Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C88AB924B06E11EFBDC01D93762E951A.roa
File: C88AB924B06E11EFBDC01D93762E951A.roa (raw, json)
Hash identifier: jtRHhRIWZtbKLwRcuaK+QsD6vEI5yA9nVgH35gjE6qE=
Subject key identifier: 58:95:55:B6:15:EC:73:E2:72:31:55:8F:66:0E:ED:ED:ED:35:95:2E
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B41
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C88AB924B06E11EFBDC01D93762E951A.roa
Signing time: Mon 02 Dec 2024 05:32:13 +0000
ROA not before: Mon 02 Dec 2024 05:32:09 +0000
ROA not after: Wed 06 Dec 2034 05:32:09 +0000
asID: 15020
IP address blocks: 192.142.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2881 (0xb41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Dec 2 05:32:09 2024 GMT
Not After : Dec 6 05:32:09 2034 GMT
Subject: CN=674d465d-158d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:b3:5d:44:bf:8b:84:e9:a7:57:46:30:be:
01:08:0f:6c:1c:fa:52:d6:c3:61:b3:b2:89:06:85:
b4:20:f9:fa:c6:74:4c:77:bb:9f:a8:e4:4d:13:ae:
2c:22:42:3d:78:aa:4c:f2:ca:e5:d8:34:86:03:77:
04:55:05:d2:4f:18:bc:fa:94:81:f6:3f:c0:98:d3:
cc:63:fd:06:1d:7f:a4:e2:21:69:6c:d4:a4:28:3d:
36:f1:80:b1:1b:60:f5:8d:25:4c:21:cb:ca:dd:bd:
8f:51:a9:d9:c1:e7:85:9f:94:64:42:11:6c:36:ac:
4c:87:ca:1d:c8:48:e0:5a:99:9a:6a:a8:d7:23:79:
9a:ca:68:8f:0d:8b:9e:bd:00:71:75:7a:7f:91:46:
e2:1c:cc:7d:ad:4b:90:34:13:64:c4:15:4e:23:a4:
18:08:ef:d7:9a:a0:af:b3:60:ba:f0:48:7c:9c:e5:
53:a0:9b:e1:10:65:47:93:05:22:c1:34:6a:a3:ea:
b9:f1:5d:ed:89:33:3a:a1:85:83:c2:f4:ba:63:84:
c1:b3:ca:56:0e:bf:2e:1f:d5:57:1b:b9:dc:f1:55:
42:a3:99:f9:ce:7a:37:2c:3f:2d:4a:fa:6c:40:16:
0e:e7:7b:16:06:e1:da:88:16:ac:cb:97:96:98:cb:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:55:B6:15:EC:73:E2:72:31:55:8F:66:0E:ED:ED:ED:35:95:2E
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C88AB924B06E11EFBDC01D93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.13.0/24
Signature Algorithm: sha256WithRSAEncryption
48:63:d4:8d:2e:5a:3f:44:d2:4d:87:99:ac:85:1d:0c:51:0e:
ee:0c:9a:3e:f3:f4:b2:43:f2:56:39:e2:81:f5:cf:15:29:55:
e3:8c:12:d4:0b:98:28:ed:68:76:d0:d9:74:78:44:1e:c9:e6:
4c:5b:59:85:92:02:b4:3f:f1:e7:f2:81:37:d3:fc:66:5b:70:
6b:53:f5:92:8b:41:ff:b8:60:96:ad:16:11:8b:1a:2a:90:dd:
74:6d:61:69:a7:3b:17:ce:f8:11:32:d5:56:b6:2a:3a:14:80:
84:3b:d3:94:df:e5:a6:12:25:59:34:b0:62:fd:30:11:04:85:
48:5a:70:24:12:4c:76:17:01:6f:8f:c3:95:49:ef:2c:51:d3:
f3:b9:93:2d:b0:8f:11:c8:e0:35:3d:8e:65:5e:44:70:6e:9e:
ac:8d:43:fe:ea:73:27:be:ad:e4:36:ab:2c:11:c9:bd:48:68:
52:34:84:6f:5d:3d:86:95:4a:42:72:8c:33:97:cd:bc:ae:65:
d2:37:df:47:8f:81:e9:af:38:67:23:47:f4:91:84:d6:38:5d:
65:d4:d0:b5:92:40:97:c9:c0:9d:92:aa:a3:08:56:d2:fd:39:
e7:21:74:4c:d3:0e:04:05:7c:9b:79:b6:4e:73:c2:7f:ab:8e:
02:8c:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:27 2025 by rpki-client