Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/0473B8EC85D111E9A1D9EE81F8AEA228.roa
File: 0473B8EC85D111E9A1D9EE81F8AEA228.roa (raw, json)
Hash identifier: UmwqCTjJay0NtS3F1xB6ELb6ZTKh2h0qVmM0HrpMG/M=
Subject key identifier: DA:5C:0E:A0:50:BC:3B:4D:A7:BA:A4:A4:AE:20:1E:AA:DE:73:64:C2
Certificate issuer: /CN=F3668CAAAF/serialNumber=A28532016A62C8E08AC783E6C071C11D342CF75D
Certificate serial: 4A
Authority key identifier: A2:85:32:01:6A:62:C8:E0:8A:C7:83:E6:C0:71:C1:1D:34:2C:F7:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ooUyAWpiyOCKx4PmwHHBHTQs910.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/0473B8EC85D111E9A1D9EE81F8AEA228.roa
Signing time: Mon 03 Jun 2019 07:27:19 +0000
ROA not before: Mon 03 Jun 2019 07:27:09 +0000
ROA not after: Sat 30 Jun 2029 07:27:09 +0000
asID: 327999
IP address blocks: 2c0f:f5d0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CAAAF/serialNumber=A28532016A62C8E08AC783E6C071C11D342CF75D
Validity
Not Before: Jun 3 07:27:09 2019 GMT
Not After : Jun 30 07:27:09 2029 GMT
Subject: CN=5cf4cbd6-6bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:92:65:04:9a:01:75:ac:b6:37:aa:9a:3c:
ca:85:2c:06:e9:97:cd:f6:ac:6a:b5:3d:47:7a:5a:
ae:40:c9:b8:7b:87:02:b8:31:d6:0b:cd:d2:6b:a7:
b8:60:1a:c8:64:d5:e0:58:ec:12:fb:01:af:0c:bc:
df:a8:cc:90:96:b4:49:f9:fd:37:26:02:94:e0:b2:
b8:eb:79:c8:8f:cf:05:e1:55:8f:d7:00:0b:3d:84:
d8:e7:b3:8e:c7:36:a8:48:76:5d:24:3f:c6:21:ae:
f9:9d:cc:8a:3d:b3:23:12:d8:05:ba:55:c5:94:42:
11:7f:39:d1:3b:15:e9:8e:80:a3:fa:a8:af:b4:97:
44:51:0a:c7:09:eb:ef:97:27:25:03:24:64:9b:89:
1e:38:1e:cb:17:87:94:80:c5:e9:34:b6:86:50:50:
8c:76:66:8f:91:42:80:ff:81:19:3d:d8:2d:45:0c:
77:15:7e:24:07:5a:6f:77:95:10:e2:87:54:eb:ac:
ce:bf:27:6b:19:7a:94:bd:f3:b8:d0:dd:e1:c3:ae:
68:9a:00:e6:dc:b4:4e:2c:b3:22:c7:4d:f0:67:b5:
40:5d:bf:8e:d9:a3:e5:f2:e2:de:65:75:b2:a4:90:
78:ad:66:5e:06:e4:af:fe:7a:d8:e9:8d:9e:50:4b:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:0E:A0:50:BC:3B:4D:A7:BA:A4:A4:AE:20:1E:AA:DE:73:64:C2
X509v3 Authority Key Identifier:
keyid:A2:85:32:01:6A:62:C8:E0:8A:C7:83:E6:C0:71:C1:1D:34:2C:F7:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/ooUyAWpiyOCKx4PmwHHBHTQs910.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ooUyAWpiyOCKx4PmwHHBHTQs910.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/AA6148485AAF11E9B961EE77F8AEA228/0473B8EC85D111E9A1D9EE81F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv6:
2c0f:f5d0::/32
Signature Algorithm: sha256WithRSAEncryption
c3:1d:2e:3a:b5:1a:12:6f:5b:e6:64:74:32:8f:3f:87:84:52:
40:ca:41:83:83:f5:35:49:f0:72:39:ee:9c:28:2c:77:8a:ed:
05:80:88:a7:39:c5:0e:d7:43:54:22:95:5c:bd:e9:00:d2:28:
31:5e:36:d5:78:94:72:b6:49:5d:83:0f:69:c8:ad:df:eb:02:
f8:04:ac:eb:4f:df:91:58:f5:27:1a:8e:ae:21:b7:a3:6e:9e:
22:c1:83:e9:19:02:be:97:29:23:e5:9f:d1:a7:06:1b:57:14:
30:b1:4b:60:83:2b:ae:18:18:89:a0:5f:9c:8e:30:70:38:18:
be:85:8a:31:06:e1:a7:18:3f:02:dd:6e:35:3e:79:c0:fb:73:
1d:4d:ee:9f:ae:e6:98:43:78:20:d4:3a:ac:8c:ff:bc:65:97:
3e:d4:9e:38:68:4f:19:eb:b5:27:9d:f7:12:a2:db:76:e9:ba:
f5:bd:56:d6:8c:a4:90:ff:d1:e2:13:51:c5:10:37:32:cf:54:
b1:a1:a9:ca:22:82:99:d2:08:50:7a:b3:19:5b:78:09:1a:c9:
97:fb:d5:49:5b:c4:45:2c:77:2e:4a:b8:92:82:32:a7:d9:04:
d7:c4:d8:00:54:29:cb:cb:b3:a1:d8:15:5b:22:4b:cb:3d:65:
83:81:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:56 2023 by rpki-client on console-ams.rpki-client.org