Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4D6543C603CB11F085EFD059762E951A.roa
File: 4D6543C603CB11F085EFD059762E951A.roa (raw, json)
Hash identifier: CIKiQoiVg1gOYjFToRSIogI+5GfsLVbufd3ktK6anAk=
Subject key identifier: 1F:02:3C:E2:EE:FE:D5:5B:29:64:5D:69:89:D4:26:42:2A:6B:27:05
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C21
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4D6543C603CB11F085EFD059762E951A.roa
Signing time: Tue 18 Mar 2025 07:33:36 +0000
ROA not before: Tue 18 Mar 2025 07:33:32 +0000
ROA not after: Tue 14 Mar 2034 07:33:32 +0000
asID: 36916
IP address blocks: 192.142.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:33:32 2025 GMT
Not After : Mar 14 07:33:32 2034 GMT
Subject: CN=67d921d0-d572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:5b:8a:d0:74:36:5e:e2:3a:6b:12:58:37:
9b:96:c4:13:a3:08:db:7b:76:11:fe:a8:5c:57:e6:
9f:b1:ca:4f:b0:b8:83:47:49:7e:48:86:0f:56:45:
02:6c:f4:d1:d9:be:fb:3c:c5:9b:31:da:88:61:27:
c9:00:f8:a2:11:ad:7a:95:6d:31:e4:b8:05:a1:0b:
4c:19:55:23:ef:82:db:39:39:a5:ea:03:84:ab:ff:
47:0e:54:fc:b2:1c:53:27:44:bf:25:97:7b:40:a5:
2a:ba:eb:a7:c9:8d:72:75:a8:48:54:61:bd:bb:ed:
9d:83:1f:67:de:30:77:af:94:8c:a8:bd:fe:78:e2:
a7:b0:61:61:34:78:dd:cd:2f:e1:e9:68:6d:1a:fd:
7a:3c:6a:d2:a3:96:3f:c2:4a:c9:19:5a:e6:4a:ef:
6a:16:23:1b:3d:57:27:dc:84:bd:e2:18:7b:b9:90:
24:b9:ea:a9:75:91:b6:ee:f9:a3:1a:34:c8:15:03:
34:ff:91:71:e4:3e:cd:1c:da:27:72:a8:97:33:63:
0e:98:88:98:20:ab:76:00:c7:08:c3:d6:c1:fa:dd:
47:56:5b:16:75:28:10:5d:1f:ab:f8:62:fb:f8:19:
eb:5a:b7:ea:9f:ba:58:53:c4:c3:b1:e9:23:29:11:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:02:3C:E2:EE:FE:D5:5B:29:64:5D:69:89:D4:26:42:2A:6B:27:05
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4D6543C603CB11F085EFD059762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.160.0/21
Signature Algorithm: sha256WithRSAEncryption
53:f0:48:6b:28:f9:12:41:24:6b:72:fb:a2:57:26:51:28:99:
d3:a7:21:c0:1d:24:40:4e:87:c0:59:35:f1:5d:73:22:ef:7f:
f5:89:89:b5:10:14:97:81:f4:67:f2:52:bf:b6:9a:6d:22:16:
79:e5:23:49:49:1d:d9:d4:78:0d:be:9f:fd:d2:af:86:a4:69:
32:45:e0:55:9c:fc:a1:49:b9:fd:e7:40:bc:08:c9:e8:b0:b0:
26:b8:a8:08:70:27:bd:de:ac:31:e4:ba:31:c4:73:8d:df:b3:
05:22:29:60:b1:f4:16:5a:a8:eb:21:b0:82:36:bc:5b:5b:1d:
24:53:ca:72:4a:96:c3:8a:95:21:83:f5:61:b6:fc:5b:61:a2:
a4:4e:0a:81:53:12:6c:23:20:08:d3:0e:f3:3e:ac:54:d5:d3:
ae:76:ec:f5:d6:4d:2d:00:fe:6f:b9:d9:77:37:55:a3:61:01:
98:8a:91:67:40:f6:86:11:cb:39:83:ae:96:db:73:9d:8f:ac:
6e:8f:02:78:8d:f8:cb:12:76:70:03:2c:2b:2f:4c:16:3b:53:
71:d3:ea:5a:4a:15:e5:a3:e7:0b:73:5e:81:cc:02:62:d5:4b:
a0:ee:d4:64:c3:3b:0d:19:52:79:43:b8:c4:aa:93:77:8b:83:
29:fb:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:53:29 2025 by rpki-client