Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0718CF14C41511EF910F6587762E951A.roa
File: 0718CF14C41511EF910F6587762E951A.roa (raw, json)
Hash identifier: f7sIV4/74jc6xBPXdz+IOyYS6WnLnZENHyUraMVc7p8=
Subject key identifier: 29:AA:91:44:73:47:19:02:65:3A:A8:29:F4:AB:7C:CB:21:DC:EE:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012951
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0718CF14C41511EF910F6587762E951A.roa
Signing time: Fri 27 Dec 2024 05:40:07 +0000
ROA not before: Fri 27 Dec 2024 05:40:02 +0000
ROA not after: Fri 12 Dec 2025 05:40:02 +0000
asID: 984
IP address blocks: 154.196.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76113 (0x12951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:40:02 2024 GMT
Not After : Dec 12 05:40:02 2025 GMT
Subject: CN=676e3db6-b5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:49:b2:94:d7:26:04:27:cc:3d:69:85:84:
0a:47:0f:f7:85:c8:eb:7a:03:41:68:fb:ad:1c:0c:
e3:4e:7f:1b:51:6f:10:64:2f:64:da:15:ea:13:99:
41:db:0f:aa:0b:68:c5:38:e4:ba:f0:ac:56:11:bc:
35:9a:6c:a7:a5:80:c7:9d:7c:b2:02:fd:d4:7d:c6:
77:68:58:ed:1a:29:e8:2f:9c:32:68:12:51:de:f4:
9b:4e:9b:56:8e:27:88:d2:67:00:ca:21:a4:ce:ba:
24:a7:8f:62:92:fc:23:7c:97:8e:c6:56:59:e4:f5:
bc:64:35:77:4d:0c:2f:92:26:1e:9d:6d:c4:e6:ba:
8c:30:f3:4a:65:59:9b:52:1e:2b:36:7c:53:96:64:
92:bc:b6:ef:b2:2f:a6:57:dd:c4:8d:49:3d:5e:2f:
ad:36:1c:6d:3d:ab:21:13:25:9a:84:14:9f:02:7f:
82:5a:1d:87:5f:08:64:27:77:e9:43:57:f0:ce:69:
ee:3b:6a:20:c4:bb:2c:b3:5b:f9:5e:cd:f7:92:b3:
38:00:ac:ba:84:a3:6e:72:d7:d7:2e:9b:a7:fe:7e:
66:d3:b7:3f:96:21:72:5b:d9:7d:8d:95:27:95:fe:
87:6c:da:a3:c3:1e:d8:62:f1:5e:88:36:d0:c5:de:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:91:44:73:47:19:02:65:3A:A8:29:F4:AB:7C:CB:21:DC:EE:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0718CF14C41511EF910F6587762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.242.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:ed:75:c9:d1:30:1b:fc:d8:2f:73:48:63:c4:67:72:79:4e:
0f:d9:43:ca:d8:55:a4:b5:a2:d6:6e:b9:72:4c:75:de:c7:be:
ed:6b:1e:57:24:65:b4:e5:60:43:d8:92:3a:af:d9:ed:84:f2:
8a:b8:c6:6d:a3:79:47:6c:ea:49:7e:34:12:69:aa:d2:01:d1:
95:11:42:3e:8f:3d:b0:bf:65:9c:3f:4a:77:30:8f:70:8f:71:
71:35:0e:d9:99:52:1e:83:1c:1e:d0:c6:8e:c7:ea:25:5d:01:
da:5b:ef:de:6e:99:d1:30:7a:c2:ce:05:f1:e2:42:6f:f3:bc:
62:76:30:d5:e2:f6:f1:3e:97:f6:33:6a:99:7f:f4:12:93:35:
f7:d9:27:64:02:ae:9e:f5:ac:06:56:95:90:cb:fa:bf:f7:ba:
2f:1a:28:66:15:e2:aa:9d:fc:5d:d0:79:e9:1c:cf:09:63:94:
32:fb:ff:5f:48:12:55:e9:e8:d4:b1:f8:04:39:ee:07:5f:70:
bd:ec:fc:55:08:2b:1a:94:fd:8f:fc:83:d4:3f:19:b4:15:c4:
fa:5f:92:5e:f9:97:de:c3:c8:5e:7f:7b:2c:40:28:32:ef:10:
a7:e6:91:22:ba:68:6c:80:39:7b:c9:82:3f:82:22:8e:68:35:
e9:9f:4e:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASlRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDU0MDAyWhcNMjUxMjEyMDU0MDAyWjAYMRYw
FAYDVQQDEw02NzZlM2RiNi1iNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3YVJspTXJgQnzD1phYQKRw/3hcjregNBaPutHAzjTn8bUW8QZC9k2hXq
E5lB2w+qC2jFOOS68KxWEbw1mmynpYDHnXyyAv3UfcZ3aFjtGinoL5wyaBJR3vSb
TptWjieI0mcAyiGkzrokp49ikvwjfJeOxlZZ5PW8ZDV3TQwvkiYenW3E5rqMMPNK
ZVmbUh4rNnxTlmSSvLbvsi+mV93EjUk9Xi+tNhxtPashEyWahBSfAn+CWh2HXwhk
J3fpQ1fwzmnuO2ogxLsss1v5Xs33krM4AKy6hKNuctfXLpun/n5m07c/liFyW9l9
jZUnlf6HbNqjwx7YYvFeiDbQxd6wiQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCmq
kURzRxkCZTqoKfSrfMsh3O6+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzE4Q0YxNEM0MTUxMUVGOTEwRjY1ODc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsTyMA0GCSqGSIb3DQEB
CwUAA4IBAQDS7XXJ0TAb/Ngvc0hjxGdyeU4P2UPK2FWktaLWbrlyTHXex77tax5X
JGW05WBD2JI6r9nthPKKuMZto3lHbOpJfjQSaarSAdGVEUI+jz2wv2WcP0p3MI9w
j3FxNQ7ZmVIegxwe0MaOx+olXQHaW+/ebpnRMHrCzgXx4kJv87xidjDV4vbxPpf2
M2qZf/QSkzX32SdkAq6e9awGVpWQy/q/97ovGihmFeKqnfxd0HnpHM8JY5Qy+/9f
SBJV6ejUsfgEOe4HX3C97PxVCCsalP2P/IPUPxm0FcT6X5Je+Zfew8hef3ssQCgy
7xCn5pEiumhsgDl7yYI/giKOaDXpn06Y
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:06:47 2025 by rpki-client