Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21165D5EC52911EFB4807C55762E951A.roa
File: 21165D5EC52911EFB4807C55762E951A.roa (raw, json)
Hash identifier: GDwO6A+MyDq4p6Q5N/RYTkqjDRJnx1T9Hw9g8mGQ8fY=
Subject key identifier: 75:46:91:34:6B:7D:1F:6A:1A:F8:79:86:0D:73:49:75:A9:6D:B5:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21165D5EC52911EFB4807C55762E951A.roa
Signing time: Sat 28 Dec 2024 14:36:31 +0000
ROA not before: Sat 28 Dec 2024 14:36:27 +0000
ROA not after: Fri 12 Dec 2025 14:36:27 +0000
asID: 984
IP address blocks: 154.204.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76707 (0x12ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:36:27 2024 GMT
Not After : Dec 12 14:36:27 2025 GMT
Subject: CN=67700cef-dbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:ed:a8:a8:23:8c:b0:3e:9c:71:1a:6d:0c:
1e:de:8b:4b:ec:69:69:15:e4:0b:c3:22:5d:a0:81:
f8:a7:a2:c9:52:d3:e9:dd:be:69:14:57:98:ae:df:
74:24:77:62:d6:d4:a9:c0:d6:fd:95:2e:47:dd:e9:
5b:77:bb:9e:c9:4f:29:c8:1d:09:50:c7:1a:fc:97:
43:12:8a:18:1f:ae:dc:c0:79:b9:ab:d6:ad:cc:5d:
fb:0e:7a:e2:ae:6e:e8:e2:75:c6:58:db:c8:2c:75:
b2:ba:6e:45:c9:17:b1:95:06:e3:42:e6:66:86:85:
f4:8c:19:eb:8b:c9:a8:77:1e:47:1b:df:48:38:90:
86:3f:c6:68:48:e1:b4:0b:e2:3a:a9:0a:42:98:c6:
34:f4:fd:fb:ec:ab:22:ba:51:a8:d2:a9:0f:75:0d:
12:9c:07:6a:23:9e:d8:80:24:3a:2b:0e:39:b0:58:
c5:99:3a:af:87:4e:31:e2:9a:8e:b2:cc:26:db:f3:
25:99:ef:81:44:09:28:4c:26:af:6c:3a:c5:46:d1:
ed:a2:23:f7:bd:88:0d:72:ca:6f:c9:d7:a6:7b:b2:
bd:6b:8b:9e:b7:8e:f1:c0:76:15:20:ce:59:00:7c:
cf:b1:b1:70:ec:48:83:dc:01:c8:fa:47:98:07:02:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:91:34:6B:7D:1F:6A:1A:F8:79:86:0D:73:49:75:A9:6D:B5:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21165D5EC52911EFB4807C55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:da:56:e4:18:5b:97:c6:51:c2:00:aa:48:b7:11:2d:d6:f3:
e0:21:10:32:65:b1:35:e4:ec:a5:46:44:d7:f8:15:1d:3d:f3:
95:66:e4:cb:66:41:dc:63:38:c7:87:87:2a:a3:c3:10:7e:66:
53:6b:ac:31:c9:cf:32:fb:04:f7:93:9a:a2:d8:01:94:71:09:
01:93:e5:ac:06:dd:31:90:00:e6:24:fc:33:86:61:dd:db:ef:
ce:3c:03:97:05:2b:54:20:bc:7b:01:fb:fd:cf:c6:88:14:eb:
60:52:7b:31:74:0d:19:17:08:16:63:49:be:89:81:04:86:4d:
d6:1e:bb:de:2a:27:f0:32:bb:47:13:21:f4:2a:96:83:e6:f6:
1d:f5:5d:45:51:33:6a:a3:e6:b6:56:2b:a3:08:94:42:46:a6:
be:c6:bb:7d:80:e1:aa:4b:b8:d8:6d:4e:3d:57:8a:59:d0:6c:
bc:ff:01:26:40:9d:d9:9e:44:99:16:48:5c:25:fe:7e:f6:a2:
30:b8:d1:15:e3:b9:10:23:48:cc:d3:92:4a:f8:94:d8:66:8e:
bc:03:1a:66:fb:c3:2f:7d:9d:f5:a7:03:05:6f:99:b5:97:e7:
76:aa:cb:5d:be:6a:6b:a8:2e:3c:ec:0e:56:f8:86:1f:f8:87:
30:6e:49:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASujMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTQzNjI3WhcNMjUxMjEyMTQzNjI3WjAYMRYw
FAYDVQQDEw02NzcwMGNlZi1kYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAprLtqKgjjLA+nHEabQwe3otL7GlpFeQLwyJdoIH4p6LJUtPp3b5pFFeY
rt90JHdi1tSpwNb9lS5H3elbd7ueyU8pyB0JUMca/JdDEooYH67cwHm5q9atzF37
Dnrirm7o4nXGWNvILHWyum5FyRexlQbjQuZmhoX0jBnri8modx5HG99IOJCGP8Zo
SOG0C+I6qQpCmMY09P377KsiulGo0qkPdQ0SnAdqI57YgCQ6Kw45sFjFmTqvh04x
4pqOsswm2/Mlme+BRAkoTCavbDrFRtHtoiP3vYgNcspvydeme7K9a4uet47xwHYV
IM5ZAHzPsbFw7EiD3AHI+keYBwITBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHVG
kTRrfR9qGvh5hg1zSXWpbbX5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMTE2NUQ1RUM1MjkxMUVGQjQ4MDdDNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmswcMA0GCSqGSIb3DQEB
CwUAA4IBAQCc2lbkGFuXxlHCAKpItxEt1vPgIRAyZbE15OylRkTX+BUdPfOVZuTL
ZkHcYzjHh4cqo8MQfmZTa6wxyc8y+wT3k5qi2AGUcQkBk+WsBt0xkADmJPwzhmHd
2+/OPAOXBStUILx7Afv9z8aIFOtgUnsxdA0ZFwgWY0m+iYEEhk3WHrveKifwMrtH
EyH0KpaD5vYd9V1FUTNqo+a2ViujCJRCRqa+xrt9gOGqS7jYbU49V4pZ0Gy8/wEm
QJ3ZnkSZFkhcJf5+9qIwuNEV47kQI0jM05JK+JTYZo68Axpm+8MvfZ31pwMFb5m1
l+d2qstdvmprqC487A5W+IYf+Icwbkmk
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:11:12 2025 by rpki-client