Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/21F84A62FB1511EFA67F2558762E951A.roa
File: 21F84A62FB1511EFA67F2558762E951A.roa (raw, json)
Hash identifier: 5xqWTZdtjUnKtmgTN2krDruQJEEssgJqd4CKYZAuOp0=
Subject key identifier: D3:8B:96:15:64:71:53:CD:8B:3A:6A:53:55:A0:2A:E3:F0:F9:21:34
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0BF6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/21F84A62FB1511EFA67F2558762E951A.roa
Signing time: Fri 07 Mar 2025 05:29:25 +0000
ROA not before: Fri 07 Mar 2025 05:29:21 +0000
ROA not after: Wed 07 Mar 2035 05:29:21 +0000
asID: 214120
IP address blocks: 192.142.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3062 (0xbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 7 05:29:21 2025 GMT
Not After : Mar 7 05:29:21 2035 GMT
Subject: CN=67ca8435-e215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:e5:8a:6e:4d:d4:71:8b:be:fc:17:2e:a2:
be:8e:34:c8:1e:e7:b6:90:aa:11:94:d9:16:9b:19:
ac:ad:fe:6f:b1:4a:0e:0b:18:66:94:05:4f:56:5e:
57:bc:0b:58:1a:c1:7b:0c:4b:a8:36:24:79:ed:40:
93:b9:ca:d2:31:4a:f4:43:bd:fd:5b:5e:f5:2d:a5:
0a:d7:39:a5:4d:4a:1d:cc:54:ee:cc:28:80:c3:db:
61:e8:d2:72:40:23:bd:4e:f2:4b:aa:c3:c0:31:61:
04:59:82:78:97:42:4b:76:b1:5f:ec:67:83:04:86:
00:22:68:63:60:b4:41:e4:18:7a:cb:61:d3:2e:07:
17:95:8a:f3:e2:ab:a9:05:2b:40:45:9e:02:84:01:
d0:18:d9:33:54:32:55:86:97:a5:1f:d7:85:fa:74:
c2:da:ef:3a:15:db:85:22:76:44:ad:3f:f6:3d:29:
8e:f1:0d:c6:c7:89:fd:5e:b7:9f:92:3d:6f:f5:75:
49:9f:78:08:b7:02:b6:07:68:42:db:98:6e:77:1a:
f2:e1:8f:df:db:3c:60:ff:86:e2:4e:9d:59:8b:39:
7b:9e:42:cd:ea:d5:d0:ac:e1:bd:47:99:04:10:69:
f8:dd:da:08:b5:a0:da:33:fd:98:ca:f5:66:a7:39:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8B:96:15:64:71:53:CD:8B:3A:6A:53:55:A0:2A:E3:F0:F9:21:34
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/21F84A62FB1511EFA67F2558762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.11.0/24
Signature Algorithm: sha256WithRSAEncryption
49:20:ec:73:b9:36:1d:c6:0a:bc:f9:bc:34:bc:2d:6f:7f:a8:
17:70:1a:0e:2e:05:4a:6c:4a:e9:66:b2:7b:1a:4d:93:5c:0d:
64:4d:d3:f8:cf:45:b6:90:8f:90:3b:93:78:9a:89:3b:59:8f:
e5:72:03:d0:14:88:82:ff:8b:29:65:9f:30:b5:49:0a:04:ca:
50:86:e1:12:a7:55:cc:71:7c:ce:6d:be:e8:8e:db:f5:0e:74:
b0:30:07:6e:51:e8:4e:11:8d:eb:5b:22:c0:fb:eb:1d:c4:fa:
f5:99:b3:e7:99:ff:95:5c:0c:13:c2:ef:bd:2a:8f:8d:b1:7d:
c1:61:b9:ec:1a:8a:2f:a2:35:a5:f4:c9:83:91:d0:ab:5b:af:
2f:d1:d8:2d:64:ae:4d:65:e2:15:4a:84:90:d0:4e:7b:a3:ed:
f8:dd:50:50:51:65:ab:7c:e9:41:01:f5:3d:0b:fa:3f:20:99:
a3:84:25:b0:60:20:58:98:11:e8:08:45:9e:3e:e8:bf:6e:a9:
5a:2e:93:c7:a1:ae:25:5f:39:f3:73:90:61:e6:15:21:e0:45:
81:15:ff:08:fc:11:a8:50:b0:b1:f8:40:0b:ae:fa:b5:ff:2b:
06:e9:de:b9:65:01:c7:12:da:c6:a1:32:95:c5:1d:e2:d5:3a:
2c:3a:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:27 2025 by rpki-client