Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A44D256F61F11EF8F180CA5762E951A.roa
File: 4A44D256F61F11EF8F180CA5762E951A.roa (raw, json)
Hash identifier: nde1TxuglljM/KofxS/qL3C5njs5EIRb9FRMxagnDsE=
Subject key identifier: 95:5A:08:EC:34:7C:3E:B8:CD:A4:30:6F:44:A4:8C:96:79:1F:59:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C6B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A44D256F61F11EF8F180CA5762E951A.roa
Signing time: Fri 28 Feb 2025 21:59:32 +0000
ROA not before: Fri 28 Feb 2025 21:59:29 +0000
ROA not after: Sat 19 Apr 2025 21:59:29 +0000
asID: 138915
IP address blocks: 154.90.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93291 (0x16c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:59:29 2025 GMT
Not After : Apr 19 21:59:29 2025 GMT
Subject: CN=67c231c4-0a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:30:18:66:10:fc:02:64:25:b4:43:11:76:
f1:d9:a6:79:d6:57:0e:86:76:54:3b:b6:4c:6c:bd:
97:0f:a2:67:ae:d4:e7:80:c2:5c:a8:a5:8a:88:42:
54:2f:97:ee:eb:4a:33:8d:87:76:c1:67:72:90:8c:
e0:9f:03:2e:04:92:95:4a:98:1c:0f:bb:73:31:4d:
68:ea:31:08:77:7f:15:74:12:6b:b3:35:3c:da:54:
77:e5:97:92:fd:19:bc:94:17:a0:69:d3:cb:67:0b:
74:9d:dd:9f:81:39:71:64:46:94:e0:7f:cc:93:f2:
03:cd:5f:42:9f:62:90:f8:de:70:51:97:96:3d:8b:
74:d3:5e:5d:a5:33:ba:af:47:38:f5:63:ed:bd:30:
a8:dd:9a:2a:13:b4:d9:22:75:b1:ec:97:e5:97:16:
43:c5:92:a5:62:b5:e9:62:72:4e:b4:e0:5e:23:65:
37:10:5d:66:80:02:ce:11:d1:30:ae:cf:b3:13:26:
89:f0:52:29:63:8a:14:d1:bf:dc:85:1b:86:95:30:
41:ea:93:19:5c:bc:96:ab:ed:92:73:9d:f2:ec:de:
04:3c:e3:d5:c9:31:d4:b0:6b:7f:df:92:94:9e:1b:
b2:07:dd:27:7c:4c:50:7d:a0:47:27:36:b2:31:51:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5A:08:EC:34:7C:3E:B8:CD:A4:30:6F:44:A4:8C:96:79:1F:59:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A44D256F61F11EF8F180CA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.48.0/23
Signature Algorithm: sha256WithRSAEncryption
52:ea:f1:08:93:8f:cc:7e:c3:b8:3a:e8:e2:aa:36:07:2c:1b:
e4:ef:b1:a2:ff:a2:49:34:39:e8:4c:38:fd:68:df:e8:d5:8d:
27:f1:37:95:63:a9:ae:ac:40:80:70:df:3e:a8:67:45:e7:bf:
2c:87:e3:2a:61:4c:fd:8e:88:e8:fd:ef:48:77:da:3b:4e:bb:
55:29:95:e4:99:8b:fd:6f:18:9b:1e:fb:07:23:d8:61:9b:54:
19:14:8d:e5:f3:b1:e1:94:f0:b1:16:30:3c:81:26:7c:38:af:
45:99:23:6d:5c:9c:10:8e:66:c5:cd:b9:e0:b4:a6:c4:b7:81:
4e:d9:56:14:58:48:ee:bb:90:a1:2b:7d:4c:10:0b:37:a3:26:
90:87:78:3a:9c:95:db:ae:2d:d3:1d:75:44:7c:f4:9c:4a:49:
b1:bc:47:dd:c8:ca:ab:76:6d:87:8b:d1:0c:62:5e:24:d4:d9:
3a:67:57:f0:c8:e5:6b:8a:4c:b9:d8:65:7c:53:68:f3:f5:14:
d7:1e:6d:0d:85:3a:a8:26:d8:89:13:09:93:bf:35:06:ab:6f:
0e:c0:b0:46:7c:2d:ba:df:ab:50:6d:ec:7d:4e:fc:f5:83:d1:
10:74:67:fd:20:52:da:93:d8:3f:5f:1a:97:de:3f:b0:27:03:
9d:7b:ce:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWxrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjE1OTI5WhcNMjUwNDE5MjE1OTI5WjAYMRYw
FAYDVQQDEw02N2MyMzFjNC0wYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuIowGGYQ/AJkJbRDEXbx2aZ51lcOhnZUO7ZMbL2XD6JnrtTngMJcqKWK
iEJUL5fu60ozjYd2wWdykIzgnwMuBJKVSpgcD7tzMU1o6jEId38VdBJrszU82lR3
5ZeS/Rm8lBegadPLZwt0nd2fgTlxZEaU4H/Mk/IDzV9Cn2KQ+N5wUZeWPYt0015d
pTO6r0c49WPtvTCo3ZoqE7TZInWx7JfllxZDxZKlYrXpYnJOtOBeI2U3EF1mgALO
EdEwrs+zEyaJ8FIpY4oU0b/chRuGlTBB6pMZXLyWq+2Sc53y7N4EPOPVyTHUsGt/
35KUnhuyB90nfExQfaBHJzayMVFW9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJVa
COw0fD64zaQwb0SkjJZ5H1m/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QTQ0RDI1NkY2MUYxMUVGOEYxODBDQTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlowMA0GCSqGSIb3DQEB
CwUAA4IBAQBS6vEIk4/MfsO4OujiqjYHLBvk77Gi/6JJNDnoTDj9aN/o1Y0n8TeV
Y6murECAcN8+qGdF578sh+MqYUz9jojo/e9Id9o7TrtVKZXkmYv9bxibHvsHI9hh
m1QZFI3l87HhlPCxFjA8gSZ8OK9FmSNtXJwQjmbFzbngtKbEt4FO2VYUWEjuu5Ch
K31MEAs3oyaQh3g6nJXbri3THXVEfPScSkmxvEfdyMqrdm2Hi9EMYl4k1Nk6Z1fw
yOVriky52GV8U2jz9RTXHm0NhTqoJtiJEwmTvzUGq28OwLBGfC2636tQbex9Tvz1
g9EQdGf9IFLak9g/XxqX3j+wJwOde85I
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:25 2025 by rpki-client