Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6E30B7360A1811F0A5359A6A762E951A.roa
File: 6E30B7360A1811F0A5359A6A762E951A.roa (raw, json)
Hash identifier: kxve/UpdY4nI6snzPI28WbRA4va37ebpGQ+zk7wH92Y=
Subject key identifier: F2:79:99:04:30:AD:AC:0D:4E:9B:2C:76:53:66:B6:BD:59:F3:21:35
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C5D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6E30B7360A1811F0A5359A6A762E951A.roa
Signing time: Wed 26 Mar 2025 08:00:49 +0000
ROA not before: Wed 26 Mar 2025 08:00:45 +0000
ROA not after: Tue 20 Mar 2035 08:00:45 +0000
asID: 214036
IP address blocks: 192.142.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3165 (0xc5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 26 08:00:45 2025 GMT
Not After : Mar 20 08:00:45 2035 GMT
Subject: CN=67e3b431-a373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:4d:f1:5b:80:4b:0b:35:66:ba:e8:82:25:
9b:82:8d:5a:23:df:7a:43:2c:2e:2a:1d:67:b3:e4:
65:5c:ba:33:27:47:8d:41:d6:e1:93:bc:e8:de:c2:
ea:e4:b2:46:30:33:0c:7b:9e:74:a8:ef:78:70:ab:
e8:2d:00:de:43:f6:10:f5:f5:84:72:49:7d:ef:c1:
28:ff:8e:77:ce:35:c6:e3:50:7b:c8:df:e6:86:a6:
17:92:bc:6b:ab:d2:37:92:0c:46:c8:39:80:72:db:
63:b1:ef:77:f1:86:85:50:6f:36:ca:3d:14:99:cb:
16:ae:73:84:89:79:d5:22:37:d6:67:88:68:85:54:
36:70:3f:60:ba:95:e3:b7:e5:3b:5d:97:dd:22:db:
d9:2b:c8:b8:ed:4d:c5:ea:69:fc:d8:90:aa:80:64:
fc:a2:04:e3:ad:ba:3e:a1:60:5d:e8:7c:5d:c0:1f:
88:9c:f1:36:8e:c0:9c:03:88:cb:33:7c:95:87:12:
b2:d9:6f:ab:a7:01:74:0f:2b:83:7e:2a:b2:63:78:
92:c1:d1:a1:f8:7f:5d:b2:ed:64:ca:9c:6f:ea:6c:
fe:58:3e:0e:c2:f9:4b:4f:83:ef:29:1e:5b:3a:10:
6a:91:80:9f:de:80:0f:a4:4b:98:77:78:97:c5:d0:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:99:04:30:AD:AC:0D:4E:9B:2C:76:53:66:B6:BD:59:F3:21:35
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6E30B7360A1811F0A5359A6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.49.0/24
Signature Algorithm: sha256WithRSAEncryption
82:3a:44:5d:8c:f7:d1:fb:c8:cb:3f:ae:20:1a:28:bc:40:69:
58:0d:d5:f4:57:55:4d:a3:36:59:64:e3:ac:cf:f3:b1:03:93:
15:b2:0e:af:fa:d9:d8:ae:73:5e:19:3c:15:84:0a:5e:cb:d0:
5a:8a:05:eb:47:bd:9f:37:e9:f0:73:5c:de:0f:2c:76:3a:f4:
ce:0f:29:a6:97:ee:64:4e:93:67:56:53:3d:e3:61:10:ea:9f:
fe:a0:55:af:0b:d3:ff:69:e3:e5:5c:88:47:dd:39:8f:4f:64:
6e:a9:03:c8:5e:96:f3:a0:46:0f:4e:38:3d:1f:15:59:48:3e:
db:2f:70:d6:70:ce:2f:ec:5b:14:18:5f:c0:0b:a3:27:6d:62:
0a:1d:b1:ec:44:18:22:dd:0a:5e:56:ff:cc:fb:cf:05:8f:f3:
b5:68:b5:90:c9:78:16:58:e3:ed:40:77:bb:b8:68:ae:ed:6f:
15:d4:d0:be:de:c5:53:f9:0c:28:55:80:b8:0d:cd:7e:8a:a6:
50:59:11:89:42:29:fa:5e:e8:2a:8f:44:07:2a:51:9d:b7:72:
98:94:f9:77:df:e5:64:9e:02:4f:a8:1c:42:64:2d:e8:e3:83:
c9:dd:e1:f2:37:2c:90:86:7d:3f:a0:e8:98:60:16:49:68:e9:
08:6c:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:18 2025 by rpki-client