Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BAD4ED2EE3B111EFA074DCA6762E951A.roa
File: BAD4ED2EE3B111EFA074DCA6762E951A.roa (raw, json)
Hash identifier: EfippGf5+bdGomfpm84wUsrK9hjuxKkSrKGVuZmcQbY=
Subject key identifier: 35:98:6A:B4:24:90:DD:CD:F4:41:CD:57:B1:E5:0C:73:CC:AF:26:97
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0BC0
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BAD4ED2EE3B111EFA074DCA6762E951A.roa
Signing time: Wed 05 Feb 2025 11:09:56 +0000
ROA not before: Wed 05 Feb 2025 11:09:52 +0000
ROA not after: Wed 07 Feb 2035 11:09:52 +0000
asID: 2914
IP address blocks: 192.142.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008 (0xbc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Feb 5 11:09:52 2025 GMT
Not After : Feb 7 11:09:52 2035 GMT
Subject: CN=67a34703-7dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:3f:16:d8:3d:76:06:42:5a:47:e0:97:aa:
8b:1a:fa:b9:6b:84:c4:66:f6:a7:44:18:74:08:8a:
d7:f2:be:9c:8e:49:d2:1f:45:a1:f5:d5:4f:34:5c:
ff:41:99:87:eb:b5:4f:5f:de:a9:b3:d7:48:61:c8:
f8:d4:3d:02:86:74:89:47:7e:bf:66:31:70:ba:c9:
8d:03:56:7c:11:57:5d:82:ff:df:ae:c9:6a:d2:1d:
46:3c:c2:e1:f8:ef:91:24:57:bd:18:19:b6:c7:0f:
ed:56:48:1a:c2:06:4f:a8:61:60:b5:47:07:c5:58:
23:7b:05:e6:6d:50:9b:ef:f3:ba:ed:90:3b:19:a8:
96:76:1c:29:a0:d2:f5:18:1a:45:01:1d:19:0f:b3:
c3:2f:ed:3d:40:88:34:f9:6f:02:cc:4b:b4:b1:c3:
5f:0c:75:38:84:6e:b4:3e:7e:19:6d:3d:a7:25:74:
41:40:5c:64:6f:d3:ab:41:60:dc:ab:48:da:ce:c6:
88:ea:d1:e7:06:ce:88:35:ad:a2:4e:1a:68:d4:88:
4b:1d:16:2a:36:f5:74:6a:eb:c0:96:15:70:d5:ea:
34:ef:7e:e5:6e:14:17:6a:90:a0:0d:38:24:d0:fd:
21:b0:c9:eb:3f:7c:9e:a3:cf:49:f7:b8:2e:7f:45:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:6A:B4:24:90:DD:CD:F4:41:CD:57:B1:E5:0C:73:CC:AF:26:97
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BAD4ED2EE3B111EFA074DCA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.128.0/24
Signature Algorithm: sha256WithRSAEncryption
98:06:9d:5d:2c:9e:0b:20:5b:11:5c:d1:36:40:90:71:ad:15:
d2:6e:d6:ac:00:b2:8b:ea:8e:39:ce:27:64:06:01:59:bd:2b:
90:7f:e5:44:db:a4:15:66:3f:b5:90:bf:2e:9d:7b:44:43:48:
56:27:12:01:f7:81:03:cb:5e:69:d4:77:f7:bb:63:53:a5:31:
f7:ba:a7:a0:c0:08:b5:bc:48:38:37:eb:8a:74:b1:2a:67:49:
c1:dc:d4:a6:5e:0d:86:0f:55:ae:37:c9:09:9c:d4:22:de:a4:
2e:b2:3f:e3:46:3d:df:97:35:69:9d:1e:6d:c1:68:48:70:ce:
a0:64:e6:ee:51:ca:32:9c:9d:f0:f1:73:98:88:a6:c9:fa:3e:
08:b4:3f:88:00:66:5a:03:43:a9:5c:24:f8:db:42:b2:44:b5:
ca:59:c5:6c:13:73:e6:95:dc:7b:44:f7:73:6f:f8:19:8e:75:
81:87:e9:f7:5f:e0:3f:f9:29:fb:7f:0b:9e:44:bf:a5:a6:c9:
a8:ff:2e:03:1c:0e:1d:87:d6:d5:0a:78:73:12:04:51:8b:51:
a3:7c:55:cb:81:b1:5f:f2:fa:c6:98:06:2a:0f:4d:9e:d4:58:
1d:3f:a2:61:f8:2f:54:42:45:a7:cf:63:5f:14:8f:fa:04:5f:
e5:0a:7c:ce
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC8AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNTAyMDUxMTA5NTJaFw0zNTAyMDcxMTA5NTJaMBgxFjAU
BgNVBAMTDTY3YTM0NzAzLTdkYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCznD8W2D12BkJaR+CXqosa+rlrhMRm9qdEGHQIitfyvpyOSdIfRaH11U80
XP9BmYfrtU9f3qmz10hhyPjUPQKGdIlHfr9mMXC6yY0DVnwRV12C/9+uyWrSHUY8
wuH475EkV70YGbbHD+1WSBrCBk+oYWC1RwfFWCN7BeZtUJvv87rtkDsZqJZ2HCmg
0vUYGkUBHRkPs8Mv7T1AiDT5bwLMS7Sxw18MdTiEbrQ+fhltPacldEFAXGRv06tB
YNyrSNrOxojq0ecGzog1raJOGmjUiEsdFio29XRq68CWFXDV6jTvfuVuFBdqkKAN
OCTQ/SGwyes/fJ6jz0n3uC5/RQvrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUNZhq
tCSQ3c30Qc1XseUMc8yvJpcwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0JBRDRFRDJFRTNCMTExRUZBMDc0RENBNjc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjoAwDQYJKoZIhvcNAQELBQAD
ggEBAJgGnV0sngsgWxFc0TZAkHGtFdJu1qwAsovqjjnOJ2QGAVm9K5B/5UTbpBVm
P7WQvy6de0RDSFYnEgH3gQPLXmnUd/e7Y1OlMfe6p6DACLW8SDg364p0sSpnScHc
1KZeDYYPVa43yQmc1CLepC6yP+NGPd+XNWmdHm3BaEhwzqBk5u5RyjKcnfDxc5iI
psn6Pgi0P4gAZloDQ6lcJPjbQrJEtcpZxWwTc+aV3HtE93Nv+BmOdYGH6fdf4D/5
Kft/C55Ev6Wmyaj/LgMcDh2H1tUKeHMSBFGLUaN8VcuBsV/y+saYBioPTZ7UWB0/
omH4L1RCRafPY18Uj/oEX+UKfM4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:17:56 2025 by rpki-client