Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9BF401C4B30011EF8A17AD51762E951A.roa
File: 9BF401C4B30011EF8A17AD51762E951A.roa (raw, json)
Hash identifier: zMUlfEnmg286V9nQ9SbVttYUoMq5ABjOdxUsvBwE0hM=
Subject key identifier: 20:4B:49:16:CC:7C:E5:1E:9A:38:56:6C:05:66:18:77:84:63:A9:70
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B54
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9BF401C4B30011EF8A17AD51762E951A.roa
Signing time: Thu 05 Dec 2024 12:01:07 +0000
ROA not before: Thu 05 Dec 2024 12:01:03 +0000
ROA not after: Wed 06 Dec 2034 12:01:03 +0000
asID: 6206
IP address blocks: 192.142.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2900 (0xb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 5 12:01:03 2024 GMT
Not After : Dec 6 12:01:03 2034 GMT
Subject: CN=67519603-2d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:af:9f:84:31:bd:c7:51:c7:ae:67:4c:52:
ed:46:20:ae:08:16:a1:6b:a9:f9:00:39:2b:69:7a:
75:9a:d5:ca:eb:27:b8:33:c6:9f:0c:18:21:49:c4:
df:cd:2e:ec:ab:64:b2:30:08:07:0b:b6:9e:f3:33:
ad:bb:1a:c2:33:06:68:44:2c:5d:16:4d:70:07:9e:
2d:69:f4:4f:d3:dd:72:d7:bb:da:43:82:4d:ca:7a:
61:3a:9d:b4:e2:0d:72:9f:61:c5:0a:69:27:7c:15:
06:19:ee:50:5a:01:4c:49:b0:91:9d:55:22:17:84:
62:82:07:b8:3f:d2:d2:56:08:25:c5:d1:03:a3:0d:
54:11:40:83:cc:40:db:f5:ec:c9:a6:76:79:27:20:
5f:80:75:6b:3a:5c:a2:d4:81:9d:2f:b5:bb:79:fa:
d4:8c:33:5e:fb:52:13:b3:a2:4b:82:8a:f3:33:a2:
e5:87:0e:78:f1:85:04:67:fc:d9:c5:ac:32:5b:37:
21:f5:00:8b:82:6b:37:85:1e:f1:2a:d2:c6:99:2a:
99:e8:b5:d2:45:1f:45:9b:31:4c:ea:ce:a5:f1:91:
30:6d:89:7a:55:63:49:d5:51:19:a4:9c:93:29:89:
00:39:8f:63:2c:21:74:ab:1a:8a:f4:0d:96:41:15:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4B:49:16:CC:7C:E5:1E:9A:38:56:6C:05:66:18:77:84:63:A9:70
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9BF401C4B30011EF8A17AD51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.32.0/24
Signature Algorithm: sha256WithRSAEncryption
27:db:16:01:9e:2b:1b:ee:3c:c4:03:fb:1b:38:8a:4c:97:fc:
68:10:be:9a:bc:83:a9:c6:68:d8:43:e6:e7:6f:28:1e:e6:3f:
2e:9e:5e:3d:1d:46:d8:d7:19:09:b3:df:3e:27:6d:61:e9:0b:
fe:5c:dd:46:b2:40:9c:ce:f4:8c:75:b2:e8:c4:60:c3:10:e8:
a9:1a:b4:8a:2b:5a:ab:e2:0f:b7:a0:d1:3d:98:01:ba:e2:3c:
33:17:77:1a:89:f8:0c:94:63:7b:0c:b9:61:92:3b:fc:03:68:
b1:18:98:1c:5f:4b:f8:44:1e:6d:a1:c0:e4:fc:02:3d:3b:3d:
65:ba:85:fc:a5:4a:1d:6a:d9:cd:a0:b3:e8:c3:4a:bf:2e:70:
bd:97:fe:92:35:9b:40:8d:e2:04:26:27:db:a2:87:22:9c:dc:
bd:fd:d0:31:ed:f8:78:3d:34:d6:94:7a:bd:0e:b8:e6:f8:79:
34:58:45:a7:08:63:dd:94:11:cc:a7:6b:90:ef:46:ec:62:1f:
67:70:c5:00:6c:44:6e:e2:9b:80:b4:b5:b1:3b:19:d1:04:04:
9d:da:90:6a:4f:8f:7a:61:ff:c7:72:c3:9a:3e:94:4a:83:be:
90:51:20:6c:ea:c7:05:bc:3c:b9:76:71:43:99:47:d2:9f:3e:
4a:d6:19:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:40:57 2025 by rpki-client