Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7C3184B2B0BA11EF8167FE67762E951A.roa
File: 7C3184B2B0BA11EF8167FE67762E951A.roa (raw, json)
Hash identifier: LwyA2EL9d7G4A2C6o54/Scx1TWsiUoW9h3Gnb1dvMj4=
Subject key identifier: B7:EB:66:A6:1D:A0:7A:7D:DF:FF:F1:BF:B8:7A:D2:F2:A2:BA:8C:2A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B43
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7C3184B2B0BA11EF8167FE67762E951A.roa
Signing time: Mon 02 Dec 2024 14:34:07 +0000
ROA not before: Mon 02 Dec 2024 14:34:03 +0000
ROA not after: Wed 06 Dec 2034 14:34:03 +0000
asID: 60064
IP address blocks: 192.142.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2883 (0xb43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 2 14:34:03 2024 GMT
Not After : Dec 6 14:34:03 2034 GMT
Subject: CN=674dc55e-9d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:e9:8f:38:bc:01:fd:6d:7f:e3:26:db:0f:
8d:1e:15:99:6d:39:0c:a4:3a:f3:c8:a4:9a:a0:78:
91:0a:fe:85:64:89:09:be:cb:1e:bc:d5:a7:cc:6c:
1b:22:56:53:0f:48:e1:4e:f3:2f:f9:39:12:84:11:
8d:af:7d:33:01:91:b0:4e:1e:da:4e:b5:8b:84:0c:
81:66:5c:19:6f:b9:d4:01:b3:a2:30:c4:dd:b2:ad:
56:be:0e:e8:23:ec:d4:5c:cc:a1:ff:30:22:3d:f5:
74:4e:49:e1:45:98:cf:27:f9:9d:7b:f8:f4:8a:51:
04:47:62:c6:45:d5:ac:7d:b5:d7:4a:f2:52:d1:9d:
4b:16:e5:e9:67:e8:7c:06:55:55:fb:8b:da:c3:8e:
c8:ea:3a:c1:86:b1:f4:82:fd:b3:9d:54:5f:d4:a5:
c0:68:60:5c:a7:0d:13:e7:86:13:ef:f7:b9:45:c1:
78:e5:0a:e3:b9:39:df:ff:0e:0a:95:08:b6:6a:d0:
52:47:f2:47:82:69:56:a5:b5:6b:b4:fa:b0:07:b7:
7c:61:4d:f0:bc:25:ad:fe:6d:ff:0c:34:77:f2:df:
41:2b:cb:42:59:23:e3:00:fe:27:76:b6:9e:9d:8b:
d9:91:15:23:10:d6:86:29:a0:ee:bb:8a:7c:68:e3:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:66:A6:1D:A0:7A:7D:DF:FF:F1:BF:B8:7A:D2:F2:A2:BA:8C:2A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7C3184B2B0BA11EF8167FE67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.24.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:2e:82:f3:65:23:16:b3:b0:a0:41:69:a9:3f:3e:d3:5f:4b:
ff:26:5e:20:80:88:c1:a4:a5:ef:87:03:09:c2:1c:13:01:c4:
e2:2f:13:93:13:9e:17:82:d6:b8:2c:78:53:29:74:85:85:25:
04:13:30:95:83:96:0c:0a:25:26:d7:6a:5c:a6:d7:78:4c:1e:
89:a1:8e:d5:b7:87:b8:8d:19:62:70:8a:db:a5:23:9c:de:48:
7f:ad:33:1e:27:e3:56:f9:ae:a1:41:1e:06:58:9f:f6:96:63:
c3:98:d9:de:e8:1b:3c:54:e4:76:be:34:15:b1:0a:02:54:de:
94:47:b3:15:1f:95:84:bf:f4:09:44:57:f7:4b:ea:8a:de:25:
ca:4d:c9:69:42:a2:ea:d3:ce:b3:bf:fc:6f:6b:60:ce:18:11:
67:90:d7:e1:9f:8d:5c:55:e0:76:2d:49:b8:85:97:98:50:e5:
c8:6f:93:67:1c:4e:a4:e2:69:f6:41:ee:e7:6f:eb:62:ce:ed:
f3:ee:3a:32:9d:78:69:0a:b1:ba:e2:4b:32:af:73:b4:18:22:
0e:7c:75:9c:fc:2b:c1:78:4b:44:de:d9:5b:ac:61:08:48:5b:
52:13:26:46:3e:b1:39:e6:c0:a3:7b:3e:47:d3:df:01:d5:5e:
d7:9b:ca:a5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDEyMDIxNDM0MDNaFw0zNDEyMDYxNDM0MDNaMBgxFjAU
BgNVBAMTDTY3NGRjNTVlLTlkNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+KemPOLwB/W1/4ybbD40eFZltOQykOvPIpJqgeJEK/oVkiQm+yx681afM
bBsiVlMPSOFO8y/5ORKEEY2vfTMBkbBOHtpOtYuEDIFmXBlvudQBs6IwxN2yrVa+
Dugj7NRczKH/MCI99XROSeFFmM8n+Z17+PSKUQRHYsZF1ax9tddK8lLRnUsW5eln
6HwGVVX7i9rDjsjqOsGGsfSC/bOdVF/UpcBoYFynDRPnhhPv97lFwXjlCuO5Od//
DgqVCLZq0FJH8keCaValtWu0+rAHt3xhTfC8Ja3+bf8MNHfy30Ery0JZI+MA/id2
tp6di9mRFSMQ1oYpoO67inxo4yCVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUt+tm
ph2gen3f//G/uHrS8qK6jCowHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzdDMzE4NEIyQjBCQTExRUY4MTY3RkU2Nzc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPAjhgwDQYJKoZIhvcNAQELBQAD
ggEBAJ4ugvNlIxazsKBBaak/PtNfS/8mXiCAiMGkpe+HAwnCHBMBxOIvE5MTnheC
1rgseFMpdIWFJQQTMJWDlgwKJSbXalym13hMHomhjtW3h7iNGWJwitulI5zeSH+t
Mx4n41b5rqFBHgZYn/aWY8OY2d7oGzxU5Ha+NBWxCgJU3pRHsxUflYS/9AlEV/dL
6oreJcpNyWlCourTzrO//G9rYM4YEWeQ1+GfjVxV4HYtSbiFl5hQ5chvk2ccTqTi
afZB7udv62LO7fPuOjKdeGkKsbriSzKvc7QYIg58dZz8K8F4S0Te2VusYQhIW1IT
JkY+sTnmwKN7PkfT3wHVXtebyqU=
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:32 2025 by rpki-client