Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13307364C26D11EFBEAE767B762E951A.roa
File: 13307364C26D11EFBEAE767B762E951A.roa (raw, json)
Hash identifier: SMlbpI76+7Fyc6TrJWJ+/Ntr0OHg8GfdqN+4H2hX0ms=
Subject key identifier: 5F:14:B3:33:DB:47:FC:3C:DC:96:FE:93:F8:10:F6:A5:26:D9:E8:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012438
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13307364C26D11EFBEAE767B762E951A.roa
Signing time: Wed 25 Dec 2024 03:05:20 +0000
ROA not before: Wed 25 Dec 2024 03:05:17 +0000
ROA not after: Wed 10 Dec 2025 03:05:17 +0000
asID: 984
IP address blocks: 154.211.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74808 (0x12438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:05:17 2024 GMT
Not After : Dec 10 03:05:17 2025 GMT
Subject: CN=676b7670-f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:e9:4a:84:70:38:13:a7:fd:5a:3e:1b:38:
2c:84:fb:a4:92:95:27:a9:7f:a6:09:0c:e3:93:98:
fd:b2:d6:4e:d6:cb:2d:26:6f:f0:10:31:1d:ef:b6:
94:e8:3a:a4:6b:ef:46:4a:c7:1c:8b:83:85:63:e3:
34:0b:88:2d:fa:d6:d8:e9:2a:70:92:66:d8:98:37:
58:de:31:9f:b0:58:ef:7b:6c:34:68:04:ad:f4:69:
79:4d:a2:aa:16:6f:b3:26:f0:7d:3d:89:58:7f:be:
54:be:7a:93:b1:ce:e6:ae:f5:f8:18:c3:a3:4a:3f:
25:c9:d0:8b:cb:1e:a7:ca:24:b7:90:a1:17:22:d0:
f9:bd:d9:c9:d3:60:59:b5:e3:24:51:8a:2f:66:01:
eb:28:cf:62:ef:94:8f:2e:4c:f3:dd:27:42:3c:57:
49:71:51:de:b4:7f:13:59:7d:d8:87:de:f3:3e:b8:
28:ab:e6:68:6e:b3:d6:bf:f4:2f:25:3c:67:bd:a5:
81:22:26:30:a0:6f:13:30:7d:f4:34:f0:ea:a7:05:
8a:18:74:d5:4d:5d:63:05:de:1a:e5:a2:c5:d3:39:
b7:c3:76:1d:41:cd:7a:f3:ce:44:89:f2:ac:0c:33:
4f:fd:49:85:f4:4d:b2:08:67:5a:7c:e3:70:5e:e5:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:B3:33:DB:47:FC:3C:DC:96:FE:93:F8:10:F6:A5:26:D9:E8:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13307364C26D11EFBEAE767B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.168.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7e:88:9d:90:08:96:68:71:33:a1:9c:ed:18:76:78:3b:62:
67:8c:fd:cf:29:bb:84:fc:84:dc:26:6d:46:8a:e2:84:26:80:
9b:a6:1d:c3:36:ac:ad:43:ec:96:9d:56:96:3e:22:46:b2:52:
65:00:46:ae:89:80:c3:9f:c3:1f:38:85:72:89:15:55:85:12:
f0:c5:64:a1:ec:b1:47:ac:91:13:da:31:d2:29:3f:77:c1:33:
bf:ee:de:d2:93:da:99:65:1e:e0:2e:b8:72:a5:f4:ba:b9:09:
0f:ce:13:0f:3d:1d:b2:4e:7d:ba:ec:25:61:7b:6e:30:b1:07:
d2:85:77:a0:34:75:dc:06:69:50:e8:5a:25:24:98:c5:cb:70:
85:d1:4f:54:a4:6a:f4:30:2d:f1:33:bb:d5:57:f6:8e:71:f3:
bd:ce:cb:6a:37:68:47:c0:b0:d9:a0:e0:cd:0b:99:d0:cf:40:
d7:f5:56:4b:58:6a:67:08:a6:bf:bb:25:a2:c3:07:78:88:27:
92:44:2b:3b:f6:45:32:f8:2e:4b:04:96:82:4c:f2:0c:99:62:
51:7d:c3:af:2f:f7:12:93:25:75:83:c0:95:33:10:c2:0a:e3:
b9:71:e4:86:77:3d:e1:d6:c9:49:97:47:47:67:d0:8f:91:d2:
b5:bf:60:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASQ4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDMwNTE3WhcNMjUxMjEwMDMwNTE3WjAYMRYw
FAYDVQQDEw02NzZiNzY3MC1mMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsKrpSoRwOBOn/Vo+GzgshPukkpUnqX+mCQzjk5j9stZO1sstJm/wEDEd
77aU6Dqka+9GSscci4OFY+M0C4gt+tbY6SpwkmbYmDdY3jGfsFjve2w0aASt9Gl5
TaKqFm+zJvB9PYlYf75UvnqTsc7mrvX4GMOjSj8lydCLyx6nyiS3kKEXItD5vdnJ
02BZteMkUYovZgHrKM9i75SPLkzz3SdCPFdJcVHetH8TWX3Yh97zPrgoq+ZobrPW
v/QvJTxnvaWBIiYwoG8TMH30NPDqpwWKGHTVTV1jBd4a5aLF0zm3w3YdQc16885E
ifKsDDNP/UmF9E2yCGdafONwXuXmXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF8U
szPbR/w83Jb+k/gQ9qUm2eglMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMzMwNzM2NEMyNkQxMUVGQkVBRTc2N0I3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtOoMA0GCSqGSIb3DQEB
CwUAA4IBAQBYfoidkAiWaHEzoZztGHZ4O2JnjP3PKbuE/ITcJm1GiuKEJoCbph3D
NqytQ+yWnVaWPiJGslJlAEauiYDDn8MfOIVyiRVVhRLwxWSh7LFHrJET2jHSKT93
wTO/7t7Sk9qZZR7gLrhypfS6uQkPzhMPPR2yTn267CVhe24wsQfShXegNHXcBmlQ
6FolJJjFy3CF0U9UpGr0MC3xM7vVV/aOcfO9zstqN2hHwLDZoODNC5nQz0DX9VZL
WGpnCKa/uyWiwwd4iCeSRCs79kUy+C5LBJaCTPIMmWJRfcOvL/cSkyV1g8CVMxDC
CuO5ceSGdz3h1slJl0dHZ9CPkdK1v2C+
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:05 2025 by rpki-client