Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C010DDAFF0711EFACC066B4762E951A.roa
File: 4C010DDAFF0711EFACC066B4762E951A.roa (raw, json)
Hash identifier: AHciILGFXh3CylArE61Cyt4d86FudoY3iIsAUyCMp9I=
Subject key identifier: 2D:2D:0D:23:9B:82:16:E8:6D:CC:FB:E7:49:B7:33:71:84:65:7C:38
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C07
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C010DDAFF0711EFACC066B4762E951A.roa
Signing time: Wed 12 Mar 2025 06:00:28 +0000
ROA not before: Wed 12 Mar 2025 06:00:24 +0000
ROA not after: Mon 12 Mar 2035 06:00:24 +0000
asID: 213541
IP address blocks: 192.142.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 12 06:00:24 2025 GMT
Not After : Mar 12 06:00:24 2035 GMT
Subject: CN=67d122fc-8109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:d1:c7:b0:c1:6a:80:2f:23:2e:cb:67:f7:
36:99:b8:15:67:cc:25:87:cd:af:12:78:06:48:7f:
5a:43:89:89:9f:3d:25:65:0e:fb:32:e6:a3:12:49:
5a:99:39:23:52:3f:35:11:00:ac:94:76:fd:01:95:
09:eb:55:b0:98:28:e3:bd:f7:d7:5e:3c:a5:79:25:
6c:f3:e9:a4:54:7d:9e:05:36:dd:3c:04:ca:a2:40:
b3:0e:4d:17:40:65:9d:d4:95:98:b0:e5:b7:53:a9:
d9:ce:5b:e8:36:be:c1:01:76:42:6e:89:31:32:7d:
4c:b8:f1:a8:b6:14:86:1b:bf:e5:1d:78:de:fb:7c:
bc:1f:ef:2a:76:82:0e:42:ca:6f:08:79:0b:65:ff:
ab:f0:b4:a8:1c:27:ee:4b:b5:f1:c8:a7:55:d5:f7:
4d:e7:7d:57:6f:70:6f:10:60:3f:a8:3f:19:57:3c:
27:62:88:d1:69:cb:a3:f2:7f:7c:5a:73:11:5f:31:
45:c4:6e:4f:26:1a:f6:6a:fe:d2:d2:11:00:ae:92:
59:c8:98:f9:1c:b9:49:be:86:4e:8d:d8:3a:b1:70:
85:5c:e8:a4:ee:ef:b6:89:fe:be:4d:51:d4:84:ba:
15:90:68:a6:b2:fc:32:70:e1:e2:58:78:90:ac:84:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2D:0D:23:9B:82:16:E8:6D:CC:FB:E7:49:B7:33:71:84:65:7C:38
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4C010DDAFF0711EFACC066B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.64.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:ae:b5:1a:82:c1:00:c5:2f:b5:7b:7a:52:17:57:53:85:bc:
b7:11:a4:b2:71:4e:c4:0a:f0:fd:88:80:17:20:16:31:37:3b:
aa:3a:27:13:a1:e1:b4:32:36:cd:5e:0a:b6:dc:34:60:1b:5a:
1b:b2:34:b7:a0:2c:3f:23:10:93:59:72:26:2e:6f:f2:bd:1a:
bf:25:a0:3e:a8:d8:34:e6:d2:59:ed:b6:9e:45:ac:7b:fc:aa:
77:74:32:f8:31:7d:4d:29:54:6f:31:64:b9:78:79:31:0e:9f:
e6:06:3e:02:1d:c3:bc:73:0b:a7:58:a3:0a:2b:a2:31:3b:4d:
60:7d:a9:12:c0:2e:16:bc:4b:d6:eb:e7:d9:0d:84:89:0f:e4:
e7:63:df:b7:f9:4c:80:58:99:39:59:6a:5f:d3:1c:da:ca:f7:
4a:4d:86:91:ba:e6:29:a2:98:39:50:1a:4a:e6:7f:ee:cf:40:
df:f8:82:d8:6f:44:df:c1:5a:d8:4b:21:eb:34:04:4a:90:32:
e1:d5:e6:93:e1:72:2f:ad:ae:e9:d1:13:c8:0a:0c:7e:92:aa:
fe:0b:8b:19:a3:7e:aa:e6:7f:cf:05:0e:82:61:41:6a:68:f1:
5e:2b:2e:02:69:f6:d5:df:8b:cb:9c:1b:98:9e:9a:e6:69:eb:
83:50:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:46 2025 by rpki-client