Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/12EF685203CB11F0B0DB5459762E951A.roa
File: 12EF685203CB11F0B0DB5459762E951A.roa (raw, json)
Hash identifier: Oz80jqXa62DemQ2Ne10KHqtv5U9gxcJOWKy46ejVri0=
Subject key identifier: 56:84:51:51:34:D1:06:C6:7E:64:FA:08:B6:B4:84:D6:45:43:7F:17
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C1D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/12EF685203CB11F0B0DB5459762E951A.roa
Signing time: Tue 18 Mar 2025 07:31:58 +0000
ROA not before: Tue 18 Mar 2025 07:31:54 +0000
ROA not after: Wed 16 Mar 2033 07:31:54 +0000
asID: 36916
IP address blocks: 192.142.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3101 (0xc1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:31:54 2025 GMT
Not After : Mar 16 07:31:54 2033 GMT
Subject: CN=67d9216e-e5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:51:5e:7c:85:fe:ee:8f:16:70:89:08:9c:
4e:6d:25:9d:20:5e:dc:33:49:9e:fd:20:b9:7b:29:
94:af:72:6e:f9:62:7a:7a:53:d3:f3:98:18:cb:55:
ae:25:f2:69:e8:82:c1:6a:11:da:2b:7b:dc:ef:de:
f0:7c:43:80:0d:10:71:36:1e:e7:a5:4b:b5:58:5d:
8a:cd:e2:27:68:d3:ed:33:75:34:9e:68:5d:fe:ed:
35:5a:22:ae:d7:a1:e1:64:ef:b4:c2:46:2c:a5:ae:
fc:78:9d:75:dd:63:56:d1:ac:86:ef:6e:dd:3f:25:
38:61:d0:fc:c0:0c:38:89:28:46:06:e8:da:45:8f:
8e:65:50:2b:28:1a:c4:50:de:d8:19:ef:56:03:e4:
ee:1d:7f:42:64:2d:c0:2a:dd:8d:90:6b:47:de:76:
a7:5c:e4:b0:ca:38:66:89:d3:e7:b9:b9:e6:49:14:
a7:1a:1f:50:b1:b2:ba:c4:47:50:ec:c6:27:74:0a:
fb:b4:f2:52:7e:70:f1:2e:38:69:ac:42:82:97:79:
20:3d:8a:f5:a6:4e:24:bf:c2:2a:7c:57:c2:ff:77:
cc:e7:59:ea:db:71:b4:64:7e:df:0f:57:b4:5c:46:
a3:98:08:aa:ff:dc:27:36:db:29:d4:31:09:c1:b1:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:84:51:51:34:D1:06:C6:7E:64:FA:08:B6:B4:84:D6:45:43:7F:17
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/12EF685203CB11F0B0DB5459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.136.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:c6:ba:ec:ce:01:c9:d2:5c:45:e4:07:a7:2f:ca:09:44:f4:
33:08:ab:f6:54:1c:e5:70:5a:3e:85:1b:37:16:11:35:d9:f6:
f9:6b:a7:41:9c:5d:4c:2a:1b:ba:5f:73:a3:68:bc:25:33:32:
78:20:65:bf:81:07:a9:3a:f6:48:0e:e8:45:36:a0:f3:f1:0d:
7e:f6:86:1b:1d:c9:14:ea:66:62:3b:53:19:f1:2b:8b:e6:ef:
3d:50:90:32:16:f4:be:d7:ae:6c:f9:97:3e:1c:ee:78:a7:be:
7e:18:6f:57:b8:50:0c:ab:01:e3:ef:0c:7a:a9:0c:f2:24:54:
6e:d3:92:74:2a:95:55:c9:51:42:bd:ed:c3:b9:9f:59:a3:c6:
a1:d1:10:d0:c4:dc:e2:2d:9c:d4:a7:1a:1b:29:c9:5a:5f:ae:
39:cd:e1:5d:10:32:ef:60:52:c6:2e:35:0d:d9:52:d7:40:03:
e9:57:4c:82:48:0a:c4:9d:e4:07:24:98:b8:aa:88:9b:03:fb:
c0:b1:58:eb:8b:e9:da:a9:27:ff:a0:f0:3c:fc:17:cd:66:d3:
b6:cf:5a:72:1d:80:cf:fe:5f:52:12:5a:c5:95:16:1e:7d:f1:
a2:b7:4f:8c:7b:6c:02:c2:ac:5c:be:0f:96:d1:18:20:f6:96:
4e:ca:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:30 2025 by rpki-client