Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8427CD84B64111EFB1DF3944762E951A.roa
File: 8427CD84B64111EFB1DF3944762E951A.roa (raw, json)
Hash identifier: DRJAz4ZDJFoa0lLj0jXPCKJVx/58449kgEn16djaGBc=
Subject key identifier: F5:51:DF:FD:81:2A:00:5B:21:E9:A5:D6:9E:A4:8E:50:C2:CC:65:45
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B62
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8427CD84B64111EFB1DF3944762E951A.roa
Signing time: Mon 09 Dec 2024 15:23:18 +0000
ROA not before: Mon 09 Dec 2024 15:23:12 +0000
ROA not after: Wed 13 Dec 2034 15:23:12 +0000
asID: 6206
IP address blocks: 192.142.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2914 (0xb62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 9 15:23:12 2024 GMT
Not After : Dec 13 15:23:12 2034 GMT
Subject: CN=67570b66-2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:23:35:29:34:92:d2:fc:02:97:ed:8a:36:
82:d0:e6:1e:c8:20:5a:52:25:38:dd:90:cf:88:53:
43:58:8c:ac:4f:0d:f5:22:3b:c6:c6:76:92:ec:ff:
38:4f:4c:61:78:70:8d:46:7f:6a:5c:c0:04:f0:9a:
e4:77:2b:95:0c:07:35:6f:d0:fe:22:bb:c9:87:92:
32:8e:4a:7c:bc:79:0d:dc:35:2d:0c:96:e6:72:44:
60:59:de:b4:e5:af:2d:0b:1a:a4:77:0a:8f:e5:62:
51:4d:95:d3:f5:b9:d1:a7:90:6b:32:1b:c6:15:7d:
cf:71:bb:94:98:35:62:5e:f3:8b:59:6b:a7:c5:5c:
d1:84:63:48:d1:82:95:b0:2e:96:dc:c0:8f:bd:49:
09:70:48:19:4d:be:b8:20:37:92:7b:3b:8f:22:0a:
5e:5f:d7:f1:07:b8:d4:ee:50:76:09:5b:04:06:c7:
fd:bd:a0:91:10:96:c6:d5:4c:70:76:48:01:5f:3a:
b2:3d:0b:da:1c:95:1e:96:82:6f:0b:16:46:2a:9f:
68:12:dd:f3:a9:03:d2:0d:1b:32:d5:e0:93:1c:b6:
42:35:76:be:42:2e:b7:9d:a4:12:c8:ff:9b:c3:67:
c2:dd:33:e7:d2:ab:04:b1:04:b6:53:d3:9f:92:58:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:51:DF:FD:81:2A:00:5B:21:E9:A5:D6:9E:A4:8E:50:C2:CC:65:45
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/8427CD84B64111EFB1DF3944762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:16:7c:44:cd:8d:f1:e3:97:4b:00:fc:a5:d8:65:81:16:ef:
2b:c0:e8:91:fe:ab:b0:5c:82:6b:67:39:1a:cc:62:74:c7:b4:
d8:32:cc:e3:cd:c9:f0:ec:c0:38:ae:2a:9e:71:69:7e:0f:e0:
28:99:d7:29:18:8a:4b:61:fd:7b:aa:70:23:47:89:4b:a7:78:
be:32:dc:10:5b:5f:81:8c:c8:6f:6a:08:63:6c:7c:30:7a:d0:
cd:ec:c0:46:25:e8:f3:35:f2:0c:18:a4:f2:b9:6a:fe:45:3a:
0f:1c:f3:6d:40:a6:39:38:4f:df:7d:5f:6f:8f:7d:e3:70:f6:
66:70:ee:36:48:71:2d:ec:f1:fe:eb:7d:c1:10:28:34:29:c3:
32:44:da:0a:68:4c:eb:99:d8:e9:33:bc:18:d4:c1:6b:62:65:
4f:ac:7e:ce:c1:08:26:ad:10:de:fe:01:5c:ae:b9:89:6d:bc:
84:94:fb:09:78:6b:4c:b7:ac:36:87:51:93:5d:97:43:b1:99:
22:13:73:19:17:27:bf:6d:64:e4:28:18:17:40:64:45:d8:4f:
b8:7a:e2:c5:b9:f8:16:bb:36:11:c7:a2:54:da:8e:11:f4:33:
b8:7b:48:7a:87:8a:0b:89:6c:6b:a5:eb:bd:17:a7:81:bf:bb:
16:00:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:01 2025 by rpki-client