Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9D878D16F8ED11EF8F6C3642762E951A.roa
File: 9D878D16F8ED11EF8F6C3642762E951A.roa (raw, json)
Hash identifier: U9yxkjksZEXxovuRlRkeJbwldhgglVv0PJ5eolErxlY=
Subject key identifier: EC:90:D5:B9:1A:52:81:10:59:EB:25:49:FB:27:95:F4:AB:43:72:2E
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0BE8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9D878D16F8ED11EF8F6C3642762E951A.roa
Signing time: Tue 04 Mar 2025 11:41:31 +0000
ROA not before: Tue 04 Mar 2025 11:41:14 +0000
ROA not after: Tue 06 Mar 2035 11:41:14 +0000
asID: 210636
IP address blocks: 192.142.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3048 (0xbe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 4 11:41:14 2025 GMT
Not After : Mar 6 11:41:14 2035 GMT
Subject: CN=67c6e6eb-136a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:ed:fa:95:d4:77:88:08:fd:d3:29:c3:f3:
dc:61:69:3a:de:dd:0c:4d:17:80:fc:6e:68:90:4e:
67:b5:0d:9e:e4:5c:66:bb:63:dc:2a:14:3a:5b:eb:
15:39:92:27:51:fe:e2:09:32:2e:02:61:66:64:f8:
78:71:af:a8:53:c8:e3:ec:38:2c:36:00:65:8b:37:
42:fe:77:1b:b1:3f:81:35:a4:8c:03:cd:ee:f5:fb:
88:56:21:1d:a0:ff:b7:7d:03:9d:25:7f:20:be:fc:
75:12:8a:dd:c0:bb:7c:8f:1e:0a:f5:da:ff:fb:86:
cd:ab:12:4d:37:1c:17:99:09:84:af:aa:8a:da:7e:
84:0e:0b:84:2d:83:08:0d:4b:b9:92:c1:40:67:ed:
76:05:1e:4e:ea:09:9d:6d:d3:7f:17:6d:f1:97:7d:
fb:8e:0b:7c:5b:42:21:45:7f:b2:3d:46:5c:09:81:
d0:e7:79:0b:e8:41:2f:6a:7a:dc:d3:7d:b4:24:08:
86:c0:a7:51:02:16:62:62:b6:99:49:64:19:d7:fb:
5a:dd:a5:b5:a7:63:a6:c1:0c:0b:a2:e6:8c:90:65:
64:a1:35:3c:96:0f:f2:e1:d0:e9:68:4a:cf:cb:90:
8b:c0:9c:28:e3:46:b4:a3:ce:f7:2b:0b:90:82:96:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:D5:B9:1A:52:81:10:59:EB:25:49:FB:27:95:F4:AB:43:72:2E
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9D878D16F8ED11EF8F6C3642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:98:d8:5d:9e:12:0b:05:dc:48:45:c2:39:6a:2a:42:78:4b:
01:df:b9:99:0d:6f:42:08:1e:48:08:c5:77:db:39:20:3e:7d:
2d:7c:c8:ae:42:53:91:37:89:4f:30:71:12:cd:15:79:51:2a:
a0:85:d0:fd:88:84:c1:e2:89:2f:df:27:c1:09:6a:79:95:67:
fa:6a:19:ab:a2:b7:e2:42:39:4f:f6:5f:ff:16:7d:07:bb:da:
bf:23:c1:99:ef:03:64:44:fc:9e:a3:e7:37:0a:8f:cf:4e:50:
aa:b5:07:fa:5f:2b:6c:92:30:78:22:0c:fb:55:02:57:50:99:
7f:52:bf:cf:d2:ce:1d:9b:e1:45:96:cc:12:bd:bf:a9:09:57:
a1:0f:bc:ae:22:23:09:d0:04:71:30:82:ba:7e:14:98:e3:75:
f7:b7:b0:dc:b0:a8:9d:fd:82:af:39:be:a0:6c:e2:c7:bd:35:
6d:a7:42:25:c5:7b:30:0f:a0:01:55:98:0b:9a:47:2f:cb:58:
96:3b:a0:ec:a0:e1:57:eb:a8:30:ab:59:bb:ea:aa:97:b2:e1:
e3:8b:f6:fc:c6:6d:fe:5e:06:fe:c1:c3:e1:a4:0b:29:8d:ba:
30:74:bf:55:13:44:67:5f:76:b0:46:eb:ff:3c:8a:df:b5:63:
52:9d:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:33:51 2025 by rpki-client