Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C11A58C61F11EFA230B169762E951A.roa
File: 59C11A58C61F11EFA230B169762E951A.roa (raw, json)
Hash identifier: N+XNF+19325AtRJsOO/gJDLEI+3FIXuZRa6nq/Wix3U=
Subject key identifier: 5C:59:33:BD:6F:E8:96:3F:FF:45:88:9A:71:AE:86:1D:50:60:CE:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C11A58C61F11EFA230B169762E951A.roa
Signing time: Sun 29 Dec 2024 19:59:02 +0000
ROA not before: Sun 29 Dec 2024 19:58:59 +0000
ROA not after: Sun 12 Dec 2027 19:58:59 +0000
asID: 17561
IP address blocks: 154.217.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77662 (0x12f5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:58:59 2024 GMT
Not After : Dec 12 19:58:59 2027 GMT
Subject: CN=6771aa06-d361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:2d:cb:1e:34:98:57:5f:1f:a4:3a:40:ee:
5f:0d:37:ab:ae:3b:13:75:3b:32:6d:5a:b6:0c:38:
df:da:83:8e:e3:77:3d:ae:16:a1:0f:89:b0:27:1d:
d9:bd:05:75:07:38:2f:ea:bd:7a:5e:95:0b:0c:65:
ed:96:ac:01:b0:d0:4d:25:4a:94:54:34:ee:17:d2:
c2:2f:d2:c0:2a:2c:4b:ac:0f:47:cb:f3:5c:b0:53:
9d:e6:12:cd:dc:ee:13:1d:5e:18:63:67:2c:e9:aa:
aa:6b:47:98:2d:b3:0c:fa:27:d8:74:20:15:8d:c9:
f3:6c:d3:3a:47:aa:7f:27:6f:b3:72:3d:4d:96:42:
cb:89:8c:55:98:e4:67:6e:f3:0c:ab:d8:b2:73:28:
0d:77:09:a9:0e:3d:6f:99:7c:31:1b:2d:73:d2:7a:
73:70:46:ba:98:86:83:7d:ea:b8:0d:9f:d0:3d:4a:
30:3e:d4:c8:9d:05:57:d1:17:c5:72:ba:7c:a2:d8:
c4:8d:10:ab:d6:10:6a:f8:df:e1:4c:e0:18:56:e5:
cc:3d:8e:f9:ef:16:91:be:fc:35:b0:69:8e:6d:50:
e2:1a:5e:fa:fc:75:fa:0f:f9:dc:35:34:a0:bc:c9:
ab:50:45:b3:71:e9:f4:1d:5b:de:a8:fa:72:73:7a:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:33:BD:6F:E8:96:3F:FF:45:88:9A:71:AE:86:1D:50:60:CE:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59C11A58C61F11EFA230B169762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.146.0/24
Signature Algorithm: sha256WithRSAEncryption
60:69:8d:27:8a:36:9a:55:15:9f:19:4b:59:15:14:d0:11:ee:
3f:7a:b1:21:65:85:79:8e:bc:5c:1e:1d:d9:57:e5:15:07:80:
ae:0c:e8:d3:b7:08:b8:88:7d:71:b1:7f:cb:a4:e2:96:b5:e1:
8d:2b:05:94:d1:9e:da:ec:8c:0e:8c:79:1c:6b:16:68:3a:08:
c6:23:de:a5:25:b1:32:ac:7f:ef:40:79:b4:8d:02:1c:8f:c6:
70:85:73:40:c0:db:9f:bf:9f:57:06:26:ba:88:cb:0c:40:c8:
d5:a8:bf:a9:47:1f:fa:f8:f7:37:1b:98:9e:5c:3f:22:49:b6:
64:a4:ef:9c:d1:d5:5d:08:09:f2:cb:57:6a:66:8f:ee:a8:ac:
68:f2:e0:1b:9b:28:7a:bc:64:1d:f5:ef:0c:1b:45:02:d9:04:
4c:64:67:6a:05:f1:4a:c4:ec:f4:8e:9e:cd:13:a9:59:8b:d7:
52:44:87:b1:56:46:92:7e:f7:f9:76:ec:db:6d:2e:a3:13:9d:
4a:63:a6:61:ef:2a:32:0c:77:67:51:54:0c:fa:02:1e:55:ab:
a7:ba:4d:c8:33:9a:57:20:c1:b8:f7:a7:73:1c:b5:ab:72:f4:
67:da:01:ea:7e:f5:dc:ca:ae:a4:e0:b9:32:b2:93:9f:ac:cd:
b0:8e:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:37 2025 by rpki-client