Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE550C18DA6111EF8431B74C762E951A.roa
File: AE550C18DA6111EF8431B74C762E951A.roa (raw, json)
Hash identifier: oYXiLhqbo9VShROWfvQCtfiVKWa/rhJD9mmygxT36ss=
Subject key identifier: 13:42:CE:B7:31:38:CC:2C:4B:89:5C:A8:DE:8A:31:A3:A4:EC:4F:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014858
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE550C18DA6111EF8431B74C762E951A.roa
Signing time: Fri 24 Jan 2025 14:44:14 +0000
ROA not before: Fri 24 Jan 2025 14:44:11 +0000
ROA not after: Sat 01 Mar 2025 14:44:11 +0000
asID: 44559
IP address blocks: 154.81.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84056 (0x14858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:44:11 2025 GMT
Not After : Mar 1 14:44:11 2025 GMT
Subject: CN=6793a73e-2ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:e1:41:ef:70:f7:25:dc:f0:a8:5d:fa:91:
5c:52:ae:28:01:39:17:64:f2:33:20:84:c2:50:07:
39:7b:0d:a8:7b:62:ae:d4:49:40:d1:77:2f:83:a3:
cc:b9:cd:07:6d:91:2e:91:92:d0:17:e8:0c:3c:31:
a9:b9:cf:87:7d:4a:26:f7:f6:7e:f0:fd:39:8f:8d:
1d:67:75:90:8f:c7:65:80:f4:19:54:9d:75:0b:7a:
c3:ca:aa:da:92:69:a0:f6:56:12:f2:03:0a:2e:f8:
95:13:89:8b:ed:03:8c:48:3f:2b:b4:4a:2f:d7:8b:
d6:26:2f:91:ef:35:ba:6d:08:03:38:02:e1:06:d3:
30:3d:d0:08:7d:a3:14:c7:ab:d0:6a:98:50:2d:c2:
2d:6b:e7:83:1d:ad:84:50:6b:d1:14:9c:ce:1c:d4:
55:95:ff:d7:d1:ec:d5:c7:03:5b:ed:63:97:e6:3f:
31:f5:65:90:f2:c1:6c:f2:10:b4:b9:88:12:d5:71:
05:d1:64:4d:e0:49:6c:f6:c5:78:5e:9c:29:58:b7:
e4:f6:f3:ba:92:c0:24:77:9d:7b:7f:bd:35:b8:b0:
2c:59:e9:a7:6f:5c:ce:1a:f4:42:c4:7a:5d:ee:2b:
b4:51:2c:dd:5d:b4:9f:98:b7:8f:de:1e:3d:38:fc:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:42:CE:B7:31:38:CC:2C:4B:89:5C:A8:DE:8A:31:A3:A4:EC:4F:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE550C18DA6111EF8431B74C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
31:eb:40:8d:fd:3c:fa:48:6a:64:b9:f1:76:9b:68:cf:ef:73:
4d:ff:76:72:63:49:4a:b6:ad:70:f6:f7:02:81:51:51:a3:f2:
1a:d5:1b:35:31:d3:f6:f2:7b:ad:cb:0e:7a:9e:39:97:3b:8b:
c3:60:b2:df:3d:94:f8:e9:30:5f:99:79:0f:35:1a:9f:c8:e7:
08:ef:5a:f7:ca:a8:cf:ae:7a:a3:0e:ba:a9:13:ad:96:1c:b7:
f6:ca:78:72:25:be:dc:66:0a:48:0a:71:73:cd:48:1d:08:32:
6e:19:09:0b:0b:04:68:3f:f5:b3:93:7c:aa:f6:e0:6a:47:c6:
e3:fd:c0:37:64:e7:1e:13:25:55:79:40:49:6d:bd:e5:a4:6a:
cf:ab:a1:9d:f2:2e:61:57:75:4d:f9:13:be:7b:73:fe:73:a1:
9e:e1:6c:7f:4f:6e:e7:51:3a:1c:08:e3:b0:4d:e9:3a:a6:f2:
e9:1c:15:91:24:35:ec:30:18:f1:99:da:d0:82:b7:94:74:11:
69:ed:6d:81:e5:37:58:ca:9e:6a:d9:e7:16:ee:81:a0:a6:7f:
61:40:fd:7a:df:dd:5b:37:82:6a:6f:87:e8:57:3a:4d:52:fb:
8c:34:55:3c:47:69:64:8a:cf:7b:94:9b:24:51:8c:d2:18:98:
46:ca:8b:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUhYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQ0NDExWhcNMjUwMzAxMTQ0NDExWjAYMRYw
FAYDVQQDEw02NzkzYTczZS0yZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApkbhQe9w9yXc8Khd+pFcUq4oATkXZPIzIITCUAc5ew2oe2Ku1ElA0Xcv
g6PMuc0HbZEukZLQF+gMPDGpuc+HfUom9/Z+8P05j40dZ3WQj8dlgPQZVJ11C3rD
yqrakmmg9lYS8gMKLviVE4mL7QOMSD8rtEov14vWJi+R7zW6bQgDOALhBtMwPdAI
faMUx6vQaphQLcIta+eDHa2EUGvRFJzOHNRVlf/X0ezVxwNb7WOX5j8x9WWQ8sFs
8hC0uYgS1XEF0WRN4Els9sV4XpwpWLfk9vO6ksAkd517f701uLAsWemnb1zOGvRC
xHpd7iu0USzdXbSfmLeP3h49OPwwiwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBNC
zrcxOMwsS4lcqN6KMaOk7E8FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRTU1MEMxOERBNjExMUVGODQzMUI3NEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlE0MA0GCSqGSIb3DQEB
CwUAA4IBAQAx60CN/Tz6SGpkufF2m2jP73NN/3ZyY0lKtq1w9vcCgVFRo/Ia1Rs1
MdP28nutyw56njmXO4vDYLLfPZT46TBfmXkPNRqfyOcI71r3yqjPrnqjDrqpE62W
HLf2ynhyJb7cZgpICnFzzUgdCDJuGQkLCwRoP/Wzk3yq9uBqR8bj/cA3ZOceEyVV
eUBJbb3lpGrPq6Gd8i5hV3VN+RO+e3P+c6Ge4Wx/T27nUTocCOOwTek6pvLpHBWR
JDXsMBjxmdrQgreUdBFp7W2B5TdYyp5q2ecW7oGgpn9hQP16391bN4Jqb4foVzpN
UvuMNFU8R2lkis97lJskUYzSGJhGyouF
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:36:05 2025 by rpki-client