Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/599C70C6D95D11EF90487F6E762E951A.roa
File: 599C70C6D95D11EF90487F6E762E951A.roa (raw, json)
Hash identifier: s8PD8NrDclcWUHzltKEjxYoaBjYhZ9pKEhGUv5De4fo=
Subject key identifier: E9:9A:75:B4:19:AE:BA:37:77:11:73:4F:72:75:8A:17:DA:99:28:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01404D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/599C70C6D95D11EF90487F6E762E951A.roa
Signing time: Thu 23 Jan 2025 07:40:43 +0000
ROA not before: Thu 23 Jan 2025 07:40:39 +0000
ROA not after: Sat 08 Feb 2025 07:40:39 +0000
asID: 18229
IP address blocks: 154.210.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81997 (0x1404d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:40:39 2025 GMT
Not After : Feb 8 07:40:39 2025 GMT
Subject: CN=6791f27b-5991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:a5:ad:4a:af:82:3c:da:f8:cf:b3:e3:ce:
dc:2d:cc:70:5f:c1:ef:47:85:e7:87:b3:23:3a:a3:
54:eb:6b:a0:16:5e:2a:d7:fe:59:83:c7:a6:20:9e:
0e:42:93:c0:ff:7a:30:6d:8e:aa:29:0f:e7:70:cf:
1e:47:d1:21:e8:ac:95:70:00:f7:b9:5f:a4:ce:5d:
98:4e:8a:ed:1d:05:72:4c:43:c1:6c:2c:73:4e:b6:
19:88:40:33:de:0f:d6:6e:9b:03:f6:8c:01:e8:ec:
91:80:f8:f9:d1:7c:69:bb:dd:88:c9:42:23:b9:b3:
42:ae:8a:74:e6:9c:77:d0:98:d9:ba:56:c1:d0:cd:
9d:59:cb:f4:cb:d1:3a:8b:b7:b3:44:ca:ff:96:6d:
c6:c6:84:71:c3:47:47:8e:66:de:f8:88:78:69:b6:
5f:49:35:98:1e:7f:69:25:c1:01:b1:a8:65:84:4f:
20:53:62:fe:65:62:04:64:a5:82:64:69:53:9a:7a:
41:a6:7c:56:f2:29:5e:c0:ae:ac:49:52:54:d4:17:
9b:43:b3:9b:b3:e9:0b:78:60:32:d3:45:55:c6:8e:
00:80:62:ad:7e:a3:1a:b6:6e:60:a4:80:0a:4b:ed:
de:16:e8:99:e3:ad:88:22:91:f5:4a:2b:d3:b5:21:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9A:75:B4:19:AE:BA:37:77:11:73:4F:72:75:8A:17:DA:99:28:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/599C70C6D95D11EF90487F6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6a:ec:06:04:14:4f:86:f2:7d:24:73:47:40:a9:be:1d:48:
76:b0:42:8d:3f:86:f9:a2:07:28:2b:93:b5:bb:12:be:47:d8:
d4:7b:1a:22:fb:69:15:08:cf:d9:f2:a9:c2:96:42:3f:16:3e:
be:f6:2c:1e:20:ac:b5:e1:66:0b:1c:53:55:b2:ec:47:95:f0:
c1:72:5e:bb:7f:0a:86:10:75:88:4f:79:71:d0:83:bf:5d:5f:
9e:92:df:ec:ed:0f:6e:43:f1:7f:90:8d:66:92:20:4c:da:98:
92:5f:e8:cc:fe:c5:b1:3e:89:63:ac:84:08:2f:9b:3e:b2:cf:
e5:5d:3b:22:57:e6:01:4c:bf:d1:43:fa:88:a0:33:64:13:c9:
9f:e4:fb:c5:ad:73:ea:ce:13:a1:41:90:b7:c6:e5:2b:e0:67:
db:39:4a:e9:19:db:62:f5:07:bc:fd:e7:9d:da:7f:c7:a2:10:
2d:96:1b:ff:5b:01:0c:46:d8:3f:db:52:6c:95:97:6d:0a:7f:
0d:6c:d5:93:3b:92:6c:40:d8:5a:bb:62:27:e5:af:21:52:8e:
e5:33:6d:11:0c:89:01:ba:47:85:1d:89:70:ec:2e:25:51:9c:
ca:42:22:82:5b:9d:d6:9d:15:2d:cc:98:f5:2c:9c:6a:02:77:
ba:b6:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:33 2025 by rpki-client