Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DCE84410E3B111EFB55956A7762E951A.roa
File: DCE84410E3B111EFB55956A7762E951A.roa (raw, json)
Hash identifier: tG9jkU9Oz2yuFY08iX6yhIRHVED2uo+etKYzgu0qK+4=
Subject key identifier: 7F:AF:C8:AC:28:EE:64:B0:20:27:25:71:77:32:81:33:D6:75:54:5F
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0BC2
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DCE84410E3B111EFB55956A7762E951A.roa
Signing time: Wed 05 Feb 2025 11:10:53 +0000
ROA not before: Wed 05 Feb 2025 11:10:49 +0000
ROA not after: Wed 07 Feb 2035 11:10:49 +0000
asID: 2914
IP address blocks: 192.142.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3010 (0xbc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Feb 5 11:10:49 2025 GMT
Not After : Feb 7 11:10:49 2035 GMT
Subject: CN=67a3473d-ba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a0:5c:44:e3:91:36:78:22:4a:83:f4:84:9f:
0a:96:80:60:21:78:7f:af:96:95:8e:1e:3f:15:6f:
3e:73:c6:6a:1e:76:fb:b8:08:e2:f5:b9:fd:49:37:
3f:67:48:3f:54:03:e7:6e:e3:1c:4c:a2:66:2d:35:
be:73:b0:a5:c7:d5:37:6e:4d:55:a0:2a:65:13:2b:
0b:63:96:2f:02:8a:54:ac:c6:91:45:45:68:86:71:
50:16:e6:34:5d:db:a1:19:93:5e:9e:d7:82:61:a2:
ed:ad:86:0f:85:3b:cb:77:aa:4d:7d:b6:6a:3f:f9:
18:da:74:7c:af:97:54:44:cd:fe:21:31:2a:c5:b2:
e5:31:50:01:8e:52:6f:88:a0:87:5a:03:35:e5:9d:
29:4d:b9:2b:56:85:44:8b:c0:48:fa:d1:5a:b3:1f:
d2:9a:ff:49:ba:89:56:71:bb:1c:30:04:cb:42:81:
df:8f:51:cb:4c:e2:80:4e:65:a9:96:da:7c:f3:cb:
36:d8:01:97:b4:d3:da:29:aa:7f:31:c4:c1:4f:47:
27:e4:4b:c1:dc:94:61:6d:9b:c9:1f:a5:4b:a1:9f:
14:87:4a:4f:9d:a6:42:e2:7f:55:0e:72:d3:59:a3:
6c:16:f0:eb:13:73:12:6b:f1:61:de:8f:ae:5a:b6:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AF:C8:AC:28:EE:64:B0:20:27:25:71:77:32:81:33:D6:75:54:5F
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/DCE84410E3B111EFB55956A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.192.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2e:2c:78:4c:c3:ce:1b:c9:b9:51:f7:f3:ba:6d:81:c8:70:
12:55:1a:de:04:85:4b:2f:1b:37:6f:53:be:1a:6d:e2:9e:a4:
e2:d1:20:88:29:e6:7f:9f:c6:97:01:8f:8e:91:7d:49:94:4a:
9c:e8:da:08:f9:6b:e1:fa:1a:0c:7d:35:7b:35:dc:06:b4:ec:
81:b5:38:42:5f:72:b8:06:1f:6f:2b:1a:5f:ca:d2:24:67:3c:
62:de:c0:90:0e:79:00:76:0f:9d:8c:4d:f7:8a:fb:91:1d:31:
a3:95:79:d3:cd:2b:cf:40:10:41:05:2f:a0:de:bd:cd:26:1a:
7e:75:8f:2b:70:f9:f7:46:6d:58:5b:07:54:22:15:cf:ed:e4:
a5:91:5b:e9:b5:0d:59:57:60:ae:c1:71:20:3c:2e:11:b5:e2:
3f:13:d9:a4:35:a5:92:6b:e2:44:f1:09:d1:d2:d6:49:57:d9:
02:f2:2a:ec:db:20:dc:22:fa:a6:26:4f:61:12:e5:28:5f:72:
8c:87:93:cb:aa:08:19:98:98:61:dc:2c:c8:af:ad:a8:ff:47:
b8:6f:64:e5:f2:b9:36:91:5f:ed:14:7b:48:5c:66:89:bb:52:
52:07:f7:d9:e3:0a:3a:41:ed:f5:b8:73:d0:a1:ed:f0:21:6a:
20:45:a1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:31 2025 by rpki-client