98:8f:71:44:53:0b:1b:b8:6b:0c:77:e3:4c:
fb:d7:fa:f4:ab:09:17:76:3a:17:f3:1e:46:68:c5:b8:cf:cc:
9c:1b:6b:4b:d5:ff:d2:b6:35:ef:75:6a:1e:ee:78:78:41:7b:
5e:f2:59:4e:53:88:ad:cd:bb:50:60:f4:d2:1c:e4:a9:36:f9:
ea:2f:f4:39:cf:bf:b9:37:fc:4d:73:79:54:d9:85:a3:0c:8c:
db:19:27:59:ee:b9:a1:53:80:79:72:03:17:39:cf:79:94:0b:
e8:5f:a8:b4:af:ed:e5:5f:9b:1e:cd:57:25:bc:00:87:50:b5:
e9:9c:05:94:91:f0:b5:c8:bb:93:9b:b1:ce:6b:3c:d5:15:84:
fe:be:76:96:11:61:4f:f6:2c:b9:d1:fe:ab:30:8a:be:de:8a:
30:8c:9c:9a:3e:c2:08:8f:de:7f:ac:05:72:ce:5f:9a:a0:ff:
41:a4:95:c0:d2:1b:3c:18:12:80:3d:51:ce:4b:4c:cd:b2:c4:
a7:1c:7b:fd:1a:d8:07:6f:4b:df:99:e7:79:41:31:ea:9b:e0:
ab:bf:ef:17:a5:31:18:9f:1f:a8:77:99:9f:02:b5:34:5e:46:
e2:a8:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:08 2024 by rpki-client on console-fra.rpki-client.org