Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AC3B9FB8B06E11EF8B0E1393762E951A.roa
File: AC3B9FB8B06E11EF8B0E1393762E951A.roa (raw, json)
Hash identifier: uKVNgijYZMrDAmFuLm84GGys87E8EuKzYX/LW3ua6I0=
Subject key identifier: 46:51:27:EF:76:93:93:36:A4:23:2E:DC:5B:45:C7:A4:79:57:A3:6B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B3F
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AC3B9FB8B06E11EF8B0E1393762E951A.roa
Signing time: Mon 02 Dec 2024 05:31:25 +0000
ROA not before: Mon 02 Dec 2024 05:31:22 +0000
ROA not after: Tue 05 Dec 2034 05:31:22 +0000
asID: 15020
IP address blocks: 192.142.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 2 05:31:22 2024 GMT
Not After : Dec 5 05:31:22 2034 GMT
Subject: CN=674d462d-71b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:b3:25:bd:1f:f9:2f:ad:cc:da:d0:9b:6e:
1f:02:d8:5a:ba:35:62:ad:d5:d4:72:93:6d:84:ff:
d8:bf:18:67:01:50:27:f6:4d:f4:09:29:40:a1:64:
b4:ab:ef:70:5d:c2:59:3e:cd:a2:48:5a:a4:99:aa:
59:f5:74:49:c2:96:b7:a3:d2:44:fd:d4:f7:94:66:
65:15:6c:b6:32:5a:6a:e3:cc:75:09:7a:44:6d:10:
a7:c2:0f:d4:f8:87:f0:11:2e:47:2b:d6:77:7b:9e:
90:6e:26:61:cb:bd:a3:04:5b:13:fc:32:d5:b0:74:
78:3e:0b:48:c5:96:d2:bb:89:6a:cf:51:6b:6b:9c:
7a:64:fc:ec:71:b6:62:93:a8:16:c4:d0:4e:fd:b4:
6e:ae:75:d0:96:4b:01:ce:0c:b4:4c:98:a7:35:70:
c5:10:c2:be:9c:6b:9c:c1:84:15:53:2d:aa:75:05:
00:78:93:95:75:c3:5b:d3:ea:bd:77:27:7a:4a:3f:
4b:1f:8c:1c:f1:e5:89:b7:c6:87:37:57:55:74:df:
8a:5f:a4:42:fb:23:d6:b1:2e:4e:e0:80:63:1b:cf:
b4:7c:06:97:b2:b1:d8:af:5e:1e:1f:63:ce:e1:8e:
de:e0:80:e0:cf:11:ed:4f:d2:03:5f:dc:63:ad:f9:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:51:27:EF:76:93:93:36:A4:23:2E:DC:5B:45:C7:A4:79:57:A3:6B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AC3B9FB8B06E11EF8B0E1393762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.12.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b9:e4:20:9d:9a:58:0b:1f:c3:b4:cf:0f:67:9c:26:86:80:
90:8a:1d:57:3f:dc:34:8f:45:65:d5:8e:42:2d:78:90:6a:d6:
c7:91:94:81:ce:d5:9b:61:4f:1a:92:b6:c5:29:1f:ae:8a:b5:
a6:f7:55:fd:6d:6a:27:76:af:63:94:e6:c5:14:b1:4e:94:e7:
55:2a:fa:9e:c1:2d:21:8e:d3:61:88:86:b8:60:53:93:e5:b0:
87:91:ae:14:02:6b:3e:4b:13:6e:7d:0c:10:04:56:1a:36:13:
b9:4d:1f:1d:50:76:b3:3f:53:5f:95:d8:1a:05:ee:0a:a8:0a:
85:54:1d:0c:98:6e:52:64:34:8e:6a:dd:65:20:fb:13:56:6e:
e2:68:bb:8e:85:7a:95:db:54:dc:9c:50:79:aa:bc:a3:2c:82:
d6:24:3e:c2:00:8f:48:2e:f0:af:11:4b:41:f3:bf:7f:8f:d0:
ce:57:64:5d:9e:41:dc:60:03:3b:b5:32:cc:94:f3:92:17:c2:
e4:5f:e8:58:b6:4c:c3:60:7b:b3:a8:70:ac:79:08:ff:f1:ab:
0f:3f:2c:ac:d7:fa:ca:44:9e:cf:8c:a4:e2:94:03:9a:4e:82:
10:6b:1c:b9:75:d7:4c:27:2c:66:be:31:22:15:82:aa:cb:cc:
4b:cb:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:26 2025 by rpki-client