Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E17DDBEF8FE11EFAC9836B0762E951A.roa
File: 0E17DDBEF8FE11EFAC9836B0762E951A.roa (raw, json)
Hash identifier: 3WxAizp28JLdKnoRwoGpTl8lY/hshLG+alAb3YVPEQY=
Subject key identifier: 3A:F8:81:A6:D1:84:59:DB:11:C2:74:40:56:65:86:D7:30:31:76:2B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0BF0
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E17DDBEF8FE11EFAC9836B0762E951A.roa
Signing time: Tue 04 Mar 2025 13:39:11 +0000
ROA not before: Tue 04 Mar 2025 13:39:08 +0000
ROA not after: Tue 06 Mar 2035 13:39:08 +0000
asID: 210636
IP address blocks: 192.142.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3056 (0xbf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 4 13:39:08 2025 GMT
Not After : Mar 6 13:39:08 2035 GMT
Subject: CN=67c7027f-ac91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:5e:7c:3e:39:f1:c5:e1:b2:e7:61:d9:f7:
5b:27:00:14:ed:88:d0:a8:69:8b:56:dc:40:17:33:
b2:a7:88:2b:1f:7c:65:ed:1b:09:02:64:f3:4c:df:
26:05:16:38:8e:9c:1a:02:f0:9b:0c:81:cd:57:38:
6e:98:39:54:79:93:6b:da:4d:c8:0f:3e:64:a6:78:
f8:ec:7f:bd:1d:ae:b4:1d:11:42:b5:1f:92:da:cc:
5f:22:fc:1b:fc:b4:56:7b:b1:54:43:60:5e:45:e0:
9c:db:2a:4a:e6:05:ce:32:32:2b:3c:df:8e:ba:ff:
00:1c:92:0a:d9:c8:ab:e5:ff:8c:42:ee:19:42:65:
11:51:0b:07:71:6e:f2:cb:aa:11:01:9f:b3:ff:4e:
04:c2:19:10:fb:83:01:90:e6:86:9b:ca:0a:cd:50:
13:08:8e:47:45:93:4e:30:aa:d8:21:0b:17:11:ff:
3b:c3:bb:0c:b8:0e:e1:c8:74:c0:24:be:cb:c6:32:
0b:29:ad:d6:a0:d9:79:3e:f6:df:87:e9:d8:a2:26:
e3:b1:9f:d2:8c:10:af:03:e6:0b:aa:ad:14:2a:7b:
dd:ed:16:97:6a:31:7f:dd:20:19:f3:fe:c6:14:77:
8e:04:ab:d5:61:76:2c:04:84:da:63:86:9b:54:94:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:81:A6:D1:84:59:DB:11:C2:74:40:56:65:86:D7:30:31:76:2B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E17DDBEF8FE11EFAC9836B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.36.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a6:37:4c:7b:81:07:ba:db:8f:4a:76:e4:da:c5:c2:4e:14:
9d:58:c0:16:df:6c:1c:70:3b:44:4d:0e:aa:00:c7:74:64:70:
71:b6:f1:4e:27:ca:0e:f7:13:d5:11:06:a7:c0:39:66:e0:71:
08:0a:5c:62:23:83:7f:78:fa:63:58:a8:20:94:1e:66:65:d3:
24:1d:00:54:e5:3b:c7:fc:ca:1d:c0:4a:0f:6c:89:dd:61:f8:
88:78:d2:db:08:41:4b:44:3d:14:ad:7a:3e:60:56:34:66:0d:
08:32:c3:4e:df:5f:05:b7:ae:6e:46:e5:5c:93:0e:7c:a6:9b:
ef:0a:7f:09:22:12:27:d4:2c:2c:0d:af:91:41:18:07:d9:6b:
a9:5a:c4:4d:86:7b:24:e2:04:3f:db:11:90:10:23:44:d5:f5:
13:47:28:04:c1:29:2d:45:86:d8:ce:88:d2:ae:0d:30:79:29:
09:1e:e2:86:45:4b:4b:48:2e:97:30:82:29:e1:58:ef:41:7d:
3a:92:07:26:fd:2c:9c:dd:45:2e:14:7b:5d:6d:56:e9:c3:c9:
47:2d:c9:31:58:85:1d:cb:23:ec:31:2f:10:3a:cf:36:9a:e3:
a1:25:5d:0d:24:dc:cd:94:27:bf:6a:05:a6:d9:94:3c:2e:b6:
bc:b7:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:12:21 2025 by rpki-client