Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1630E5E6C0C711EFAB9BE064762E951A.roa
File: 1630E5E6C0C711EFAB9BE064762E951A.roa (raw, json)
Hash identifier: cXSGNivhzCh89C/eKhqCk4ZiwC2XcaLzpFIHKBGyLwY=
Subject key identifier: 47:0C:61:8D:65:3D:C4:CC:8A:C2:F7:F0:D8:64:89:DA:29:73:2D:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1630E5E6C0C711EFAB9BE064762E951A.roa
Signing time: Mon 23 Dec 2024 00:44:37 +0000
ROA not before: Mon 23 Dec 2024 00:00:34 +0000
ROA not after: Wed 10 Dec 2025 00:00:34 +0000
asID: 984
IP address blocks: 154.82.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73154 (0x11dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 00:00:34 2024 GMT
Not After : Dec 10 00:00:34 2025 GMT
Subject: CN=6768b275-49e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:22:40:f0:dc:8b:22:0c:e8:ea:65:58:38:
e1:8d:e2:6d:bf:56:61:ea:ea:cb:c7:4a:8e:48:fb:
16:3b:db:ca:e0:9c:15:39:08:68:71:24:8a:22:d4:
bd:54:16:74:a3:d0:28:1f:f8:73:36:41:fd:69:78:
24:9b:a7:e6:f5:38:bf:5b:0a:fe:b6:61:47:f9:70:
77:3c:0c:06:b9:58:40:c3:03:c8:b7:45:2c:63:07:
12:b3:ee:9f:86:4a:07:d4:06:98:ff:90:12:cf:a0:
03:9d:64:f8:32:24:4d:df:ee:6f:e1:a0:a2:33:4c:
82:ad:c3:0d:8f:90:e1:f9:34:ac:4e:4a:e7:78:a7:
16:13:33:69:29:91:b6:f1:1d:0f:de:ce:36:57:58:
63:2e:e7:0c:1b:4c:2a:f8:f3:82:6c:cd:82:8c:cd:
d7:36:3c:f2:4c:23:5d:a7:92:b4:6c:0d:f7:7b:da:
b9:43:89:96:95:59:4c:d9:a7:b8:9d:96:e4:55:b5:
de:31:e5:dc:dd:cd:50:25:fd:3b:0d:63:f4:9e:5f:
7d:7d:71:76:53:18:f3:8b:58:bd:a7:47:07:d5:01:
61:1c:b8:e5:e7:78:10:21:ce:dc:0c:86:df:de:a2:
60:6d:bf:23:6e:a0:0f:26:98:21:0b:1a:bb:d2:45:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0C:61:8D:65:3D:C4:CC:8A:C2:F7:F0:D8:64:89:DA:29:73:2D:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1630E5E6C0C711EFAB9BE064762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.212.0/24
Signature Algorithm: sha256WithRSAEncryption
19:af:94:4f:da:70:45:05:29:1c:7b:30:e6:ec:bc:a5:a9:23:
d4:4f:bc:65:cc:d6:cd:33:78:bf:df:1d:c7:a2:55:e7:a8:28:
05:4a:1d:d9:08:67:b3:44:b8:3f:83:9b:96:7c:97:63:04:1a:
dc:08:e8:76:0d:7c:c3:9d:77:5a:5f:b8:e8:fb:3d:2c:b8:bf:
29:2e:f3:3e:bb:73:54:07:e6:99:ca:bc:89:7e:c6:d2:fb:6a:
d7:1e:b7:11:31:30:0d:e2:1e:36:ed:df:fd:4e:e7:b5:4b:f7:
cf:a8:8e:2b:7f:54:a3:a1:e5:d1:66:36:6b:a7:e3:f4:04:7d:
05:02:9c:04:7d:31:dc:8a:81:8f:9b:06:34:27:e3:bd:29:7e:
c0:93:87:36:e0:7c:2a:b0:be:f8:66:a3:aa:77:81:b5:4e:72:
3d:35:fe:48:71:b8:14:96:4d:a3:b0:49:fa:21:89:79:a7:fc:
93:a9:9a:90:c2:86:24:bb:87:1f:c9:df:b7:9f:18:64:fb:82:
75:8c:fc:6a:93:af:e5:d2:a7:c5:d8:52:d3:e0:43:95:40:05:
2a:3c:f6:60:44:52:56:57:c1:10:71:9d:68:07:72:72:d7:c3:
45:ce:05:5f:6e:20:0b:ac:4b:4c:9e:82:a0:fd:d2:a8:c7:c5:
41:ee:83:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR3CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDAwMDM0WhcNMjUxMjEwMDAwMDM0WjAYMRYw
FAYDVQQDEw02NzY4YjI3NS00OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApJ4iQPDciyIM6OplWDjhjeJtv1Zh6urLx0qOSPsWO9vK4JwVOQhocSSK
ItS9VBZ0o9AoH/hzNkH9aXgkm6fm9Ti/Wwr+tmFH+XB3PAwGuVhAwwPIt0UsYwcS
s+6fhkoH1AaY/5ASz6ADnWT4MiRN3+5v4aCiM0yCrcMNj5Dh+TSsTkrneKcWEzNp
KZG28R0P3s42V1hjLucMG0wq+POCbM2CjM3XNjzyTCNdp5K0bA33e9q5Q4mWlVlM
2ae4nZbkVbXeMeXc3c1QJf07DWP0nl99fXF2Uxjzi1i9p0cH1QFhHLjl53gQIc7c
DIbf3qJgbb8jbqAPJpghCxq70kVzbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEcM
YY1lPcTMisL38Nhkidopcy3eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNjMwRTVFNkMwQzcxMUVGQUI5QkUwNjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLUMA0GCSqGSIb3DQEB
CwUAA4IBAQAZr5RP2nBFBSkcezDm7LylqSPUT7xlzNbNM3i/3x3HolXnqCgFSh3Z
CGezRLg/g5uWfJdjBBrcCOh2DXzDnXdaX7jo+z0suL8pLvM+u3NUB+aZyryJfsbS
+2rXHrcRMTAN4h427d/9Tue1S/fPqI4rf1SjoeXRZjZrp+P0BH0FApwEfTHcioGP
mwY0J+O9KX7Ak4c24HwqsL74ZqOqd4G1TnI9Nf5IcbgUlk2jsEn6IYl5p/yTqZqQ
woYku4cfyd+3nxhk+4J1jPxqk6/l0qfF2FLT4EOVQAUqPPZgRFJWV8EQcZ1oB3Jy
18NFzgVfbiALrEtMnoKg/dKox8VB7oM8
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:34:55 2025 by rpki-client