Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AE167B82087011F0B0E52F50762E951A.roa
File: AE167B82087011F0B0E52F50762E951A.roa (raw, json)
Hash identifier: RbkBXC8Fd6287W3GZApI2PFDkAOEJLvc2WJB301DIKw=
Subject key identifier: DC:D7:97:CA:2D:F6:A0:ED:1A:A0:7B:04:BB:14:03:FA:B2:C8:8C:1A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C50
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AE167B82087011F0B0E52F50762E951A.roa
Signing time: Mon 24 Mar 2025 05:27:30 +0000
ROA not before: Mon 24 Mar 2025 05:27:26 +0000
ROA not after: Wed 14 Mar 2035 05:27:26 +0000
asID: 36916
IP address blocks: 192.142.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3152 (0xc50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 24 05:27:26 2025 GMT
Not After : Mar 14 05:27:26 2035 GMT
Subject: CN=67e0ed42-a43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:72:39:42:91:a0:5e:ee:ec:9c:46:ca:90:
11:83:0e:e2:5d:7d:bc:d5:23:10:b0:0b:37:b8:b9:
6c:ac:9f:d0:32:a0:38:96:da:f7:c2:0b:2f:fd:1d:
48:bc:eb:e2:e3:4a:ab:dc:cc:b5:65:6b:a9:46:11:
48:31:c9:4e:a3:08:db:78:01:95:0c:1f:a0:8a:26:
72:32:47:f4:64:0d:1a:6b:f6:df:6e:13:42:14:a5:
16:46:31:8e:76:ee:82:ea:bc:11:15:1f:2e:8a:72:
c0:e8:44:5c:bf:5b:08:4c:3a:65:58:04:88:6b:e8:
e7:d3:43:76:cc:91:36:22:32:87:a2:09:a3:f8:46:
38:c7:cc:bd:f6:32:d2:9d:24:ac:c4:e7:10:9e:a4:
69:8a:40:1c:57:d8:6b:3c:e1:bb:fb:9f:7b:81:9f:
85:d6:06:5e:c3:c8:33:c1:ff:be:9b:18:c6:4e:64:
13:a1:5a:0f:39:c7:0a:b8:70:c0:43:82:f1:9d:ff:
16:97:a8:79:9e:00:09:c7:b6:52:cd:82:b1:70:a7:
65:49:18:f9:21:e6:c9:b4:ea:5a:e8:ab:20:b8:ca:
b1:6c:f5:d8:30:57:20:4b:b0:11:d1:8d:56:2b:fb:
b5:84:ad:de:d8:31:06:2d:64:c6:7d:38:dc:44:ce:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:97:CA:2D:F6:A0:ED:1A:A0:7B:04:BB:14:03:FA:B2:C8:8C:1A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/AE167B82087011F0B0E52F50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.104.0/21
Signature Algorithm: sha256WithRSAEncryption
67:df:0f:15:51:5c:8c:e3:db:da:3c:8d:22:66:ce:df:19:00:
06:30:f0:83:5e:bf:fd:f7:d7:24:d7:c6:de:ec:3b:e8:db:23:
9d:ed:42:be:ec:29:7c:0c:fa:f9:94:50:54:83:06:0a:11:27:
8b:11:96:9e:8c:97:f9:2e:e2:34:8f:6c:8f:42:4c:27:06:42:
b1:df:e2:f4:e7:20:85:39:2d:b2:1b:78:a6:6c:e3:08:e4:6a:
86:fc:7c:f2:70:a9:7e:42:9a:80:61:c6:83:48:ab:23:b4:04:
7b:44:a4:72:cb:10:3b:96:61:27:d8:68:33:e7:2f:62:bb:b0:
9f:83:e3:ee:b5:03:f4:a0:14:6f:9c:15:f9:ac:86:c3:f5:d9:
9d:9b:6e:30:46:f4:ad:66:46:dc:be:60:0a:2a:7b:a9:ec:7e:
46:4f:53:fb:1d:04:be:2e:46:cc:d8:56:bc:a5:ce:a9:cd:54:
88:52:19:6b:b6:0c:a7:db:0a:b0:21:c1:f6:16:bb:1f:a8:2a:
91:d6:50:e4:17:ae:83:19:a0:b3:eb:d9:45:74:06:c8:a3:ff:
e6:9a:ff:01:86:8c:45:b2:3f:2e:a0:d3:64:1b:0b:11:c9:04:
6d:3e:e1:6b:f0:62:45:ad:c3:b7:c4:cf:eb:38:a7:fa:ed:0a:
d4:ec:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:26 2025 by rpki-client