Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/228FB41CC0CB11EFA487BF82762E951A.roa
File: 228FB41CC0CB11EFA487BF82762E951A.roa (raw, json)
Hash identifier: qjh4IXmT+w7WD6rbHmMyuM4a72Ox7tgvxWOrWse3DtU=
Subject key identifier: C1:DA:6C:97:70:BF:B6:3E:CD:0C:76:57:A2:02:3A:8F:98:E6:7E:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/228FB41CC0CB11EFA487BF82762E951A.roa
Signing time: Mon 23 Dec 2024 01:13:36 +0000
ROA not before: Mon 23 Dec 2024 01:13:33 +0000
ROA not after: Wed 10 Dec 2025 01:13:33 +0000
asID: 984
IP address blocks: 154.82.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73210 (0x11dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:13:33 2024 GMT
Not After : Dec 10 01:13:33 2025 GMT
Subject: CN=6768b940-dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:f8:45:01:d7:bf:13:b3:5c:25:03:e0:79:
f0:ac:2b:b0:da:d5:b5:84:57:9d:de:54:f4:59:e6:
19:ba:59:e9:3f:81:dd:f4:4c:fe:6d:35:6c:0d:77:
89:a3:8c:7f:f1:5b:f8:4f:00:b2:7d:08:19:2d:0d:
d3:82:e4:7d:85:84:d6:3c:23:5f:3f:8e:51:5a:8e:
1c:7b:ef:62:91:f9:49:f9:7e:87:5d:b5:06:82:59:
33:84:81:7d:85:fe:8c:0b:e3:f0:4b:3e:d6:9c:e4:
6d:a9:5e:da:a6:66:fa:66:91:b0:c4:e3:5e:c2:b5:
23:5e:0c:5d:57:12:01:99:b8:ce:59:86:ba:bf:f0:
4a:76:eb:b6:7d:f3:67:85:51:86:77:b0:2c:d8:cf:
94:3d:ca:a4:ca:38:23:77:97:74:f0:b1:55:a3:94:
37:70:a8:ea:7e:5b:af:82:97:38:39:94:35:f8:46:
52:2c:04:fc:03:b0:69:eb:fb:0a:fa:2e:4c:3b:7a:
6f:66:18:8f:4d:5c:4e:55:24:40:65:37:30:22:49:
b0:82:78:39:24:ff:cf:38:dd:67:a8:71:34:29:a0:
32:61:9f:27:87:47:46:54:87:1e:7f:35:ae:68:04:
42:17:8d:aa:dd:6b:4b:85:2a:e0:89:40:49:fc:29:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DA:6C:97:70:BF:B6:3E:CD:0C:76:57:A2:02:3A:8F:98:E6:7E:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/228FB41CC0CB11EFA487BF82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:42:28:91:d7:66:d5:f0:6f:55:1a:c1:4c:a1:48:df:b7:fe:
c8:66:04:22:74:59:4f:ff:0e:ad:89:ec:0e:83:00:9d:e9:ff:
9e:2e:60:53:78:14:22:fc:d8:94:3c:8d:b7:0d:b6:35:e5:68:
3f:c3:4b:3a:0c:6b:87:a3:90:3d:59:94:72:0f:98:f1:93:66:
e2:b8:3d:31:a6:88:dc:ea:e0:a7:5e:37:34:3f:a4:03:f6:ad:
56:8c:d8:53:67:32:11:e5:76:1b:37:f2:ae:d3:0e:ba:e7:e5:
71:2b:20:ba:ac:0f:ab:76:8d:9f:ff:09:98:f5:8f:d6:2d:ab:
4c:b7:f2:29:c3:10:ed:72:bd:39:7d:6f:ea:6e:7f:90:81:1d:
84:94:9e:cb:d5:d0:6e:5a:f6:60:a8:22:cf:3a:e1:a9:85:3c:
07:95:bb:3a:db:ab:66:d5:9e:0b:42:b9:01:22:39:d7:c4:3e:
a4:97:55:2e:71:bb:11:bf:c0:2e:b2:02:28:cb:4d:c5:35:8a:
c3:03:8b:60:e4:57:6e:c7:ca:29:d6:2e:e9:49:9e:6f:2a:6e:
bc:a3:f8:a8:03:f5:8e:8d:ab:b4:9a:0b:a6:11:52:1c:5f:45:
8c:22:28:c3:eb:dd:7d:36:7a:cd:7e:d7:b9:ef:e9:dc:d5:22:
69:26:99:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR36MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDExMzMzWhcNMjUxMjEwMDExMzMzWjAYMRYw
FAYDVQQDEw02NzY4Yjk0MC1kZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt1r4RQHXvxOzXCUD4HnwrCuw2tW1hFed3lT0WeYZulnpP4Hd9Ez+bTVs
DXeJo4x/8Vv4TwCyfQgZLQ3TguR9hYTWPCNfP45RWo4ce+9ikflJ+X6HXbUGglkz
hIF9hf6MC+PwSz7WnORtqV7apmb6ZpGwxONewrUjXgxdVxIBmbjOWYa6v/BKduu2
ffNnhVGGd7As2M+UPcqkyjgjd5d08LFVo5Q3cKjqfluvgpc4OZQ1+EZSLAT8A7Bp
6/sK+i5MO3pvZhiPTVxOVSRAZTcwIkmwgng5JP/PON1nqHE0KaAyYZ8nh0dGVIce
fzWuaARCF42q3WtLhSrgiUBJ/Cmt8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMHa
bJdwv7Y+zQx2V6ICOo+Y5n5nMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMjhGQjQxQ0MwQ0IxMUVGQTQ4N0JGODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLwMA0GCSqGSIb3DQEB
CwUAA4IBAQCsQiiR12bV8G9VGsFMoUjft/7IZgQidFlP/w6tiewOgwCd6f+eLmBT
eBQi/NiUPI23DbY15Wg/w0s6DGuHo5A9WZRyD5jxk2biuD0xpojc6uCnXjc0P6QD
9q1WjNhTZzIR5XYbN/Ku0w665+VxKyC6rA+rdo2f/wmY9Y/WLatMt/IpwxDtcr05
fW/qbn+QgR2ElJ7L1dBuWvZgqCLPOuGphTwHlbs626tm1Z4LQrkBIjnXxD6kl1Uu
cbsRv8AusgIoy03FNYrDA4tg5Fdux8op1i7pSZ5vKm68o/ioA/WOjau0mgumEVIc
X0WMIijD6919NnrNfte57+nc1SJpJpl7
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:24 2025 by rpki-client