Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6B521CEC03CB11F0B54EE959762E951A.roa
File: 6B521CEC03CB11F0B54EE959762E951A.roa (raw, json)
Hash identifier: 1PoZUnKhXMvIFe0+tBdmArSE6brrT1dWPpq2GHKE8CU=
Subject key identifier: 3E:6D:27:85:55:E8:00:A2:AA:32:47:06:7F:C3:3F:44:F8:9B:53:10
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C23
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6B521CEC03CB11F0B54EE959762E951A.roa
Signing time: Tue 18 Mar 2025 07:34:26 +0000
ROA not before: Tue 18 Mar 2025 07:34:22 +0000
ROA not after: Tue 13 Mar 2035 07:34:22 +0000
asID: 36916
IP address blocks: 192.142.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3107 (0xc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:34:22 2025 GMT
Not After : Mar 13 07:34:22 2035 GMT
Subject: CN=67d92202-f9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:99:07:d1:4e:47:80:7a:df:9f:85:59:ac:
0b:d0:74:a7:8f:63:86:8c:61:ad:0c:32:f0:22:17:
4f:2d:82:69:6d:a9:72:4e:f1:8c:1d:66:cc:97:dd:
6a:6b:b8:91:cb:36:06:f8:da:09:d7:e8:9e:cd:c0:
dc:d2:49:3e:79:d1:cc:b7:a2:01:59:12:86:67:1f:
80:a1:76:3b:38:ae:9b:7b:ec:68:e3:86:76:d1:11:
bc:0a:56:3f:e7:9c:c4:e7:ba:56:73:b8:06:73:f2:
4d:1c:3f:6c:66:ec:5d:89:04:63:78:76:30:93:1b:
b6:b6:89:bb:45:6d:a8:52:10:93:8b:1a:e9:6e:38:
95:b2:a0:b0:1d:ac:49:56:d3:eb:d7:9d:e0:1c:38:
f8:6d:ad:97:5a:d0:f0:50:1a:19:8a:0d:b6:83:e1:
0f:66:53:8e:e4:26:91:02:7e:06:41:1a:fc:de:9e:
4f:e8:70:c7:df:6c:0e:41:22:76:f7:47:4c:e9:11:
c7:32:d2:f7:2f:f3:e2:83:ce:92:d5:9b:2d:84:52:
40:06:d9:f9:ea:41:da:53:ad:f4:a2:4d:32:80:13:
20:f0:19:ab:9c:ca:3f:9a:1d:d7:0d:1a:60:42:b1:
17:b0:75:ef:44:ca:ed:3e:4f:96:cd:c3:12:ec:c8:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:27:85:55:E8:00:A2:AA:32:47:06:7F:C3:3F:44:F8:9B:53:10
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6B521CEC03CB11F0B54EE959762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.168.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f2:70:31:38:0c:bb:ee:09:80:02:60:52:e3:6d:5a:8e:fe:
ff:09:cd:f0:4d:e2:35:42:d2:05:94:c2:b4:b2:99:07:66:71:
59:1b:0c:ec:2f:e2:24:69:e7:16:05:b3:f7:74:7a:66:69:1a:
7c:bb:f3:9b:05:d5:21:2a:46:01:ea:f1:39:af:bb:20:ea:ad:
3c:a5:e1:aa:6e:0a:ae:a4:79:f7:b0:cd:db:10:47:64:a1:ee:
7a:50:5d:c8:f9:8a:37:d4:b5:75:35:64:b6:61:d6:4d:fe:ee:
49:44:4a:81:7b:d8:cc:a9:71:d0:19:ff:e6:6d:9b:c4:ff:de:
96:be:e3:26:9c:5f:66:22:61:5e:3f:72:d0:71:58:c2:0d:e4:
0d:5a:ca:07:db:5d:5f:77:f0:78:86:34:f4:10:1b:1a:9c:9b:
84:14:0c:db:ef:19:e0:0f:af:10:56:74:e5:07:15:fa:39:a3:
5a:6c:83:02:0e:55:d2:88:cf:c5:c1:89:d9:12:24:5b:37:6f:
a0:38:f1:d6:ef:7a:9f:df:d8:69:c9:c9:fa:d7:7f:94:53:58:
f9:72:e6:8b:ef:9e:9e:48:63:99:6f:16:f5:a1:3a:b0:76:77:
41:17:f8:97:d7:41:30:58:ca:5c:65:84:c5:cd:b5:10:eb:57:
1a:23:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:37:06 2025 by rpki-client