Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/63C17C40F8ED11EFA3F4A241762E951A.roa
File: 63C17C40F8ED11EFA3F4A241762E951A.roa (raw, json)
Hash identifier: JkD0aTWOWT6/kDVUx0JPF+QA32JCDMy5b+i3c8xXqcA=
Subject key identifier: FB:CC:6B:ED:72:87:EE:B5:8E:79:6E:3D:EF:37:AD:4C:9C:91:DD:7F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0BE6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/63C17C40F8ED11EFA3F4A241762E951A.roa
Signing time: Tue 04 Mar 2025 11:39:54 +0000
ROA not before: Tue 04 Mar 2025 11:39:50 +0000
ROA not after: Tue 06 Mar 2035 11:39:50 +0000
asID: 210636
IP address blocks: 192.142.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3046 (0xbe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 4 11:39:50 2025 GMT
Not After : Mar 6 11:39:50 2035 GMT
Subject: CN=67c6e689-3e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:cf:1b:3f:3b:f8:34:08:59:26:07:11:05:
30:52:2c:fc:61:5c:10:68:9e:8e:3b:4d:ee:52:fc:
99:82:2c:81:da:66:e7:10:3b:dd:4d:af:ac:a5:17:
6d:a8:73:e2:bf:15:bb:2e:67:bc:2f:ea:79:b4:6f:
4f:4e:28:73:51:8e:1f:b2:83:94:e9:7a:cf:55:85:
47:43:80:c8:28:dc:46:a8:ab:a5:fe:18:89:41:4b:
28:bb:f0:d9:56:ec:bd:08:5f:f2:bb:19:a4:4a:b7:
ff:65:69:91:51:94:86:57:28:ae:45:5c:2c:5d:10:
51:0c:bd:99:e3:8f:48:80:fc:96:f8:66:5f:f5:57:
69:f6:83:4e:eb:ad:fe:7c:09:75:52:8a:42:ca:5e:
2f:3a:79:f3:90:61:c6:2c:7c:85:96:8a:52:3d:7c:
d6:b2:2a:29:00:b8:eb:da:3c:d9:a7:0b:3c:de:8e:
f5:5d:e6:59:00:34:21:18:3b:1e:45:02:a6:34:8b:
b1:0e:76:92:b2:99:31:7a:7c:c9:82:cc:22:2d:37:
97:20:37:80:df:0b:68:e6:d3:54:a9:19:39:df:5e:
23:98:42:df:6a:1f:e6:15:5e:65:96:b5:c4:6b:ab:
2d:a3:e8:97:d1:35:c8:d9:f9:1b:8e:b4:b0:d0:13:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:6B:ED:72:87:EE:B5:8E:79:6E:3D:EF:37:AD:4C:9C:91:DD:7F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/63C17C40F8ED11EFA3F4A241762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.5.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ea:da:57:25:9b:51:cb:79:0b:b7:e4:b1:24:b7:43:85:fe:
f8:99:d8:fc:f4:dd:1c:94:9b:8e:df:c9:f5:2a:64:48:d8:f5:
0e:3a:24:b4:7d:a6:b9:29:7c:e3:a1:8d:36:96:cb:f2:8c:c7:
8f:89:f2:96:b0:c5:c6:b2:45:e3:a7:f6:88:20:b2:09:22:fa:
16:2e:f0:e8:fc:e2:ca:0a:8e:d5:8c:2a:6e:4e:bb:a3:64:dd:
6e:06:93:19:41:69:ec:8e:53:68:2b:62:2c:9b:4e:7c:e1:9b:
56:86:49:2b:a0:a1:3e:57:b8:a1:23:07:0d:f4:72:b7:26:d8:
e5:89:10:fe:e5:f5:31:bb:b2:a1:ed:e0:28:f3:ee:3a:8a:6c:
50:c5:d6:d1:f5:fa:78:f4:d3:fa:f9:07:23:98:e6:5b:aa:be:
68:3a:02:23:3b:6b:c7:c8:ce:16:94:d4:85:de:74:f6:bf:75:
70:d0:fa:76:16:a5:76:8f:3f:53:bf:46:0a:90:98:cf:f2:5c:
70:4d:50:5e:22:36:b3:25:08:7c:54:3a:10:f3:de:e8:aa:10:
32:4d:ad:55:6e:b2:73:49:91:95:05:d4:fa:8d:37:09:2c:c3:
75:4e:1e:d0:a7:33:e6:de:bf:74:fb:96:e1:25:78:4e:de:0e:
a0:6e:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:53 2025 by rpki-client