Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/598EEBBCE24111EFAE28AC63762E951A.roa
File: 598EEBBCE24111EFAE28AC63762E951A.roa (raw, json)
Hash identifier: Db1GudZOYSrH19WuoL3xaitA6BlmUijwJIGiexk63U0=
Subject key identifier: 88:FA:A9:09:B3:97:DE:9B:A4:72:42:88:A7:18:63:18:3A:EB:26:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015031
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/598EEBBCE24111EFAE28AC63762E951A.roa
Signing time: Mon 03 Feb 2025 15:12:57 +0000
ROA not before: Mon 03 Feb 2025 15:12:54 +0000
ROA not after: Wed 30 Apr 2025 15:12:54 +0000
asID: 150008
IP address blocks: 154.210.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86065 (0x15031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:12:54 2025 GMT
Not After : Apr 30 15:12:54 2025 GMT
Subject: CN=67a0dcf9-3915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:f0:8f:53:64:4a:e9:2b:c6:f3:47:68:e4:
db:7a:12:cb:dd:dd:a5:18:60:85:9b:83:2d:17:f4:
7d:6b:60:45:8a:f8:75:74:ad:ff:35:37:5a:61:3e:
86:7a:e2:23:49:8f:f7:9e:8d:e0:c0:65:2d:57:86:
7b:a5:e5:ef:12:72:44:64:f7:e3:d0:b5:d4:b0:52:
26:e5:87:d7:c1:a6:09:64:da:4f:d6:b0:4f:19:f4:
8d:3b:17:b1:bf:37:2b:5f:cd:df:1d:c3:72:cc:78:
07:b6:45:ff:08:8d:06:38:8a:c8:51:86:c5:4b:21:
60:49:6e:02:66:3c:87:81:2b:ab:32:a2:14:77:6e:
0f:3e:1c:02:69:59:87:28:d2:c4:fa:f7:4a:e6:8a:
f0:fe:8b:ab:8e:ba:42:0f:3a:44:df:5e:7b:9f:26:
f3:2f:be:39:cd:75:af:85:35:88:bc:7e:21:7b:07:
ce:f5:26:38:53:5a:56:73:6c:52:9c:0b:cd:6c:17:
b1:8c:90:f6:be:1a:0d:5f:d6:ca:48:b7:c9:5e:b4:
03:7a:62:5c:af:42:f7:d9:bb:d5:68:f9:36:b9:bb:
50:0e:ff:dd:f7:1c:a4:8f:1f:3a:24:c0:e3:f5:6a:
66:7f:0f:46:18:90:c6:7a:cd:e5:9b:be:78:e9:a3:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FA:A9:09:B3:97:DE:9B:A4:72:42:88:A7:18:63:18:3A:EB:26:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/598EEBBCE24111EFAE28AC63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fc:3d:de:57:e9:5c:1d:db:e2:e0:a9:ea:c1:4e:2b:aa:90:
8c:64:1c:fb:ea:00:c0:ea:1b:a5:24:37:01:2b:73:7a:24:52:
5f:b0:e7:aa:f9:aa:e3:0c:08:97:44:7d:7b:da:e0:a0:18:be:
38:2f:45:c2:59:55:2a:88:54:ed:c7:df:af:6e:93:45:dc:cc:
d4:60:c3:b4:2a:9d:90:48:e9:27:ae:d9:e2:25:25:e8:7a:7f:
42:ab:c3:1b:1c:a0:8b:a4:58:c8:c2:13:98:22:1c:ff:77:67:
0c:08:f1:c0:80:b3:36:61:f8:1a:f7:e7:1e:7b:e5:56:bf:e6:
e8:1e:c2:d3:4a:19:21:e6:04:b7:b6:d5:53:d1:79:00:c9:8a:
f5:a9:e8:e7:e3:91:00:29:74:ad:45:c0:02:75:26:8f:dd:a6:
95:bb:a4:5a:9b:33:dd:d9:5e:6a:b0:82:fd:50:27:0f:3e:96:
96:f2:de:89:39:8c:1e:9e:9e:4c:ac:39:a2:4e:60:2d:e1:bd:
e8:0d:3d:a7:41:d4:74:bb:09:1f:e9:13:d2:58:d7:73:c6:5d:
0f:98:1f:55:9a:87:6c:40:65:f6:31:5c:d6:04:44:8b:6b:96:
a2:48:46:9e:3f:39:6c:2b:85:bc:7b:5c:59:35:2d:4e:02:ed:
e9:70:36:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:27 2025 by rpki-client