Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F9D218CF6211EF9DFCED60762E951A.roa
File: 11F9D218CF6211EF9DFCED60762E951A.roa (raw, json)
Hash identifier: 6VAaMkxZlP5xPzVGj9AdgTqawogR3Qyl2QUv4SiF6Jc=
Subject key identifier: 53:CE:3B:41:11:4A:E8:60:8E:21:9B:6A:CD:49:1F:1B:F5:60:B6:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F9D218CF6211EF9DFCED60762E951A.roa
Signing time: Fri 10 Jan 2025 14:49:19 +0000
ROA not before: Fri 10 Jan 2025 14:49:15 +0000
ROA not after: Fri 12 Dec 2025 14:49:15 +0000
asID: 984
IP address blocks: 154.81.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80407 (0x13a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:49:15 2025 GMT
Not After : Dec 12 14:49:15 2025 GMT
Subject: CN=6781336f-72ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:25:e1:ea:84:d6:08:4f:39:5a:4e:02:42:
39:b4:96:31:8f:5d:09:ee:72:bd:26:b8:0d:3c:b6:
d6:f6:f2:ce:6f:04:f6:fc:56:75:36:34:fc:34:0c:
f3:ab:c5:fb:43:3b:ef:cf:1f:7b:ee:d3:e8:94:a3:
39:43:93:75:87:b1:f0:31:65:7e:38:28:ce:10:30:
cd:95:34:b9:74:c8:0a:ac:8f:0b:3a:6a:a6:bc:51:
f3:42:2b:60:e4:8c:02:0b:3c:60:f3:85:39:8d:f0:
af:36:de:33:26:8a:f2:ea:ff:e7:e6:1c:99:2e:da:
ec:0a:ea:c0:f6:79:b7:e9:81:ca:c5:68:2a:ac:dc:
e0:e2:1e:49:44:01:16:36:c2:87:aa:f0:0d:be:94:
c3:2f:e5:43:22:e1:4b:dd:58:38:12:45:de:a0:8d:
2a:fd:15:59:4d:b8:bb:87:91:17:93:28:d0:02:00:
27:5a:84:69:fd:00:d9:66:ea:c4:9f:06:55:29:20:
35:df:2f:ae:e0:85:c2:61:3e:c5:1b:17:8f:bf:2a:
73:20:95:13:26:32:e4:6b:bb:df:c1:88:3d:7f:70:
c8:c2:70:a6:fd:d6:b6:da:78:65:9d:88:62:dd:64:
30:b7:89:29:2e:ae:e8:4a:37:46:a1:d4:34:8e:b8:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:3B:41:11:4A:E8:60:8E:21:9B:6A:CD:49:1F:1B:F5:60:B6:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F9D218CF6211EF9DFCED60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a9:8b:1d:3c:64:ea:cd:75:bf:46:46:1a:b5:24:f6:16:47:
65:48:60:bd:35:36:91:49:b1:fe:e2:72:35:f9:3e:8c:7e:68:
71:47:dd:e8:c8:cb:2b:a5:28:8a:da:b3:75:e2:c8:3c:c8:78:
aa:40:aa:88:da:c0:92:25:e6:4f:7b:16:2e:8c:7d:82:a4:af:
5a:21:df:fc:33:6d:ec:68:5e:17:38:b0:86:15:5a:04:a1:b6:
b2:e0:f5:c5:46:da:bc:1b:f9:c9:e0:c6:61:1a:dd:91:c3:50:
20:92:52:0d:0f:d3:0d:f9:8e:2a:0c:29:a3:2b:2e:c7:01:d0:
98:f9:84:f2:9b:64:1b:fc:34:70:89:f1:35:62:70:0d:c9:65:
6c:7e:77:c0:20:f4:02:53:e8:7c:61:c5:95:5e:18:2e:bc:99:
6d:dd:79:3a:8d:85:8a:e1:6d:c1:a9:99:23:fd:f6:e2:6c:a6:
e5:dc:70:0e:ce:90:80:91:f6:66:71:37:1a:56:10:5b:a6:13:
7e:7f:cf:0c:1c:cf:da:c2:fa:3c:7c:a1:2f:52:8e:f2:86:7a:
f6:0a:95:fc:47:85:d6:91:22:10:11:9a:29:01:f5:f1:1b:f2:
98:aa:93:42:8a:87:b5:dd:b8:4d:c7:f5:1b:51:4b:fe:9d:22:
c8:1b:e0:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAToXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMTQ0OTE1WhcNMjUxMjEyMTQ0OTE1WjAYMRYw
FAYDVQQDEw02NzgxMzM2Zi03MmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxZEl4eqE1ghPOVpOAkI5tJYxj10J7nK9JrgNPLbW9vLObwT2/FZ1NjT8
NAzzq8X7Qzvvzx977tPolKM5Q5N1h7HwMWV+OCjOEDDNlTS5dMgKrI8LOmqmvFHz
Qitg5IwCCzxg84U5jfCvNt4zJory6v/n5hyZLtrsCurA9nm36YHKxWgqrNzg4h5J
RAEWNsKHqvANvpTDL+VDIuFL3Vg4EkXeoI0q/RVZTbi7h5EXkyjQAgAnWoRp/QDZ
ZurEnwZVKSA13y+u4IXCYT7FGxePvypzIJUTJjLka7vfwYg9f3DIwnCm/da22nhl
nYhi3WQwt4kpLq7oSjdGodQ0jrjpcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFPO
O0ERSuhgjiGbas1JHxv1YLbBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUY5RDIxOENGNjIxMUVGOURGQ0VENjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlGPMA0GCSqGSIb3DQEB
CwUAA4IBAQCjqYsdPGTqzXW/RkYatST2FkdlSGC9NTaRSbH+4nI1+T6MfmhxR93o
yMsrpSiK2rN14sg8yHiqQKqI2sCSJeZPexYujH2CpK9aId/8M23saF4XOLCGFVoE
obay4PXFRtq8G/nJ4MZhGt2Rw1AgklIND9MN+Y4qDCmjKy7HAdCY+YTym2Qb/DRw
ifE1YnANyWVsfnfAIPQCU+h8YcWVXhguvJlt3Xk6jYWK4W3BqZkj/fbibKbl3HAO
zpCAkfZmcTcaVhBbphN+f88MHM/awvo8fKEvUo7yhnr2CpX8R4XWkSIQEZopAfXx
G/KYqpNCioe13bhNx/UbUUv+nSLIG+B6
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:59 2025 by rpki-client