Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FDBEE756086F11F0BE49FE4B762E951A.roa
File: FDBEE756086F11F0BE49FE4B762E951A.roa (raw, json)
Hash identifier: Pihu+W81pqDayhTu1B3aRCkw4Z+IctlUSIu+pHc9DpM=
Subject key identifier: A6:4D:41:AC:BB:E5:65:74:E7:1C:D8:E8:91:DA:97:3E:92:4C:1C:7E
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0C48
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FDBEE756086F11F0BE49FE4B762E951A.roa
Signing time: Mon 24 Mar 2025 05:22:34 +0000
ROA not before: Mon 24 Mar 2025 05:22:30 +0000
ROA not after: Tue 13 Mar 2035 05:22:30 +0000
asID: 36916
IP address blocks: 192.142.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3144 (0xc48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR
Validity
Not Before: Mar 24 05:22:30 2025 GMT
Not After : Mar 13 05:22:30 2035 GMT
Subject: CN=67e0ec1a-67cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:cf:16:ae:cc:86:32:78:f2:1f:9e:58:33:
e7:02:6d:b8:3b:fa:0b:7a:e6:9f:68:29:f1:c3:07:
97:e1:1f:48:61:8f:2d:0a:20:ab:34:e1:09:aa:b1:
32:14:04:67:36:6b:4f:9e:16:fa:23:42:fb:41:98:
90:af:84:e8:09:d0:77:fd:78:78:eb:6f:7e:cf:04:
5d:c3:00:ae:d1:83:e6:ac:e7:9d:b8:f0:67:d8:f1:
36:32:f6:a5:d7:68:28:50:59:fa:f6:40:8e:28:ca:
7c:cf:7a:83:8c:9f:53:d4:31:05:a3:5d:a2:98:1c:
94:69:94:f8:bd:9b:fd:fb:72:ec:84:5c:9d:27:24:
56:d6:80:36:61:1d:b7:38:a5:87:a8:e7:18:66:97:
4a:44:27:be:af:95:c7:74:37:0f:7a:48:b0:75:6f:
23:9d:da:98:a9:35:e1:29:c3:86:fa:7d:32:48:77:
cf:6a:35:cf:e8:be:8b:76:e4:82:4e:3f:95:1e:b7:
97:e0:fd:18:fd:64:24:b2:b8:b8:de:fa:1f:d6:a0:
ab:9b:34:1c:f2:cd:97:8c:af:e7:a2:6a:58:58:49:
59:45:12:ef:f0:1e:06:b5:0b:77:62:df:6f:18:4c:
a2:45:77:38:93:84:12:c5:78:0d:19:2f:b3:c3:dc:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:41:AC:BB:E5:65:74:E7:1C:D8:E8:91:DA:97:3E:92:4C:1C:7E
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/FDBEE756086F11F0BE49FE4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.64.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:9f:c8:33:98:c6:34:e9:7d:f8:c1:81:54:5b:2c:43:44:b6:
9a:e2:7e:ee:db:62:ae:36:69:f0:0c:cb:36:82:0f:2d:6f:c6:
08:fe:bd:95:fd:07:9b:88:1e:f0:85:4d:34:61:a5:3a:63:07:
ad:43:56:a0:d1:df:5c:f5:86:af:ce:62:7e:8f:b7:26:7d:79:
98:5b:6f:57:9f:44:b3:58:7a:89:ff:70:fd:46:f0:ee:24:0f:
97:9b:37:7f:b9:a3:88:86:37:e3:a9:7c:10:c3:6c:84:14:e7:
26:d6:9c:c5:a1:3c:21:bb:aa:bc:c6:04:da:a7:63:40:b7:0a:
ce:9f:1f:29:c7:a3:52:85:aa:51:1c:4d:7b:04:8d:56:07:18:
97:88:b7:e8:12:f3:6a:41:b8:18:a3:7d:dc:dc:e9:6e:fb:57:
72:9b:7f:03:f9:0e:50:c8:77:86:96:83:5c:cb:2f:15:d8:e6:
e4:ad:ea:22:e6:95:54:50:dc:23:6c:0f:e3:de:59:6c:b1:a1:
32:45:b6:0f:4a:61:c1:68:93:7c:a7:5d:61:ae:b3:fc:2b:1d:
80:a8:6b:1e:c6:5d:67:c3:c4:72:b6:1a:28:f2:2c:e0:f7:e4:
f5:2a:e6:46:4d:25:14:2d:2b:39:67:6b:91:1c:19:f6:b7:03:
48:72:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:07 2025 by rpki-client