Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA974890FFE411EF9D5C6645762E951A.roa
File: AA974890FFE411EF9D5C6645762E951A.roa (raw, json)
Hash identifier: KdVkEqDSkXx2FJ8rq3SWixVk+4W80NsreGncpYAP+/E=
Subject key identifier: 44:51:B6:C8:32:4F:FC:20:39:C6:83:8A:88:8B:FA:ED:D9:09:CD:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01741D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA974890FFE411EF9D5C6645762E951A.roa
Signing time: Thu 13 Mar 2025 08:25:05 +0000
ROA not before: Thu 13 Mar 2025 08:25:01 +0000
ROA not after: Sat 19 Apr 2025 08:25:01 +0000
asID: 202736
IP address blocks: 154.88.53.0/24 maxlen: 24
154.88.54.0/24 maxlen: 24
154.88.56.0/24 maxlen: 24
154.88.57.0/24 maxlen: 24
154.88.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95261 (0x1741d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 13 08:25:01 2025 GMT
Not After : Apr 19 08:25:01 2025 GMT
Subject: CN=67d29661-02b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:98:a9:34:1c:70:df:c0:60:6c:14:25:a5:
dc:8f:12:b3:0e:4e:fa:32:4f:d2:a0:50:2e:5f:35:
59:4e:3c:6e:21:c9:74:10:22:39:8a:d0:15:0f:6f:
16:ff:6d:3f:76:07:f2:ac:53:2e:20:65:54:ba:11:
f3:51:78:25:8c:e8:99:65:be:7c:fc:22:b7:a5:27:
c5:e6:5d:4d:18:e3:b5:e1:39:01:2b:87:31:68:5f:
d5:ac:9c:7e:50:d8:08:2a:85:ab:26:a9:6e:a6:fe:
bd:04:ae:5e:71:53:81:b4:34:d3:c3:0f:18:8f:fb:
ba:48:09:ff:f2:de:9f:d0:e0:5d:c4:b6:a7:d1:06:
c8:d6:21:db:75:6e:a2:8a:8d:11:06:c8:08:74:ec:
5e:88:e5:24:09:5e:fd:64:8a:bd:9f:23:cf:8d:df:
42:c1:03:14:58:aa:93:46:ee:eb:ed:66:0e:2a:6b:
dc:f2:96:2d:3c:70:2c:c0:73:13:5b:8d:04:8b:22:
6b:af:ba:63:5a:5e:d0:5b:b1:41:66:d2:63:0f:54:
99:fe:4c:7e:ba:8e:b5:77:8d:47:e4:e8:fa:55:09:
7a:e3:4b:d5:84:47:7d:e3:46:5a:f1:95:bd:64:c4:
57:b8:5a:58:61:38:28:bc:ea:79:ba:ef:5a:86:67:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:B6:C8:32:4F:FC:20:39:C6:83:8A:88:8B:FA:ED:D9:09:CD:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA974890FFE411EF9D5C6645762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0-154.88.54.255
154.88.56.0-154.88.58.255
Signature Algorithm: sha256WithRSAEncryption
07:ff:bc:00:37:39:1b:e0:67:af:95:9a:56:28:19:2b:80:79:
a4:2f:54:be:24:e2:e9:6b:ad:54:dc:68:0b:d1:20:1b:e0:a0:
48:7d:2c:64:c5:27:1b:b2:10:40:76:85:11:0b:0d:92:96:61:
97:20:28:29:f2:da:16:d1:fb:01:74:c1:91:97:e1:cd:40:08:
c8:98:b5:92:c9:65:c7:8b:89:d4:f2:b6:61:58:85:50:77:06:
e1:11:23:9a:48:ad:21:5d:a3:c8:cb:1a:30:ea:a7:7a:e5:f5:
33:11:20:8f:ea:70:c0:d7:29:62:aa:bb:00:55:74:00:17:07:
b1:1b:05:f8:2c:fb:32:d5:6c:f4:7f:ba:5f:ec:a2:4a:b8:e0:
9b:21:f4:71:bd:62:93:0c:63:6e:60:96:1e:0f:44:fc:ce:55:
c8:68:34:13:7f:e1:88:04:57:c7:19:6b:bc:13:3f:5c:ba:b9:
6a:88:04:aa:1c:bf:a0:6a:df:7c:81:f8:05:8e:c1:a5:d4:31:
38:3a:34:36:da:8c:29:a2:d5:df:2a:1a:7b:fd:d4:b4:da:e2:
e0:61:4a:bc:87:91:08:3d:97:01:4a:46:7f:29:79:14:8b:66:
c7:3b:4b:a1:9b:50:f9:17:37:84:77:03:79:23:b6:33:22:00:
a8:9b:11:40
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAXQdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEzMDgyNTAxWhcNMjUwNDE5MDgyNTAxWjAYMRYw
FAYDVQQDEw02N2QyOTY2MS0wMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuNSYqTQccN/AYGwUJaXcjxKzDk76Mk/SoFAuXzVZTjxuIcl0ECI5itAV
D28W/20/dgfyrFMuIGVUuhHzUXgljOiZZb58/CK3pSfF5l1NGOO14TkBK4cxaF/V
rJx+UNgIKoWrJqlupv69BK5ecVOBtDTTww8Yj/u6SAn/8t6f0OBdxLan0QbI1iHb
dW6iio0RBsgIdOxeiOUkCV79ZIq9nyPPjd9CwQMUWKqTRu7r7WYOKmvc8pYtPHAs
wHMTW40EiyJrr7pjWl7QW7FBZtJjD1SZ/kx+uo61d41H5Oj6VQl640vVhEd940Za
8ZW9ZMRXuFpYYTgovOp5uu9ahmcx8wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFERR
tsgyT/wgOcaDioiL+u3ZCc0iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQTk3NDg5MEZGRTQxMUVGOUQ1QzY2NDU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACaWDUDBACaWDYwDAME
A5pYOAMEAJpYOjANBgkqhkiG9w0BAQsFAAOCAQEAB/+8ADc5G+Bnr5WaVigZK4B5
pC9UviTi6WutVNxoC9EgG+CgSH0sZMUnG7IQQHaFEQsNkpZhlyAoKfLaFtH7AXTB
kZfhzUAIyJi1ksllx4uJ1PK2YViFUHcG4REjmkitIV2jyMsaMOqneuX1MxEgj+pw
wNcpYqq7AFV0ABcHsRsF+Cz7MtVs9H+6X+yiSrjgmyH0cb1ikwxjbmCWHg9E/M5V
yGg0E3/hiARXxxlrvBM/XLq5aogEqhy/oGrffIH4BY7BpdQxODo0NtqMKaLV3yoa
e/3UtNri4GFKvIeRCD2XAUpGfyl5FItmxztLoZtQ+Rc3hHcDeSO2MyIAqJsRQA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:10:01 2025 by rpki-client