Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FC87493E055711F090F9EF6F762E951A.roa
File: FC87493E055711F090F9EF6F762E951A.roa (raw, json)
Hash identifier: bCz2w906zzvhGwQBT2GAE6WaP4YQerj3whUYPDiMxpc=
Subject key identifier: 4F:E2:33:3A:5F:61:8F:FB:3F:71:BC:D6:D5:9E:49:06:DA:70:C6:AA
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C3D
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FC87493E055711F090F9EF6F762E951A.roa
Signing time: Thu 20 Mar 2025 06:53:10 +0000
ROA not before: Thu 20 Mar 2025 06:53:06 +0000
ROA not after: Wed 14 Mar 2035 06:53:06 +0000
asID: 36916
IP address blocks: 192.142.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3133 (0xc3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 20 06:53:06 2025 GMT
Not After : Mar 14 06:53:06 2035 GMT
Subject: CN=67dbbb56-a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:49:75:70:ab:4e:0b:df:b7:17:e4:9f:f9:
4f:21:dc:2e:a0:7f:69:34:fd:91:e8:1a:87:f3:ab:
ed:8b:34:9a:49:35:58:98:19:e4:99:4d:d0:05:86:
77:d2:11:8a:25:7d:c9:b4:e7:74:b3:66:a0:55:3e:
a4:8a:4a:b6:37:9e:15:19:9b:0d:ad:c1:f2:8e:59:
86:c8:40:4c:11:ae:8d:50:b7:81:35:7d:13:a9:25:
20:d0:13:6a:f4:76:fd:31:ae:bd:9a:54:31:a8:a8:
26:65:93:c1:2e:79:49:59:31:ee:bd:c4:de:72:c8:
9d:00:c8:fc:b4:2c:09:a1:f9:de:b2:6a:9f:6b:c8:
38:d4:63:6e:1d:72:6f:fd:75:5b:4e:37:27:88:73:
5c:bb:04:44:7e:b2:47:9d:e1:4e:ad:4c:33:0d:1b:
1a:46:4d:83:25:6a:d5:66:bd:4e:9f:99:2e:97:84:
c5:aa:c3:98:8a:2e:6f:4f:32:e0:1c:b8:8a:42:f8:
5f:ae:16:e1:23:79:83:60:7a:4e:5e:ca:5a:d2:bc:
c1:1b:f1:59:a7:1a:ae:d4:2c:88:4e:68:c5:ee:44:
b1:fa:e9:d4:4f:6c:e4:cc:22:31:46:0c:3f:78:ab:
36:5e:3f:de:15:bb:c7:2f:8c:82:4d:25:63:91:60:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:33:3A:5F:61:8F:FB:3F:71:BC:D6:D5:9E:49:06:DA:70:C6:AA
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FC87493E055711F090F9EF6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:22:c1:9d:8e:7f:25:86:8a:06:6c:71:b6:db:6a:27:09:f2:
84:d2:70:1a:b4:6b:1b:54:30:50:fd:3e:65:9d:61:d3:c1:9d:
b2:18:aa:3c:51:c8:5a:32:c4:83:d4:d1:c4:c6:6f:9f:7a:6e:
66:c4:cc:61:d4:85:48:e4:b8:6d:21:24:43:1f:f6:fd:c0:4c:
33:9d:9d:f7:33:5f:3e:f0:71:6e:ab:5a:b2:7e:53:16:b7:13:
00:92:7c:35:9f:d9:39:0f:e0:5b:d9:79:f0:44:f7:08:ae:bd:
81:5d:c5:f0:ce:46:98:df:b1:9a:91:0f:6f:6d:f7:0b:be:50:
76:f3:78:59:0c:3c:2f:e6:0b:cf:f2:cb:ce:f1:ee:03:31:fd:
01:82:0a:eb:3d:2d:16:db:c1:fc:ac:49:d6:e2:ce:a0:0d:54:
4c:a1:79:a2:31:55:13:c2:71:f9:bf:9f:9c:55:6c:bd:21:85:
1d:c1:fc:09:2c:49:65:5b:2f:cd:f4:e7:e3:d8:da:f1:90:f1:
83:64:a3:eb:92:9c:25:44:5a:cb:35:81:6b:bf:ac:99:43:34:
2d:de:f5:a8:f7:87:8c:a2:15:ca:65:f3:29:4b:a5:88:44:1c:
54:c5:f7:03:e7:4d:0c:26:c5:ea:88:4e:a3:d3:71:0a:63:66:
43:da:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:26:21 2025 by rpki-client