Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A86ABC4E0A1811F0AC84C66A762E951A.roa
File: A86ABC4E0A1811F0AC84C66A762E951A.roa (raw, json)
Hash identifier: FBIPLsBM3ujp/1qVYsuXdqYnDpMtktjfjqtePauYLnU=
Subject key identifier: 91:E8:5D:C1:3C:40:6C:F2:56:17:3B:F3:BF:AB:63:A1:A4:70:AB:3C
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C61
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A86ABC4E0A1811F0AC84C66A762E951A.roa
Signing time: Wed 26 Mar 2025 08:02:27 +0000
ROA not before: Wed 26 Mar 2025 08:02:23 +0000
ROA not after: Tue 20 Mar 2035 08:02:23 +0000
asID: 214036
IP address blocks: 192.142.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3169 (0xc61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 26 08:02:23 2025 GMT
Not After : Mar 20 08:02:23 2035 GMT
Subject: CN=67e3b493-47cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:d6:dc:bf:fc:fb:32:c4:16:a8:c0:57:b9:
d3:4f:a1:c2:ff:42:86:55:8a:8c:e4:ba:94:36:20:
22:9a:15:6e:2c:f9:83:e0:f7:03:68:95:db:94:5d:
e7:9d:84:c6:41:a1:99:16:b7:06:ab:e2:65:7b:b1:
c9:af:a1:51:03:ab:96:ac:4c:11:0f:31:d7:cd:9d:
3d:0f:43:3d:94:f6:7d:c1:07:83:e2:c4:86:b2:9b:
46:46:f9:ba:f1:aa:b0:9f:1e:ac:ba:cf:42:9d:aa:
a0:df:3f:21:6b:83:e3:1b:c4:3f:92:e1:b4:12:fe:
21:e4:1a:0d:94:e1:1d:45:d8:d1:02:55:04:c5:7c:
30:7c:66:92:7d:97:3e:df:f7:0e:6c:47:52:cd:04:
31:a3:1d:26:9d:3a:fd:60:e3:b4:de:66:87:2e:51:
a8:bd:29:9b:d4:b9:29:63:0b:7a:81:9d:1d:83:f3:
ca:f5:0e:83:92:cf:db:2e:ba:f7:06:ac:9e:9c:b4:
b7:ee:b2:e0:1e:f5:2c:0a:9a:99:a9:a1:89:0e:ad:
31:24:12:39:a1:52:58:65:a2:1d:8e:46:11:5a:1f:
09:19:5a:4c:ef:aa:75:5c:87:f9:49:73:79:c1:9d:
2b:ad:df:22:fe:f9:4a:fd:21:76:34:28:5a:fe:bb:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E8:5D:C1:3C:40:6C:F2:56:17:3B:F3:BF:AB:63:A1:A4:70:AB:3C
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/A86ABC4E0A1811F0AC84C66A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.51.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:99:a9:1a:83:70:e7:0a:64:7e:b0:6b:37:d3:ff:a8:db:68:
c6:d5:c8:aa:0b:70:15:7e:7a:8f:b3:2a:ac:15:00:4a:d9:b8:
af:d3:9d:20:07:39:42:26:83:ec:f2:ff:33:f4:c7:20:f9:00:
16:b1:6c:38:7d:ea:c2:b0:ad:ff:cb:2b:32:d8:28:fc:4b:02:
e3:73:40:41:21:e6:82:f9:9b:19:d9:25:30:c9:7d:5d:f2:66:
c7:45:95:bc:26:64:89:17:71:d9:ce:08:54:df:3c:b5:24:5b:
99:7d:63:38:51:35:8e:5e:a3:70:ef:22:a5:c3:28:1f:0d:d1:
9f:2b:36:1d:a6:42:43:0f:c7:36:fe:40:d2:95:59:f6:ed:b8:
81:09:83:a5:3b:90:52:d0:f1:9a:f4:93:37:77:b0:2b:b4:d8:
d6:cd:94:e4:8a:44:d2:f8:b3:ba:3d:64:ba:66:b0:e2:d6:7f:
e4:29:78:33:09:e0:10:9c:9c:2a:66:b4:0c:8e:3f:18:03:b0:
a5:88:92:3b:24:20:b6:d4:64:02:1e:7f:06:76:f9:c5:b5:95:
c1:46:34:84:c8:c1:e1:f1:5b:04:ce:c8:f0:60:db:75:41:5d:
6f:4a:17:fd:da:d5:d0:a8:59:00:b1:72:d6:a5:6a:3c:d1:10:
a9:07:26:70
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNTAzMjYwODAyMjNaFw0zNTAzMjAwODAyMjNaMBgxFjAU
BgNVBAMTDTY3ZTNiNDkzLTQ3Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfJ9bcv/z7MsQWqMBXudNPocL/QoZViozkupQ2ICKaFW4s+YPg9wNolduU
XeedhMZBoZkWtwar4mV7scmvoVEDq5asTBEPMdfNnT0PQz2U9n3BB4PixIaym0ZG
+brxqrCfHqy6z0KdqqDfPyFrg+MbxD+S4bQS/iHkGg2U4R1F2NECVQTFfDB8ZpJ9
lz7f9w5sR1LNBDGjHSadOv1g47TeZocuUai9KZvUuSljC3qBnR2D88r1DoOSz9su
uvcGrJ6ctLfusuAe9SwKmpmpoYkOrTEkEjmhUlhloh2ORhFaHwkZWkzvqnVch/lJ
c3nBnSut3yL++Ur9IXY0KFr+u8QPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUkehd
wTxAbPJWFzvzv6tjoaRwqzwwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0E4NkFCQzRFMEExODExRjBBQzg0QzY2QTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjjMwDQYJKoZIhvcNAQELBQAD
ggEBAD+ZqRqDcOcKZH6wazfT/6jbaMbVyKoLcBV+eo+zKqwVAErZuK/TnSAHOUIm
g+zy/zP0xyD5ABaxbDh96sKwrf/LKzLYKPxLAuNzQEEh5oL5mxnZJTDJfV3yZsdF
lbwmZIkXcdnOCFTfPLUkW5l9YzhRNY5eo3DvIqXDKB8N0Z8rNh2mQkMPxzb+QNKV
WfbtuIEJg6U7kFLQ8Zr0kzd3sCu02NbNlOSKRNL4s7o9ZLpmsOLWf+QpeDMJ4BCc
nCpmtAyOPxgDsKWIkjskILbUZAIefwZ2+cW1lcFGNITIweHxWwTOyPBg23VBXW9K
F/3a1dCoWQCxctalajzREKkHJnA=
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:42:44 2025 by rpki-client