Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24245394C3CA11EFA7F78498762E951A.roa
File: 24245394C3CA11EFA7F78498762E951A.roa (raw, json)
Hash identifier: yMIDPwgEHCGtv/Mfny0eBhmuzC4QU0b2zmZ6LbhFR1M=
Subject key identifier: 15:98:1D:45:51:FC:D6:EB:88:1D:9F:44:6C:36:A9:DE:83:83:8B:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24245394C3CA11EFA7F78498762E951A.roa
Signing time: Thu 26 Dec 2024 20:44:03 +0000
ROA not before: Thu 26 Dec 2024 20:43:59 +0000
ROA not after: Fri 12 Dec 2025 20:43:59 +0000
asID: 984
IP address blocks: 154.83.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75770 (0x127fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:43:59 2024 GMT
Not After : Dec 12 20:43:59 2025 GMT
Subject: CN=676dc013-b5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:db:8c:31:75:5f:b2:4b:a6:5d:a7:b7:32:
0d:33:c4:fe:08:37:f0:7f:a0:36:9f:bc:64:a5:57:
5e:c8:18:f9:43:03:39:3f:6c:cb:df:4a:0c:05:9b:
2b:c6:fb:f3:1c:fe:c3:7b:09:dc:16:71:e9:c9:34:
06:d9:3a:49:12:b6:d6:76:d4:c9:43:2c:ba:03:de:
c2:da:5b:95:16:c6:40:47:50:86:d6:d8:33:1d:6e:
42:8f:40:81:24:f6:44:18:4a:21:58:7a:07:ef:65:
af:ea:97:9c:a1:8f:57:6e:0c:1c:20:18:52:c6:78:
4a:ea:f5:00:08:91:88:ed:83:68:4d:cd:12:39:d1:
31:26:bc:e2:8e:d3:f2:92:dc:ae:da:00:80:dc:cb:
5b:5a:06:d3:70:c5:06:c6:0f:17:88:b2:19:76:fc:
81:ae:ac:98:f1:44:d6:92:80:6f:70:74:43:50:22:
4b:5d:aa:17:6e:a6:c1:a7:3c:b4:c9:59:6b:97:8f:
71:f7:d2:60:39:95:9a:a6:d8:14:b4:14:01:3f:8c:
c3:50:4e:df:ae:ed:c2:9f:47:dc:61:f8:00:76:a7:
6c:1f:a8:8d:99:31:47:fc:c6:59:96:32:32:06:a1:
6e:ac:1f:6d:28:d6:75:a1:47:47:c8:0c:44:4b:a0:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:1D:45:51:FC:D6:EB:88:1D:9F:44:6C:36:A9:DE:83:83:8B:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24245394C3CA11EFA7F78498762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e7:7f:00:ad:29:1b:53:64:be:1f:70:e6:bf:35:ae:8f:43:
9a:db:3d:f4:0b:2a:8e:48:0f:58:9e:b3:85:02:01:d8:b3:10:
6e:9f:1b:13:7c:0c:7a:ce:bf:63:a0:ba:45:88:c6:91:a7:f9:
17:53:21:6b:a9:78:85:d0:7d:be:62:7e:1c:3e:01:96:47:6c:
81:25:5e:32:d5:cd:c2:1c:4d:ed:8e:8c:b0:6e:35:21:20:37:
3e:e1:4a:9b:b9:46:b7:63:9e:ce:28:43:8b:90:5a:75:0e:3a:
c3:bc:2b:0a:2d:4a:48:5d:41:ce:68:44:1a:14:54:a7:ce:8d:
41:ed:0e:18:a6:4f:bf:eb:50:fa:06:2f:36:a2:18:3a:86:cf:
fe:e1:ae:05:d5:63:3a:89:3c:d9:41:d9:12:e4:a8:2e:7a:ee:
07:f2:cb:1d:3f:0b:3a:52:2f:bc:31:78:b7:a6:5e:da:e3:cc:
fc:b4:f8:ad:7e:bd:20:14:d0:84:dd:a1:86:e1:ed:1b:ce:a7:
db:f6:32:88:9c:25:d9:5b:9a:45:76:56:8a:d9:47:b2:ea:0d:
f8:83:7c:4f:69:fd:58:02:30:b5:94:ef:7d:6a:3b:66:b6:58:
88:b3:b6:82:74:8b:1f:1c:9e:bb:e3:b4:7e:d7:b3:3c:61:52:
68:8c:4d:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASf6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjA0MzU5WhcNMjUxMjEyMjA0MzU5WjAYMRYw
FAYDVQQDEw02NzZkYzAxMy1iNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArY3bjDF1X7JLpl2ntzINM8T+CDfwf6A2n7xkpVdeyBj5QwM5P2zL30oM
BZsrxvvzHP7DewncFnHpyTQG2TpJErbWdtTJQyy6A97C2luVFsZAR1CG1tgzHW5C
j0CBJPZEGEohWHoH72Wv6pecoY9XbgwcIBhSxnhK6vUACJGI7YNoTc0SOdExJrzi
jtPyktyu2gCA3MtbWgbTcMUGxg8XiLIZdvyBrqyY8UTWkoBvcHRDUCJLXaoXbqbB
pzy0yVlrl49x99JgOZWaptgUtBQBP4zDUE7fru3Cn0fcYfgAdqdsH6iNmTFH/MZZ
ljIyBqFurB9tKNZ1oUdHyAxES6CseQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBWY
HUVR/NbriB2fRGw2qd6Dg4sMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNDI0NTM5NEMzQ0ExMUVGQTdGNzg0OTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOSMA0GCSqGSIb3DQEB
CwUAA4IBAQAL538ArSkbU2S+H3DmvzWuj0Oa2z30CyqOSA9YnrOFAgHYsxBunxsT
fAx6zr9joLpFiMaRp/kXUyFrqXiF0H2+Yn4cPgGWR2yBJV4y1c3CHE3tjoywbjUh
IDc+4UqbuUa3Y57OKEOLkFp1DjrDvCsKLUpIXUHOaEQaFFSnzo1B7Q4Ypk+/61D6
Bi82ohg6hs/+4a4F1WM6iTzZQdkS5Kgueu4H8ssdPws6Ui+8MXi3pl7a48z8tPit
fr0gFNCE3aGG4e0bzqfb9jKInCXZW5pFdlaK2Uey6g34g3xPaf1YAjC1lO99ajtm
tliIs7aCdIsfHJ6747R+17M8YVJojE1z
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:14 2025 by rpki-client