Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5782513A03C811F0BC78EF48762E951A.roa
File: 5782513A03C811F0BC78EF48762E951A.roa (raw, json)
Hash identifier: ds6xWj2Bo4H2y5RfRXGqrPZtobGh0KZjINJYQGuc5UM=
Subject key identifier: C9:8A:EF:90:CD:4C:BA:DD:F6:F1:25:2C:33:BB:63:87:A2:80:92:E0
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C15
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5782513A03C811F0BC78EF48762E951A.roa
Signing time: Tue 18 Mar 2025 07:12:24 +0000
ROA not before: Tue 18 Mar 2025 07:12:20 +0000
ROA not after: Tue 13 Mar 2035 07:12:20 +0000
asID: 36916
IP address blocks: 192.142.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:12:20 2025 GMT
Not After : Mar 13 07:12:20 2035 GMT
Subject: CN=67d91cd8-1873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:f0:20:50:a5:fb:21:db:e4:8f:9c:c5:32:
7c:0f:55:75:7f:70:a2:30:f0:a8:08:1e:57:f2:fa:
09:ef:54:26:3a:aa:fe:e2:20:77:b7:af:85:8b:b9:
e6:84:da:ed:13:b3:10:85:16:a5:5e:de:f7:42:3e:
4f:a9:27:8f:a5:fe:65:42:b8:cc:cc:f2:a6:5c:89:
3b:d8:c6:d3:20:bc:78:39:05:4b:33:22:0c:8b:f5:
f2:a4:d4:26:6b:aa:36:22:a5:d4:d4:5f:02:64:16:
96:65:2e:83:fb:fc:07:e8:e4:26:b0:bf:b9:cb:dc:
da:81:35:c9:17:df:e8:59:49:48:ff:c9:e2:0e:91:
a9:49:90:0a:3d:e0:c2:51:a9:27:a8:f0:0f:b5:b5:
88:99:f1:d2:e7:5a:41:15:d5:42:db:69:41:b2:f6:
45:95:d9:68:28:ec:9d:16:bd:0a:07:4f:7c:20:e3:
52:f7:7e:3f:75:a6:33:f1:2d:75:52:cd:06:20:4c:
9a:d6:c0:31:82:21:f8:f3:c1:15:d4:cd:81:41:53:
af:0c:34:35:dc:4e:fe:54:6c:97:df:b0:13:eb:13:
ee:d8:f4:f2:cb:1f:f0:03:e6:0e:27:05:54:a8:54:
fc:db:01:99:04:ba:d7:14:ad:c5:77:0e:55:0a:f5:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:EF:90:CD:4C:BA:DD:F6:F1:25:2C:33:BB:63:87:A2:80:92:E0
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5782513A03C811F0BC78EF48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.88.0/21
Signature Algorithm: sha256WithRSAEncryption
27:e1:00:41:00:dc:37:28:f8:ff:33:63:c7:1e:83:44:1b:51:
59:fd:a9:a2:1a:5d:bd:e4:22:0b:08:5b:f9:f8:3a:f5:2b:a7:
54:e3:c8:57:65:b9:b7:dd:eb:9d:2b:37:a5:30:c0:29:25:8f:
7b:c3:d2:94:81:fd:1d:04:28:0e:2a:d1:dc:c0:b3:3d:89:1c:
e6:44:67:90:a7:4d:5a:44:80:14:46:72:dd:e0:f0:7e:ab:8a:
b6:53:e1:53:14:88:83:01:a8:d2:ff:d0:7f:38:23:69:18:53:
ca:7f:54:cb:18:2f:8b:7f:48:a8:f9:f1:ca:b8:d1:b1:b9:34:
4e:8c:4b:c1:64:b8:d6:0c:ab:1f:fe:87:b3:eb:f3:60:6a:92:
a5:03:39:49:67:36:c0:7b:32:c5:5f:62:66:a3:05:50:f1:18:
2c:a6:a4:4f:f8:3b:2f:9c:1c:aa:98:48:27:d9:45:7e:a3:a8:
1c:4f:8c:8b:0d:de:7d:23:e7:58:de:39:f9:7b:da:f0:a0:9b:
9d:04:e4:3a:a8:6a:bb:21:99:4d:c4:7c:ad:0c:d2:60:1a:c1:
56:f8:ce:e5:bb:bb:e5:e9:0f:6e:48:8e:37:41:8b:63:02:6d:
6d:5c:6d:1c:61:17:f4:2d:ba:c3:2d:43:08:8e:96:ce:98:dc:
19:95:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:37 2025 by rpki-client