Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8602A1CADBFC11EFA516409F762E951A.roa
File: 8602A1CADBFC11EFA516409F762E951A.roa (raw, json)
Hash identifier: QRo+0Yj6uaIzu01Ve4FuJ0be7phZpGr1CPVuE4Na9rg=
Subject key identifier: 5F:5C:1C:89:70:C2:01:35:09:22:59:C3:B5:07:64:B4:F9:67:84:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0113EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8602A1CADBFC11EFA516409F762E951A.roa
Signing time: Sun 26 Jan 2025 15:45:10 +0000
ROA not before: Sun 26 Jan 2025 15:45:06 +0000
ROA not after: Sun 23 Mar 2025 15:45:06 +0000
asID: 63139
IP address blocks: 156.227.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70634 (0x113ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 15:45:06 2025 GMT
Not After : Mar 23 15:45:06 2025 GMT
Subject: CN=67965886-6cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:3e:60:73:c2:15:b9:0a:b1:3c:b8:ed:2e:
11:91:a3:17:34:c6:ea:6c:6b:66:7a:45:22:7a:c4:
3b:aa:f1:0d:83:f6:17:5a:b0:c0:9f:63:e1:8e:3f:
58:1c:b9:29:6d:90:6d:f1:28:86:3c:48:8e:4e:f2:
06:96:b9:e8:1c:c6:8f:d3:b9:86:3e:6b:6e:bd:2a:
42:31:a8:9f:9e:45:b0:7e:3a:ec:a9:94:bb:7a:5e:
39:01:46:f8:78:f3:02:47:cd:6d:b5:7e:fa:2e:15:
4e:c8:2e:dc:6a:5c:22:d4:7c:6f:ef:b0:23:89:80:
79:23:d8:f8:d5:d9:95:17:e7:49:c6:f4:36:8a:52:
e1:28:1e:f0:b9:84:67:5c:33:c8:31:4e:08:a7:60:
de:0f:a7:0c:d4:8e:3b:a9:54:5c:61:42:3f:d5:23:
1f:0d:18:02:63:d7:19:df:19:f7:38:72:6c:42:93:
5c:be:4e:8f:43:8c:82:ac:86:18:78:d1:2d:a9:90:
66:a5:74:52:dd:02:a3:de:a2:21:49:10:f6:e6:b8:
e1:e2:6b:c1:8c:7d:5d:ee:f1:09:aa:aa:f0:9f:53:
ee:99:03:2d:0a:49:a6:66:13:4f:1b:99:d7:d1:6c:
7c:5f:69:64:79:6e:ad:59:91:38:b3:ab:1e:2c:20:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:1C:89:70:C2:01:35:09:22:59:C3:B5:07:64:B4:F9:67:84:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8602A1CADBFC11EFA516409F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.196.0/24
Signature Algorithm: sha256WithRSAEncryption
54:db:29:33:49:f3:fa:9a:35:42:c0:6a:60:3a:0c:2a:ba:fe:
89:ef:b7:17:7d:9b:4b:2e:f3:e9:8b:00:a9:87:a5:20:a3:f2:
0a:07:5d:e4:a8:d3:ee:99:6d:a3:3e:c5:d8:15:fc:f2:29:b6:
92:71:0c:20:47:cd:dd:df:a8:d3:18:da:95:ce:b6:86:37:1a:
c8:36:d7:aa:16:bb:2b:a6:d7:aa:c4:0e:3f:c3:19:2f:d2:fb:
e6:16:a2:4c:02:59:1c:38:26:57:ce:d9:b6:60:0d:7b:d8:f0:
4c:da:7c:8e:cf:d5:99:4b:9f:37:8e:9e:9b:7e:f6:9e:0d:48:
10:ba:0b:58:1a:c9:58:14:78:6a:d1:2c:65:1a:d6:75:81:ee:
f2:84:0e:e7:38:bc:84:ed:56:89:74:d5:38:68:f4:6c:9c:0c:
25:1d:11:35:a0:dd:47:89:d3:ff:63:1f:a3:f0:41:90:28:fe:
aa:ed:37:1f:c9:9d:20:f1:68:2b:ba:66:76:9e:3b:d1:a6:05:
a1:79:ca:b0:7f:e9:dd:1c:87:55:07:0b:34:47:3d:bd:ed:ba:
7e:38:29:ca:ed:66:6c:d6:39:da:3d:de:8d:85:82:29:85:d4:
7f:87:56:43:ad:f7:79:0f:d8:ad:23:7c:ef:50:08:71:3d:a1:
e0:59:a0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:54 2025 by rpki-client