Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EDEC13CC27611EF9011D7B6762E951A.roa
File: 4EDEC13CC27611EF9011D7B6762E951A.roa (raw, json)
Hash identifier: wUHR3pzXNc8bUbd0pmjzJEgGaxRx7dNErHsG4krDWGA=
Subject key identifier: 03:30:DE:D3:89:E6:0B:A9:B3:CE:2C:E0:3A:E4:6B:55:FA:D1:AA:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01249E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EDEC13CC27611EF9011D7B6762E951A.roa
Signing time: Wed 25 Dec 2024 04:11:26 +0000
ROA not before: Wed 25 Dec 2024 04:11:22 +0000
ROA not after: Wed 10 Dec 2025 04:11:22 +0000
asID: 984
IP address blocks: 154.211.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74910 (0x1249e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:11:22 2024 GMT
Not After : Dec 10 04:11:22 2025 GMT
Subject: CN=676b85ee-faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:a5:b9:27:1f:b0:8f:db:21:d3:4c:87:3c:
46:82:4a:89:1c:54:5f:75:00:ef:80:07:70:a9:0d:
47:f3:a3:4e:9f:8f:7c:ec:dd:00:df:8c:8d:31:d8:
bd:e9:fe:40:b9:fb:80:79:36:4d:f8:b4:ca:ff:5f:
97:52:65:2e:3b:d4:a8:54:7e:72:3b:6e:a2:a1:b0:
25:7a:1a:a9:0f:da:93:97:89:ae:86:8b:06:6d:f3:
61:25:a0:c2:cb:15:a3:30:f3:4b:b0:6a:c3:03:e5:
1b:94:7a:62:ed:bc:2c:21:ef:48:b8:41:7e:fe:cd:
10:13:c7:ed:56:7f:0c:f2:8b:64:6a:94:64:dd:f6:
7f:a6:da:87:74:68:63:e8:f6:e8:19:35:f6:23:41:
e5:b4:82:2c:fc:71:3d:cb:95:f4:12:ac:ce:e1:ae:
b1:7b:a2:db:54:9d:8f:e5:60:2a:a2:b4:e9:d3:51:
22:51:3a:59:f2:5e:d2:d4:4f:ef:b5:c8:f4:ad:b9:
ab:86:70:88:42:ae:8a:2e:97:bb:a2:9b:c6:e3:23:
7c:d8:41:53:28:0e:4a:b4:f5:eb:89:76:0a:71:13:
bd:b1:9f:17:94:54:6c:be:47:f9:49:56:4d:e7:d1:
74:5f:61:e4:bd:e7:36:57:e0:bd:ab:41:b8:61:4d:
55:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:DE:D3:89:E6:0B:A9:B3:CE:2C:E0:3A:E4:6B:55:FA:D1:AA:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EDEC13CC27611EF9011D7B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.236.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7d:0a:ce:22:75:9f:5a:8c:36:18:e2:d9:e0:e2:18:1c:3b:
50:29:b5:e8:d5:df:4c:48:47:ab:1b:13:8e:55:00:8c:81:31:
6c:5e:08:f9:10:cb:2c:0b:97:03:ab:0b:f8:b8:92:42:22:be:
9e:f3:02:e9:19:12:38:25:a3:ed:6e:db:bf:42:97:72:db:cd:
38:65:db:cc:22:1e:ed:e9:58:5b:ac:4c:ed:65:6d:50:25:72:
0a:b0:36:89:4e:e5:1e:e0:e6:5a:ec:dc:7f:e8:af:99:9b:64:
de:7c:96:a1:c5:95:5e:45:8d:9d:68:64:8b:8b:af:b4:0e:96:
d4:2d:8a:d4:db:9b:c3:ac:c1:2c:34:75:29:ff:90:92:f5:ca:
41:b2:96:39:22:cf:8e:29:98:1c:ff:13:e6:3b:39:b2:0f:c5:
2c:bb:63:ff:8b:f5:f7:64:f5:be:86:26:34:97:8e:bc:e0:9b:
f0:d3:f6:ac:3c:c2:b7:46:c0:d9:63:e3:34:b1:ca:61:2a:8e:
0e:bb:c4:8e:96:4d:97:5e:b3:f2:73:15:fb:90:3f:ef:ec:59:
92:a2:80:c3:07:68:95:8c:eb:f5:91:37:07:63:8d:7f:1e:b5:
e0:3f:e2:2e:93:c3:e5:44:52:aa:cc:d3:30:2d:26:2b:75:e3:
8d:66:75:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASSeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDQxMTIyWhcNMjUxMjEwMDQxMTIyWjAYMRYw
FAYDVQQDEw02NzZiODVlZS1mYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvHqluScfsI/bIdNMhzxGgkqJHFRfdQDvgAdwqQ1H86NOn4987N0A34yN
Mdi96f5AufuAeTZN+LTK/1+XUmUuO9SoVH5yO26iobAlehqpD9qTl4muhosGbfNh
JaDCyxWjMPNLsGrDA+UblHpi7bwsIe9IuEF+/s0QE8ftVn8M8otkapRk3fZ/ptqH
dGhj6PboGTX2I0HltIIs/HE9y5X0EqzO4a6xe6LbVJ2P5WAqorTp01EiUTpZ8l7S
1E/vtcj0rbmrhnCIQq6KLpe7opvG4yN82EFTKA5KtPXriXYKcRO9sZ8XlFRsvkf5
SVZN59F0X2Hkvec2V+C9q0G4YU1VDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAMw
3tOJ5gups84s4Drka1X60aodMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RURFQzEzQ0MyNzYxMUVGOTAxMUQ3QjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPsMA0GCSqGSIb3DQEB
CwUAA4IBAQAgfQrOInWfWow2GOLZ4OIYHDtQKbXo1d9MSEerGxOOVQCMgTFsXgj5
EMssC5cDqwv4uJJCIr6e8wLpGRI4JaPtbtu/Qpdy2804ZdvMIh7t6VhbrEztZW1Q
JXIKsDaJTuUe4OZa7Nx/6K+Zm2TefJahxZVeRY2daGSLi6+0DpbULYrU25vDrMEs
NHUp/5CS9cpBspY5Is+OKZgc/xPmOzmyD8Usu2P/i/X3ZPW+hiY0l4684Jvw0/as
PMK3RsDZY+M0scphKo4Ou8SOlk2XXrPycxX7kD/v7FmSooDDB2iVjOv1kTcHY41/
HrXgP+Iuk8PlRFKqzNMwLSYrdeONZnXa
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:37 2025 by rpki-client