Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/38A6EC000BAA11F0AEFC1972762E951A.roa
File: 38A6EC000BAA11F0AEFC1972762E951A.roa (raw, json)
Hash identifier: ztm5eF7M5E00CIFwwslMLcLztRhyz1fo0NudtR/xUvk=
Subject key identifier: 36:E7:B2:3D:54:97:AA:39:10:19:31:A1:E6:46:BC:AF:D4:2D:F1:AA
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C67
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/38A6EC000BAA11F0AEFC1972762E951A.roa
Signing time: Fri 28 Mar 2025 07:56:57 +0000
ROA not before: Fri 28 Mar 2025 07:56:53 +0000
ROA not after: Tue 20 Mar 2035 07:56:53 +0000
asID: 398256
IP address blocks: 192.142.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 28 07:56:53 2025 GMT
Not After : Mar 20 07:56:53 2035 GMT
Subject: CN=67e65649-4110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:0f:50:3c:ad:3d:0a:d1:6c:6d:59:3c:eb:
a5:08:68:5d:ca:15:3a:02:1c:2b:a5:b6:cf:cb:1d:
fb:53:ff:04:bb:6d:bf:cd:c3:13:2a:62:73:d9:43:
b2:52:b6:3b:86:3f:a4:e2:2f:fa:8d:11:18:9e:a7:
5a:d8:2d:4e:c4:e3:0a:96:28:9e:77:3b:70:b2:09:
98:45:46:2f:e2:f1:af:aa:c4:dd:2e:1e:e0:40:5b:
1b:b2:66:e2:66:f9:96:0d:3c:30:0c:bc:f0:7c:be:
79:67:14:50:eb:0a:82:22:ce:8c:44:74:f0:95:81:
bd:4b:1e:db:3b:c5:3e:4b:a2:b8:69:98:cb:b6:8a:
88:a9:5d:a9:09:7a:01:3c:72:3b:3a:70:4e:ee:ac:
56:55:b4:93:be:2e:ca:b1:9a:fc:2a:64:98:9c:4e:
31:18:45:55:b5:0f:bc:0e:7a:98:73:cc:1a:40:e8:
ab:15:13:3f:ff:e1:9a:d1:1f:f3:08:be:c6:eb:de:
6b:c5:73:49:9e:e3:0d:03:11:96:57:9e:87:54:db:
5f:91:f0:ae:52:d6:6e:96:d4:b2:e8:0d:3d:70:ad:
ce:c2:cd:93:38:8a:90:09:e6:3a:aa:b9:2a:80:19:
28:95:dc:44:4d:9d:21:e1:b4:e6:f0:78:83:3e:81:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:B2:3D:54:97:AA:39:10:19:31:A1:E6:46:BC:AF:D4:2D:F1:AA
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/38A6EC000BAA11F0AEFC1972762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.48.0/24
Signature Algorithm: sha256WithRSAEncryption
03:68:8b:36:16:08:ca:89:17:11:e2:3d:8f:3d:fb:64:67:0d:
9b:8c:fb:56:84:26:e3:fc:d5:e4:c2:e5:1c:db:9b:12:8d:d9:
5c:32:59:9c:98:a0:de:22:19:bd:f1:4c:18:77:bf:cd:98:3a:
7e:2f:6c:58:22:13:0d:80:34:dd:cf:55:e6:c4:43:ad:97:1f:
f6:3a:98:cb:c2:f9:67:c3:d3:01:a4:98:a5:23:3a:98:f2:c9:
e1:ee:f1:11:73:ab:0e:51:b8:83:21:ce:46:32:25:e8:d7:39:
3e:01:3f:41:7e:b1:6b:c9:2b:c1:e2:f1:bf:43:eb:8a:66:18:
e0:ec:39:46:75:76:23:76:fb:74:6d:ab:35:bf:35:31:13:9c:
f8:76:53:54:9e:54:16:5a:93:80:78:b3:73:df:45:7e:b3:0b:
3a:b7:cb:36:8f:f1:ac:a1:94:aa:49:41:b1:02:04:27:76:eb:
99:3a:9c:3e:b4:80:2e:9d:eb:22:2d:19:54:b0:25:fb:0b:9d:
58:ab:2d:e2:d3:a7:2f:f4:02:c6:0f:94:54:ee:e7:ce:fb:59:
11:ba:d5:d4:82:71:7f:61:6a:a7:d9:82:bd:81:f2:fa:35:80:
bd:e4:82:df:62:24:b6:8d:22:61:72:fe:53:8a:43:e0:4b:ae:
74:d9:83:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:24 2025 by rpki-client