Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5C3B465CFB1511EF86F0C358762E951A.roa
File: 5C3B465CFB1511EF86F0C358762E951A.roa (raw, json)
Hash identifier: apoYddpk2GOe6JJ+A3/EqWX2ZgfGxFeogSUtBBmnXYY=
Subject key identifier: 99:5A:E8:5B:3E:66:4A:6A:80:B2:93:BF:4F:83:13:6A:E0:4C:F1:85
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0BF8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5C3B465CFB1511EF86F0C358762E951A.roa
Signing time: Fri 07 Mar 2025 05:31:03 +0000
ROA not before: Fri 07 Mar 2025 05:30:59 +0000
ROA not after: Wed 07 Mar 2035 05:30:59 +0000
asID: 214120
IP address blocks: 192.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 7 05:30:59 2025 GMT
Not After : Mar 7 05:30:59 2035 GMT
Subject: CN=67ca8497-ed6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:89:de:44:42:77:51:c7:c7:18:50:9b:a6:
f1:7f:60:2e:76:29:d7:44:a7:f2:e6:b6:cb:7d:4d:
6f:63:e4:82:5c:db:1e:07:57:36:58:70:33:9b:f2:
e5:24:8b:e1:e9:a7:73:09:99:04:aa:24:8b:eb:dd:
c1:a0:79:5d:2f:94:1e:d6:c4:40:e8:6e:10:29:c2:
f8:2e:07:09:b9:2b:aa:a5:fd:98:5d:7a:e5:4a:4d:
06:2b:04:3c:12:77:f4:12:a8:b9:ff:e4:e6:d4:f2:
0b:9e:9b:d6:83:50:43:26:8c:2c:ed:1f:a1:b0:d5:
23:f2:4d:5e:0c:e4:c2:df:76:54:d4:6a:f5:bd:6b:
67:ec:ec:f4:a8:bb:71:2e:32:dd:c8:0b:4e:fb:85:
67:fb:b9:d2:ef:a0:6d:3c:4d:3d:c0:da:11:dd:01:
3e:3b:eb:71:dd:3f:40:33:0b:0d:a0:1a:89:7c:49:
6e:8e:22:c7:e5:50:cd:5c:d2:45:af:b8:f5:db:06:
de:dc:b4:39:d4:8b:6f:8c:63:23:62:51:c5:9a:b5:
cd:b7:d2:d4:e8:3d:26:06:b1:f3:67:03:7d:d0:08:
c7:4e:40:7d:2a:b8:ff:45:58:a9:74:48:2d:f2:68:
8f:e5:fa:0a:52:7c:29:40:46:23:5e:7e:ce:0e:99:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:E8:5B:3E:66:4A:6A:80:B2:93:BF:4F:83:13:6A:E0:4C:F1:85
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5C3B465CFB1511EF86F0C358762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d7:86:86:aa:9e:45:c9:ad:24:51:67:9a:bc:14:45:7a:0a:
e3:9e:3d:e3:b2:61:31:63:b7:07:27:30:b9:21:6c:81:a2:95:
01:f2:a9:67:08:72:87:5d:70:4b:b1:30:72:71:3c:46:e6:d6:
c3:27:d7:a9:e2:58:67:93:80:e6:47:dc:65:de:a8:14:17:10:
8c:13:19:db:14:f2:1d:fd:72:d4:19:0e:d9:ac:f5:3f:89:95:
76:8e:b3:3d:5b:b8:54:74:e0:66:85:45:fa:62:e1:2c:71:74:
b5:03:87:25:4f:ac:87:0a:ba:54:b0:23:b2:2f:59:86:c7:e4:
e2:5b:d0:fa:cb:68:cb:e9:c7:8f:3a:60:bb:f6:1a:98:97:65:
67:77:a9:f0:0b:6e:dd:2e:99:42:26:24:cf:5f:3f:2f:a8:bd:
7a:68:91:0f:98:29:51:62:94:16:12:bf:28:cb:47:4f:ed:f2:
40:d7:6a:d4:67:cc:bf:11:d5:51:2f:3a:bd:d7:14:57:12:bc:
30:a4:11:8a:60:b3:a1:48:99:7c:08:ea:32:08:9b:50:37:81:
0a:16:8a:24:43:35:16:54:a0:4d:4b:d8:67:a2:1c:8a:ff:a9:
0b:20:34:13:b3:7c:36:36:c0:e2:5b:51:6a:53:d5:03:62:22:
41:8f:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:34:59 2025 by rpki-client