Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2B601CBCB30111EF8CC4EB53762E951A.roa
File: 2B601CBCB30111EF8CC4EB53762E951A.roa (raw, json)
Hash identifier: +yPXtz/Vt+P242I3ZWpsBINza4M4DYuCCaJaL1UrCeI=
Subject key identifier: 13:E3:79:D1:BF:E7:82:7D:E8:C2:CC:E0:4D:20:16:8C:91:58:86:9E
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B5A
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2B601CBCB30111EF8CC4EB53762E951A.roa
Signing time: Thu 05 Dec 2024 12:05:08 +0000
ROA not before: Thu 05 Dec 2024 12:05:04 +0000
ROA not after: Wed 06 Dec 2034 12:05:04 +0000
asID: 6206
IP address blocks: 192.142.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2906 (0xb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 5 12:05:04 2024 GMT
Not After : Dec 6 12:05:04 2034 GMT
Subject: CN=675196f4-2ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:a9:ef:87:34:2d:2a:41:1d:4c:18:4b:33:
2e:72:ec:6a:ef:b7:c5:54:3e:98:71:b3:dc:4b:3d:
c1:54:df:ac:f8:6d:15:3f:54:c0:6a:67:ad:c2:06:
74:a4:ae:a2:37:97:69:0d:f6:e1:d4:f8:8b:ec:f0:
11:0a:71:78:71:2b:53:c5:7d:20:9f:7d:63:d0:b5:
72:b3:ca:5f:51:3e:17:85:f6:ee:94:61:11:12:0e:
ee:13:0d:fe:b3:f5:d0:f7:d1:1c:11:69:d9:64:15:
7c:98:b2:85:2b:41:85:57:23:b6:48:ab:67:56:05:
fd:d5:a9:e0:ee:a4:99:6c:df:6b:74:f0:db:80:ca:
d3:93:ef:f7:00:56:66:a6:64:52:2d:f7:98:3c:2b:
cc:68:2c:bf:b8:0d:af:8e:2c:60:13:98:ef:79:29:
6d:76:c5:a0:5e:37:05:a5:a9:58:ea:3f:4d:ff:94:
b9:69:ed:ed:35:a0:e2:4a:72:af:ce:96:97:9b:65:
04:3b:e5:50:73:4a:76:6d:18:b3:f0:ad:b1:fb:bc:
80:06:8b:ab:7a:56:1a:69:33:87:7f:b1:78:49:00:
12:bc:2e:7d:86:9c:67:98:7f:4f:f8:d4:ea:91:8c:
54:3d:29:02:e8:75:e2:ee:a0:d5:be:e3:5e:2c:12:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E3:79:D1:BF:E7:82:7D:E8:C2:CC:E0:4D:20:16:8C:91:58:86:9E
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2B601CBCB30111EF8CC4EB53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.35.0/24
Signature Algorithm: sha256WithRSAEncryption
11:89:fe:8b:7f:5a:80:0d:3a:d9:fd:7e:e6:80:80:68:95:af:
c9:07:ee:67:5f:62:28:d8:6a:52:93:1b:03:1a:6f:b8:f8:36:
d8:06:0a:95:9d:07:17:9d:af:47:66:07:4d:54:79:93:cd:bd:
29:f2:86:4c:72:b2:d9:3a:54:7b:65:4e:07:38:10:4c:46:1f:
ab:a2:29:d8:ed:c3:27:5b:ff:ae:68:27:ed:13:60:d9:22:e5:
e9:9d:32:f4:59:78:47:2c:e6:49:a5:c6:1f:b0:4d:6e:75:d3:
29:22:c2:3a:2b:06:a6:12:75:3f:cf:c7:59:af:04:11:e1:a7:
58:cb:a9:bd:6a:e5:12:5a:e7:ee:96:44:c4:36:19:57:4f:f4:
5b:ff:75:2e:f8:58:e0:96:1e:3e:e6:37:45:75:bb:66:1f:7b:
af:3c:04:95:6a:60:43:1b:28:c1:13:a5:25:ca:a7:0a:1d:e1:
6d:33:ed:df:7a:e0:f6:bf:7f:51:44:36:63:0d:a0:c8:9e:74:
5f:e4:38:1b:a1:46:24:82:06:da:9e:da:b7:fb:8a:18:fa:b2:
aa:bb:82:da:3e:b9:92:71:be:18:c5:df:d4:a5:81:c3:10:f1:
45:57:30:fc:60:ee:49:88:6d:de:68:f8:ef:5b:d2:39:01:5d:
c2:19:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:28 2025 by rpki-client