Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/920E6066D4F511EF96989B67762E951A.roa
File: 920E6066D4F511EF96989B67762E951A.roa (raw, json)
Hash identifier: gjWjTsB7UErdbGEASXjEtGSBcli3SkmCiZP7TwDa8os=
Subject key identifier: 6B:D8:A7:60:77:12:A1:CC:98:82:ED:3C:EE:76:02:19:3D:18:B5:CE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B90
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/920E6066D4F511EF96989B67762E951A.roa
Signing time: Fri 17 Jan 2025 17:07:45 +0000
ROA not before: Fri 17 Jan 2025 17:07:42 +0000
ROA not after: Wed 17 Jan 2035 17:07:42 +0000
asID: 44259
IP address blocks: 192.142.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2960 (0xb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Jan 17 17:07:42 2025 GMT
Not After : Jan 17 17:07:42 2035 GMT
Subject: CN=678a8e61-b97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:79:f8:cc:a2:6d:75:34:87:cd:be:72:26:
20:78:33:cf:22:69:10:af:30:26:db:c9:8e:15:62:
43:10:60:72:03:10:c2:5b:ee:c0:52:99:c7:4c:01:
18:22:35:2d:9e:e0:19:99:99:62:77:a4:61:b7:a5:
39:08:82:8d:ba:b1:d4:da:e5:eb:32:7c:9b:a6:28:
38:57:68:70:06:4a:41:d4:0a:7f:e0:f1:18:e0:a0:
08:44:17:3a:45:20:d1:59:83:35:31:86:49:01:b0:
f0:73:a0:50:09:87:58:77:fd:9a:50:65:5a:07:5e:
a5:13:22:18:20:a8:59:b8:e8:8c:08:08:3a:56:ae:
5a:49:84:4d:53:42:37:a7:51:ed:fb:10:aa:54:cc:
b8:bb:80:82:09:23:f0:52:a3:9e:1a:29:e5:2e:f9:
e1:be:f3:31:14:ac:78:94:b4:27:a8:48:ec:20:9f:
8e:32:cc:85:3a:d0:68:62:6a:15:05:24:b0:1a:7c:
59:29:90:a3:ef:e2:6a:b8:86:ad:4a:24:b8:da:22:
38:0e:50:c0:54:fc:46:30:28:21:ea:34:7d:0d:1d:
46:e0:3e:8c:fc:63:64:04:e1:da:3e:9a:d4:4c:98:
68:9e:a4:d6:96:83:31:7f:38:76:bf:25:0d:7e:05:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:A7:60:77:12:A1:CC:98:82:ED:3C:EE:76:02:19:3D:18:B5:CE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/920E6066D4F511EF96989B67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:93:21:bb:8d:2b:8d:99:d9:fd:be:fa:4a:9d:61:f3:f6:5f:
69:31:a2:e1:30:7d:6d:e8:f6:5b:29:31:ac:b1:90:bc:8b:a3:
a3:19:1c:83:ac:61:40:f2:d7:e1:39:1b:2f:40:7e:16:e8:66:
d5:62:ff:f8:0a:df:dd:89:dc:cf:a1:a8:4e:23:70:31:1b:a6:
25:b9:6d:53:0e:2e:b0:9f:f7:0e:97:18:c3:17:a7:5d:4d:4d:
dc:98:b3:f5:8d:d6:88:16:74:c3:6b:65:af:3a:a6:58:7f:91:
68:e8:91:31:2b:ca:55:d7:a0:0d:f5:ed:6c:b0:bb:69:81:67:
af:72:98:97:b8:b7:84:71:7e:35:ca:d2:8f:ff:3f:00:83:9c:
9b:4c:4d:18:58:d0:2a:81:a0:a8:73:a2:a6:19:75:c3:5b:a1:
ec:3d:99:12:60:94:bd:eb:54:54:d5:9a:6e:25:93:c4:ef:2f:
8b:c2:cb:7b:c4:8c:9a:76:72:fe:3b:03:78:92:fd:d6:29:f6:
42:7a:26:fc:25:d5:40:e7:fe:cf:34:22:f1:37:48:3a:2f:b2:
95:f0:09:b0:e1:3e:55:46:08:5f:f1:88:9d:d6:e5:b0:fb:8d:
ef:08:5d:d9:96:1f:81:27:11:6a:46:b3:cd:69:6d:03:52:4b:
23:ae:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:53 2025 by rpki-client