Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/6DA243DEDCE111EF81D2DCA3762E951A.roa
File: 6DA243DEDCE111EF81D2DCA3762E951A.roa (raw, json)
Hash identifier: WNGwoowengyDdO9xPLt8TfFNLhgBtMLoD0A1CFD7WaM=
Subject key identifier: 5D:F9:8F:5C:AC:12:D0:2E:97:1B:AD:A1:3D:E8:1D:25:8C:CA:8D:47
Certificate issuer: /CN=F36EEB6BAR/serialNumber=FB48EDF0214123E3F508F97E3F2A8AF95D893579
Certificate serial: 02
Authority key identifier: FB:48:ED:F0:21:41:23:E3:F5:08:F9:7E:3F:2A:8A:F9:5D:89:35:79
Authority info access: rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/6DA243DEDCE111EF81D2DCA3762E951A.roa
Signing time: Mon 27 Jan 2025 19:03:44 +0000
ROA not before: Mon 27 Jan 2025 19:03:39 +0000
ROA not after: Wed 31 Jan 2035 19:03:39 +0000
asID: 328330
IP address blocks: 192.12.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EEB6BAR
Validity
Not Before: Jan 27 19:03:39 2025 GMT
Not After : Jan 31 19:03:39 2035 GMT
Subject: CN=6797d890-cf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:59:1d:f5:ca:bc:bf:6f:b3:42:25:cf:80:
01:c8:6d:0b:49:12:12:64:26:1e:f5:77:06:9a:28:
14:aa:f9:9b:5e:54:31:6d:ef:b3:9d:67:7f:d9:f1:
3e:79:1c:e9:c8:87:df:90:b2:45:c1:2d:7f:95:b9:
97:7e:36:85:08:03:71:27:93:29:d7:83:b3:2d:09:
b3:be:d2:9e:97:8d:05:1f:80:a5:ce:fc:42:75:d7:
2d:16:a2:ad:1c:01:99:63:1b:d0:f0:82:29:f1:e5:
98:be:e4:5e:2d:30:d5:fc:d6:2e:5c:ad:f3:73:a7:
35:90:f3:63:bd:95:77:9c:87:e6:c9:14:d5:5b:c2:
c3:9e:97:10:03:6b:eb:aa:19:9a:dd:c8:53:f9:c5:
01:5f:63:42:bf:3a:9a:c8:c3:75:3f:03:82:40:d5:
d3:b9:09:d6:56:1b:e5:6a:2f:b1:d5:89:e6:ee:59:
b4:3f:d3:09:40:d0:00:17:de:aa:e6:f3:6c:42:7b:
44:85:7a:fc:40:2c:68:f9:aa:68:48:66:22:b7:6e:
b9:5e:7f:e9:5b:99:31:d5:c5:cc:9e:60:b0:0e:0a:
5f:6b:7c:de:92:20:c7:41:cd:3a:7e:a1:ae:c4:18:
ed:48:fe:eb:cc:34:08:44:26:71:87:db:18:d8:49:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:8F:5C:AC:12:D0:2E:97:1B:AD:A1:3D:E8:1D:25:8C:CA:8D:47
X509v3 Authority Key Identifier:
keyid:FB:48:ED:F0:21:41:23:E3:F5:08:F9:7E:3F:2A:8A:F9:5D:89:35:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/-0jt8CFBI-P1CPl-PyqK-V2JNXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-0jt8CFBI-P1CPl-PyqK-V2JNXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/142F9550DCDB11EFACCA1A7A762E951A/6DA243DEDCE111EF81D2DCA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.12.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:90:81:21:22:b7:e3:21:ee:3b:18:f0:bf:d2:c7:54:76:05:
a5:a8:13:41:e7:c2:4a:33:9e:74:27:9f:6d:6b:ad:68:fd:5f:
79:d9:b0:4d:e7:ca:0e:b9:d1:81:07:11:2b:f2:4f:7d:f2:5c:
40:5e:1f:36:c0:ac:f2:99:db:f4:93:00:d1:18:79:f3:e2:ec:
ae:15:5d:85:c2:d5:c7:27:47:f4:e4:79:9b:5c:55:0a:79:69:
23:67:7c:f8:17:77:b6:e9:11:1c:5a:42:06:74:0a:52:b2:00:
e5:08:c4:3c:4f:4e:55:6e:54:0f:e7:ed:d8:7a:de:da:e3:9a:
09:6f:ba:7c:cd:75:d9:df:78:78:bd:1f:92:0d:b9:78:15:fb:
d5:9c:a7:96:82:4c:08:12:f4:5c:b1:22:35:b5:42:d7:86:2d:
d3:c0:de:42:b2:74:92:70:9c:60:41:60:6f:1a:a8:4c:6c:14:
f4:7a:19:43:34:e3:08:44:be:05:4e:41:27:31:a2:3d:e8:9a:
10:6b:f2:28:5a:04:0f:f9:54:76:7b:cf:57:89:bd:1c:38:60:
fb:7a:05:3b:43:04:ae:f4:bf:9a:f1:30:86:20:7b:c2:81:27:
3e:71:f4:92:df:7b:ea:67:2c:21:86:a3:e3:f2:a2:2b:0f:df:
c1:92:43:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:42:15 2025 by rpki-client