Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E1DCB84A03CB11F0895A835D762E951A.roa
File: E1DCB84A03CB11F0895A835D762E951A.roa (raw, json)
Hash identifier: SjgBLsCKNcgro8rAlWWGBooZO8wie+xrj9tsPMVzNy0=
Subject key identifier: 27:82:CF:23:4B:E3:C5:2A:1B:46:4F:45:DC:ED:A7:58:22:AF:D3:EE
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C29
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E1DCB84A03CB11F0895A835D762E951A.roa
Signing time: Tue 18 Mar 2025 07:37:45 +0000
ROA not before: Tue 18 Mar 2025 07:37:41 +0000
ROA not after: Wed 07 Mar 2035 07:37:41 +0000
asID: 36916
IP address blocks: 192.142.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 18 07:37:41 2025 GMT
Not After : Mar 7 07:37:41 2035 GMT
Subject: CN=67d922c9-9a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:a8:93:d2:aa:88:5a:16:c3:b1:c4:6e:a6:
98:55:49:7a:dc:e1:52:db:18:06:0c:dc:38:06:10:
67:aa:33:ef:07:36:6f:1c:f4:89:25:4e:12:17:92:
9b:ee:3e:74:6f:5f:fe:4f:62:b4:9b:74:c5:09:40:
f4:3c:bb:42:62:82:a3:45:fe:71:b7:cf:93:68:f9:
64:5f:93:48:1b:40:8a:18:b2:8d:34:f1:50:c4:8f:
8f:20:35:67:77:21:1f:69:63:0a:3c:d8:b6:f1:39:
23:65:50:05:86:3d:81:31:d7:8c:90:57:48:78:09:
37:b4:f2:5c:68:b3:18:98:4b:23:38:42:fb:5a:04:
49:c3:42:b0:3b:c7:7a:80:7d:68:10:14:eb:88:3d:
0c:45:ad:b8:d5:c4:dd:20:0c:00:f9:32:c9:07:38:
8f:33:28:b6:43:3e:40:32:51:37:3f:7a:d7:bb:92:
2f:d0:09:7e:47:67:80:00:dd:bf:a1:d5:26:75:a4:
02:22:9e:81:9f:2e:a6:b1:ad:fb:b3:ac:29:5c:3c:
23:17:4e:fb:09:96:a6:cd:ae:46:f1:04:ee:c9:9e:
c8:0e:ea:d5:e9:29:7c:a2:cd:4e:b0:66:c4:df:75:
d0:ae:25:06:41:6a:64:50:22:63:91:a4:dd:b5:10:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:82:CF:23:4B:E3:C5:2A:1B:46:4F:45:DC:ED:A7:58:22:AF:D3:EE
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E1DCB84A03CB11F0895A835D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:1f:75:16:ac:d2:1e:85:55:1a:ad:f9:21:54:4d:e8:e1:27:
35:99:c3:4f:8c:cd:bd:8b:a7:a9:fe:26:06:44:22:f6:69:a5:
a6:8e:c0:52:11:95:e3:d8:f6:cd:31:19:f1:ce:0c:7f:a7:ad:
06:ac:73:7a:d1:22:dc:ce:36:5a:b4:a8:7d:c7:9c:8b:9b:93:
48:c5:95:ef:01:22:5f:6d:46:12:d2:f7:7f:4d:71:68:50:66:
56:54:d1:d8:65:2a:9d:ad:67:08:c4:1b:6f:a4:d0:7d:4e:82:
98:6d:a8:39:01:de:4a:ac:a9:5f:b6:e3:4a:7f:81:94:47:00:
60:bd:03:c3:49:6b:21:30:37:53:12:8f:f2:1a:e7:08:c1:b9:
56:e6:05:51:80:3f:01:79:e4:5e:b9:52:34:f6:8f:b5:10:ec:
eb:a3:da:cd:99:40:16:a8:29:69:75:a9:a3:87:bf:b8:c0:1b:
ce:ad:eb:78:d6:99:87:b0:68:ca:bf:ca:61:70:d3:e4:d3:ce:
ad:b2:c2:b2:17:40:af:d3:b9:84:23:51:9f:9c:ef:ba:e0:c8:
b6:4f:a0:76:3c:e1:6e:5b:7a:ba:30:0f:d7:7a:04:58:fe:a8:
70:02:ac:a6:1d:90:ee:66:2f:ba:af:f4:fa:89:9d:c7:a8:06:
29:7b:d3:04
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNTAzMTgwNzM3NDFaFw0zNTAzMDcwNzM3NDFaMBgxFjAU
BgNVBAMTDTY3ZDkyMmM5LTlhNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPsqiT0qqIWhbDscRupphVSXrc4VLbGAYM3DgGEGeqM+8HNm8c9IklThIX
kpvuPnRvX/5PYrSbdMUJQPQ8u0JigqNF/nG3z5No+WRfk0gbQIoYso008VDEj48g
NWd3IR9pYwo82LbxOSNlUAWGPYEx14yQV0h4CTe08lxosxiYSyM4QvtaBEnDQrA7
x3qAfWgQFOuIPQxFrbjVxN0gDAD5MskHOI8zKLZDPkAyUTc/ete7ki/QCX5HZ4AA
3b+h1SZ1pAIinoGfLqaxrfuzrClcPCMXTvsJlqbNrkbxBO7JnsgO6tXpKXyizU6w
ZsTfddCuJQZBamRQImORpN21EKyTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJ4LP
I0vjxSobRk9F3O2nWCKv0+4wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0UxRENCODRBMDNDQjExRjA4OTVBODM1RDc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjrgwDQYJKoZIhvcNAQELBQAD
ggEBAKAfdRas0h6FVRqt+SFUTejhJzWZw0+Mzb2Lp6n+JgZEIvZppaaOwFIRlePY
9s0xGfHODH+nrQasc3rRItzONlq0qH3HnIubk0jFle8BIl9tRhLS939NcWhQZlZU
0dhlKp2tZwjEG2+k0H1OgphtqDkB3kqsqV+240p/gZRHAGC9A8NJayEwN1MSj/Ia
5wjBuVbmBVGAPwF55F65UjT2j7UQ7Ouj2s2ZQBaoKWl1qaOHv7jAG86t63jWmYew
aMq/ymFw0+TTzq2ywrIXQK/TuYQjUZ+c77rgyLZPoHY84W5berowD9d6BFj+qHAC
rKYdkO5mL7qv9PqJnceoBil70wQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:07:54 2025 by rpki-client