Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5836884CDFEE11EF84C609BA762E951A.roa
File: 5836884CDFEE11EF84C609BA762E951A.roa (raw, json)
Hash identifier: zYw0bta5mTkNyo2r2QQ05kcueR4SaKFotKanCABuNXY=
Subject key identifier: 12:F3:D0:CE:05:74:D7:C7:63:F1:E5:FB:56:1E:30:6C:10:47:9F:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5836884CDFEE11EF84C609BA762E951A.roa
Signing time: Fri 31 Jan 2025 16:13:45 +0000
ROA not before: Fri 31 Jan 2025 16:13:41 +0000
ROA not after: Sat 03 Jan 2026 16:13:41 +0000
asID: 40065
IP address blocks: 154.88.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85523 (0x14e13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 16:13:41 2025 GMT
Not After : Jan 3 16:13:41 2026 GMT
Subject: CN=679cf6b9-cb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:7c:e4:7e:e5:14:f3:cc:bd:5f:c6:f8:02:
82:17:53:02:67:e2:7e:ad:fa:7b:17:a3:d1:fe:ef:
f5:b2:73:5d:a0:ee:46:9e:44:d1:da:3e:5a:fc:05:
fe:61:52:4d:3a:83:91:0d:bd:65:ee:91:95:7b:23:
5b:1e:00:90:2d:6f:28:41:57:ed:5d:6a:8d:57:ff:
fe:aa:79:a6:f8:af:c1:5b:70:20:39:57:53:9b:ff:
b9:64:47:39:c9:52:87:78:5c:62:8e:69:c8:1b:be:
f0:cb:2f:2c:96:9f:c0:5d:85:f3:c5:7f:e1:37:8a:
45:98:41:ba:ba:e2:10:59:f7:ba:c3:80:3c:bf:82:
84:d6:b9:c2:1f:6d:ea:7a:4d:71:44:47:0d:1a:7d:
94:a0:c1:d8:da:93:b3:9e:63:9f:f8:ab:bf:d4:09:
b1:88:ce:8a:14:98:2a:7f:0b:7f:75:13:72:94:e5:
41:bf:e1:ef:15:56:db:29:a8:af:8a:d2:d9:36:f1:
10:d5:a8:4c:47:eb:de:2f:49:11:c7:6f:38:11:b7:
1e:39:50:23:62:60:6b:f1:0c:f8:52:e7:1b:33:86:
7f:a4:32:13:41:80:cf:e1:da:5b:4c:47:43:04:69:
ad:35:d1:bb:43:ee:d5:63:63:27:89:a2:cc:27:60:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:D0:CE:05:74:D7:C7:63:F1:E5:FB:56:1E:30:6C:10:47:9F:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5836884CDFEE11EF84C609BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:62:81:bf:41:94:34:61:a3:2e:e8:a1:aa:28:19:1f:96:5c:
74:37:55:35:2e:ff:39:e9:3b:ee:02:63:84:76:a2:6f:2f:35:
2d:a3:fd:56:9f:5f:f7:81:ae:38:cd:68:21:6e:90:d3:c8:0e:
5b:05:a1:4d:67:95:b2:78:da:1c:df:87:a8:b6:29:31:4b:f6:
ca:43:00:ff:8d:63:b0:72:d9:80:87:2d:6d:de:51:59:a5:23:
31:d5:04:97:51:c0:d0:bc:c7:d2:5c:a1:12:f1:5a:ec:9f:35:
d1:b6:f4:f5:41:39:1c:eb:6f:a3:df:88:52:ce:ba:d8:a6:41:
a6:71:65:07:f9:05:b7:d0:89:78:c1:1c:fe:0d:42:98:9d:50:
be:b3:8e:f0:de:5b:38:b7:c9:87:91:4b:f1:76:22:bd:20:d2:
d2:27:65:5b:4d:c3:6c:3b:01:ac:48:de:e4:d2:f4:c7:f4:ca:
37:f0:b6:09:33:e3:b9:a3:78:b5:54:7c:6f:49:67:82:7e:f6:
e7:b9:da:3b:82:25:24:26:5b:b0:af:fa:2a:0b:de:42:33:92:
61:e1:99:7c:54:19:b5:d4:c3:47:72:5a:6a:4a:32:de:ad:1b:
50:0f:1b:4d:04:a7:23:eb:14:fd:89:58:7e:ab:c7:da:c3:2f:
7b:09:74:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU4TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTYxMzQxWhcNMjYwMTAzMTYxMzQxWjAYMRYw
FAYDVQQDEw02NzljZjZiOS1jYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4IR85H7lFPPMvV/G+AKCF1MCZ+J+rfp7F6PR/u/1snNdoO5GnkTR2j5a
/AX+YVJNOoORDb1l7pGVeyNbHgCQLW8oQVftXWqNV//+qnmm+K/BW3AgOVdTm/+5
ZEc5yVKHeFxijmnIG77wyy8slp/AXYXzxX/hN4pFmEG6uuIQWfe6w4A8v4KE1rnC
H23qek1xREcNGn2UoMHY2pOznmOf+Ku/1AmxiM6KFJgqfwt/dRNylOVBv+HvFVbb
KaivitLZNvEQ1ahMR+veL0kRx284EbceOVAjYmBr8Qz4UucbM4Z/pDITQYDP4dpb
TEdDBGmtNdG7Q+7VY2MniaLMJ2BLowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBLz
0M4FdNfHY/Hl+1YeMGwQR58FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODM2ODg0Q0RGRUUxMUVGODRDNjA5QkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlgEMA0GCSqGSIb3DQEB
CwUAA4IBAQAdYoG/QZQ0YaMu6KGqKBkfllx0N1U1Lv856TvuAmOEdqJvLzUto/1W
n1/3ga44zWghbpDTyA5bBaFNZ5WyeNoc34eotikxS/bKQwD/jWOwctmAhy1t3lFZ
pSMx1QSXUcDQvMfSXKES8VrsnzXRtvT1QTkc62+j34hSzrrYpkGmcWUH+QW30Il4
wRz+DUKYnVC+s47w3ls4t8mHkUvxdiK9INLSJ2VbTcNsOwGsSN7k0vTH9Mo38LYJ
M+O5o3i1VHxvSWeCfvbnudo7giUkJluwr/oqC95CM5Jh4Zl8VBm11MNHclpqSjLe
rRtQDxtNBKcj6xT9iVh+q8fawy97CXRW
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:28 2025 by rpki-client