Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105D2FA0C3D111EFADC71746762E951A.roa
File: 105D2FA0C3D111EFADC71746762E951A.roa (raw, json)
Hash identifier: jur/T4em3QsP6XNO/+PeH7gq5R2tzVAoAXAX19OgJbQ=
Subject key identifier: 5D:80:4A:BF:54:6F:9E:F7:EB:23:11:B2:93:9F:5D:89:71:E5:11:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012840
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105D2FA0C3D111EFADC71746762E951A.roa
Signing time: Thu 26 Dec 2024 21:33:36 +0000
ROA not before: Thu 26 Dec 2024 21:33:32 +0000
ROA not after: Sun 12 Dec 2027 21:33:32 +0000
asID: 17561
IP address blocks: 154.83.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75840 (0x12840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:33:32 2024 GMT
Not After : Dec 12 21:33:32 2027 GMT
Subject: CN=676dcbb0-bfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:1b:65:38:9e:4c:e7:17:a4:0e:0a:d1:c9:
7d:17:54:2a:6b:7e:ec:5e:94:75:b4:61:00:be:cc:
46:8a:90:d8:45:a7:da:1d:b8:bc:ce:57:55:b4:c9:
a7:55:00:be:03:78:4e:29:36:ca:9c:64:28:f8:45:
ec:d4:38:d5:98:e0:88:96:bb:73:79:2f:87:f7:93:
f9:f8:57:1c:b2:f3:33:3f:97:4f:f0:4d:4c:06:bd:
98:a8:d3:6c:1b:d6:dc:a9:d2:72:b5:3d:aa:1e:9f:
23:90:62:3b:d8:ab:d9:41:82:5a:d8:d1:c6:e4:30:
56:b3:e0:d4:7d:6d:78:ad:c7:49:5a:ff:fa:8c:cf:
2d:9e:4f:e2:b6:bb:30:75:90:70:87:ab:d2:e9:07:
fd:a0:4b:ed:17:df:8e:ea:ab:35:3d:96:d9:bc:e9:
f7:b6:aa:cd:53:a9:61:77:65:24:38:84:1e:7d:20:
6b:24:84:d9:8b:3c:94:66:f1:f6:b3:3c:75:dd:2d:
df:2d:5b:6b:e8:15:19:78:31:b1:52:fc:50:72:35:
45:a5:91:21:2c:ee:17:4b:86:95:0e:5d:84:9e:4a:
74:3a:8d:6a:17:ba:cb:88:9a:4a:a5:b3:31:2a:85:
30:77:ec:b6:27:99:32:9c:e5:f5:23:72:e2:47:39:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:80:4A:BF:54:6F:9E:F7:EB:23:11:B2:93:9F:5D:89:71:E5:11:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105D2FA0C3D111EFADC71746762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2f:11:39:96:7e:36:bb:6e:43:95:38:ca:45:bd:c8:9b:90:
39:02:ff:a8:18:68:bd:57:60:c4:fb:f6:08:e2:09:e6:4c:4f:
6d:80:50:6c:db:b7:34:12:c4:91:ba:70:d4:ec:9b:0d:33:34:
24:d6:86:a2:76:5b:c4:4d:8f:4d:88:b5:d3:dd:33:aa:1e:05:
7f:69:46:af:c9:2c:40:75:cd:b9:f4:3a:ec:05:26:cf:f3:5b:
65:93:bc:17:3f:00:b2:1d:f3:e2:e9:c3:b8:1d:a4:5f:7a:54:
25:2c:9b:28:d7:8a:f3:f3:6b:36:b4:b9:71:66:ec:5d:89:e6:
89:3e:05:28:6e:c9:c3:b6:33:a0:14:c9:c3:e2:0b:04:51:73:
99:05:9d:3d:bd:31:16:02:62:7a:27:80:10:96:b3:2b:c4:fd:
c2:0b:46:ce:7b:fd:ad:8e:61:99:af:77:08:20:0e:c4:43:be:
da:fe:14:c6:62:c1:27:1a:8f:95:2a:68:45:b0:88:a0:e9:ce:
ef:dd:73:19:11:8a:eb:d4:3e:da:d1:7f:2a:e9:85:c3:71:d8:
74:c5:77:d5:3d:0e:ed:27:4b:a3:c0:87:62:95:fd:c9:a4:56:
af:5d:a8:9e:9a:9f:3a:8f:3a:fc:cc:d3:5a:48:78:29:cf:25:
4a:f0:94:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAShAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjEzMzMyWhcNMjcxMjEyMjEzMzMyWjAYMRYw
FAYDVQQDEw02NzZkY2JiMC1iZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAubsbZTieTOcXpA4K0cl9F1Qqa37sXpR1tGEAvsxGipDYRafaHbi8zldV
tMmnVQC+A3hOKTbKnGQo+EXs1DjVmOCIlrtzeS+H95P5+FccsvMzP5dP8E1MBr2Y
qNNsG9bcqdJytT2qHp8jkGI72KvZQYJa2NHG5DBWs+DUfW14rcdJWv/6jM8tnk/i
trswdZBwh6vS6Qf9oEvtF9+O6qs1PZbZvOn3tqrNU6lhd2UkOIQefSBrJITZizyU
ZvH2szx13S3fLVtr6BUZeDGxUvxQcjVFpZEhLO4XS4aVDl2Enkp0Oo1qF7rLiJpK
pbMxKoUwd+y2J5kynOX1I3LiRznPjwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF2A
Sr9Ub5736yMRspOfXYlx5RGYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMDVEMkZBMEMzRDExMUVGQURDNzE3NDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlO2MA0GCSqGSIb3DQEB
CwUAA4IBAQByLxE5ln42u25DlTjKRb3Im5A5Av+oGGi9V2DE+/YI4gnmTE9tgFBs
27c0EsSRunDU7JsNMzQk1oaidlvETY9NiLXT3TOqHgV/aUavySxAdc259DrsBSbP
81tlk7wXPwCyHfPi6cO4HaRfelQlLJso14rz82s2tLlxZuxdieaJPgUobsnDtjOg
FMnD4gsEUXOZBZ09vTEWAmJ6J4AQlrMrxP3CC0bOe/2tjmGZr3cIIA7EQ77a/hTG
YsEnGo+VKmhFsIig6c7v3XMZEYrr1D7a0X8q6YXDcdh0xXfVPQ7tJ0ujwIdilf3J
pFavXaiemp86jzr8zNNaSHgpzyVK8JSB
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:57 2025 by rpki-client