Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BA8726DBFB11EFACB62398762E951A.roa
File: 56BA8726DBFB11EFACB62398762E951A.roa (raw, json)
Hash identifier: /m7ETlJ+6PZi1zz2TCCZ1NyAdL25yO1Gzu9jC6Z3rSg=
Subject key identifier: 59:99:66:4F:B7:29:C1:BB:10:C0:74:61:C2:B5:F3:54:4B:91:B8:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BA8726DBFB11EFACB62398762E951A.roa
Signing time: Sun 26 Jan 2025 15:36:41 +0000
ROA not before: Sun 26 Jan 2025 15:36:37 +0000
ROA not after: Sun 23 Mar 2025 15:36:37 +0000
asID: 63139
IP address blocks: 156.227.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70626 (0x113e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:36:37 2025 GMT
Not After : Mar 23 15:36:37 2025 GMT
Subject: CN=67965689-0347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:17:86:d8:ed:1e:2a:1b:c2:11:9d:06:2b:
b8:29:e1:24:6c:aa:a5:bf:e9:3f:2e:24:27:5e:09:
51:c6:da:cb:d2:44:4b:36:b8:a8:82:42:b6:db:03:
84:53:e1:92:9c:63:ea:dc:df:36:82:bf:7b:6f:44:
4d:82:af:fd:02:1e:cf:b3:f5:6d:19:88:79:75:c9:
3c:5e:18:b8:d8:26:20:c9:0d:0b:b9:79:85:5e:b8:
fd:61:5c:4f:82:98:f8:c0:69:e0:54:64:1f:34:cd:
31:a4:84:de:b9:63:34:93:0a:82:c1:e1:76:3f:80:
36:b2:2d:de:f7:93:1b:fe:f8:7b:3f:9d:cf:20:a3:
ee:cd:d5:0b:49:b2:58:78:0c:52:12:b8:88:42:5e:
a5:84:65:ed:23:7d:bf:fb:ff:97:21:9f:d5:e5:35:
7c:75:89:68:2d:35:66:4f:11:14:86:62:bb:10:f1:
8e:24:7d:89:a8:54:8a:92:dc:e4:81:fa:a2:a1:2b:
f6:52:01:84:56:48:75:41:58:d0:9d:96:13:46:1f:
d8:eb:7e:24:53:f2:07:a8:af:93:e5:59:c8:a6:e2:
c5:88:c0:a3:d0:83:28:d4:d9:ee:fd:9f:05:2e:62:
47:52:dd:4f:79:44:92:b5:29:fb:45:de:50:44:38:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:99:66:4F:B7:29:C1:BB:10:C0:74:61:C2:B5:F3:54:4B:91:B8:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BA8726DBFB11EFACB62398762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.202.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f6:ba:8a:72:ca:86:ab:2d:2c:97:22:1b:fb:65:b3:9e:16:
e4:b3:12:3a:5e:19:28:65:d1:24:c4:68:75:cc:bf:0e:f6:43:
19:0b:64:f1:30:0d:13:5c:b6:66:c4:ee:38:d9:51:4a:f7:9b:
79:61:ef:05:a9:ed:11:9a:47:f7:08:56:0c:0d:af:66:e6:96:
88:72:b6:8e:95:51:51:1d:8e:b9:3d:66:46:c0:ed:ac:d4:4c:
18:2d:31:51:71:5a:db:76:be:05:44:e6:68:66:d3:d9:22:4b:
86:19:b7:ef:48:7a:da:ec:11:d2:c4:e3:a8:54:18:ae:1c:8b:
64:b5:e9:09:74:87:bf:dc:a2:4a:dd:6d:7b:1f:83:8b:b6:4e:
b3:3e:33:58:89:83:f2:d5:8c:1b:b0:c4:a7:70:07:56:60:a3:
e6:45:a5:54:7b:fd:56:26:18:94:6c:00:93:6e:26:2e:83:c8:
3c:95:2d:47:24:7d:03:3e:b6:bd:de:2b:7f:4b:f8:c0:37:92:
7e:b6:a9:d5:17:db:88:e8:42:59:39:59:9e:16:4b:5c:40:c1:
ad:02:bd:f3:4b:5a:8a:a3:b7:22:57:6c:3f:d6:64:06:41:00:
e7:b4:cc:a5:9d:ed:6e:24:1e:80:55:f3:37:38:6e:d8:77:50:
13:92:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:47 2025 by rpki-client