Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D1F0E6C3C811EF9070898C762E951A.roa
File: 24D1F0E6C3C811EF9070898C762E951A.roa (raw, json)
Hash identifier: 1WWB3ZcyeWNPYgM31ZejDfPCSUT7Ax91zAhjPLVTd+k=
Subject key identifier: 1A:9F:08:A2:20:A2:66:3C:2A:0E:AD:CE:CF:BC:74:3B:50:EE:A8:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0127E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D1F0E6C3C811EF9070898C762E951A.roa
Signing time: Thu 26 Dec 2024 20:29:45 +0000
ROA not before: Thu 26 Dec 2024 20:29:41 +0000
ROA not after: Fri 12 Dec 2025 20:29:41 +0000
asID: 984
IP address blocks: 154.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75750 (0x127e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:29:41 2024 GMT
Not After : Dec 12 20:29:41 2025 GMT
Subject: CN=676dbcb9-1153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:bc:07:f2:fa:93:c5:78:5c:d2:a7:41:6c:
10:dc:0d:0f:a1:41:c8:48:0e:73:13:72:2b:6a:49:
c7:50:8a:9b:8f:38:13:be:67:41:c7:3b:f6:14:f7:
7e:d2:b0:5d:ba:77:02:fe:31:81:bb:6c:68:0d:cd:
22:b0:11:8f:6b:e0:f1:48:8b:45:4a:28:61:13:1d:
da:2a:24:d2:a2:b3:42:ca:71:6a:5a:27:1f:c6:4a:
ab:17:ad:f2:7e:42:b6:ee:66:c9:0b:a6:cb:fc:7c:
7a:8f:6d:30:f5:8c:fe:d0:7d:9a:e3:e5:78:f2:99:
40:7a:ad:e2:6e:db:0b:23:c5:f6:ad:ce:1f:54:3a:
55:1a:c3:54:c1:0a:e1:3a:cd:35:f7:45:76:0f:ff:
94:36:99:0d:bf:eb:3f:2f:b6:ae:7f:90:7b:49:54:
b7:7f:84:e6:3a:7a:15:02:52:d3:27:58:e4:41:8e:
9f:c5:30:95:4d:41:d6:ba:30:3f:94:8e:5a:34:0e:
e9:45:83:7d:9f:61:cc:ef:50:2a:ef:be:4e:e0:4f:
82:05:97:42:5a:9a:31:f5:d1:0f:a2:0b:4a:bf:b5:
49:5f:15:da:78:d0:a9:8f:b3:90:6e:a9:93:73:75:
62:2b:c5:e7:75:ae:7d:9b:99:2c:c9:ec:61:50:0f:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:08:A2:20:A2:66:3C:2A:0E:AD:CE:CF:BC:74:3B:50:EE:A8:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24D1F0E6C3C811EF9070898C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
12:87:a5:79:9e:ea:96:99:c6:21:fb:18:a8:a5:06:df:0e:c9:
ec:15:c7:33:81:9b:7d:b5:23:4b:23:9f:b0:8d:49:f0:c7:c6:
ec:b3:0d:bd:fa:ba:99:b1:0e:ce:ac:8d:98:59:bf:fc:05:91:
78:bb:f3:68:db:0e:16:91:80:20:e9:f7:56:c1:f2:ec:db:b5:
1a:cc:5f:33:5f:c3:16:83:28:83:91:30:e6:16:d6:d0:bb:f1:
74:be:8c:4f:a1:b5:e6:ff:f4:f7:e1:a9:1c:93:c5:3c:86:a9:
b0:3c:6a:a6:e1:c4:a8:08:99:62:ae:2e:6a:ed:2e:bf:9c:05:
43:9c:20:90:8c:f6:d4:e1:97:4b:79:57:d2:0f:88:3e:a6:19:
a5:19:44:48:00:5d:fe:be:67:96:d8:2b:86:f4:16:fc:ee:ce:
77:1c:95:23:c7:13:e4:0e:cb:06:4d:8b:94:96:03:79:dd:35:
61:8f:72:9c:28:45:b7:3f:6a:11:7c:ff:31:b9:37:a8:f8:29:
82:5b:5c:ed:c3:a4:bd:c6:26:81:2b:8e:de:8d:a6:b7:58:d8:
94:93:e1:3b:4c:f3:e4:f4:59:18:8b:17:a5:be:6d:21:3e:22:
65:c6:e4:37:e9:c7:b1:03:73:28:07:52:c2:5b:96:fd:6f:68:
14:a9:0c:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASfmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjAyOTQxWhcNMjUxMjEyMjAyOTQxWjAYMRYw
FAYDVQQDEw02NzZkYmNiOS0xMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA11m8B/L6k8V4XNKnQWwQ3A0PoUHISA5zE3IraknHUIqbjzgTvmdBxzv2
FPd+0rBduncC/jGBu2xoDc0isBGPa+DxSItFSihhEx3aKiTSorNCynFqWicfxkqr
F63yfkK27mbJC6bL/Hx6j20w9Yz+0H2a4+V48plAeq3ibtsLI8X2rc4fVDpVGsNU
wQrhOs0190V2D/+UNpkNv+s/L7auf5B7SVS3f4TmOnoVAlLTJ1jkQY6fxTCVTUHW
ujA/lI5aNA7pRYN9n2HM71Aq775O4E+CBZdCWpox9dEPogtKv7VJXxXaeNCpj7OQ
bqmTc3ViK8Xnda59m5ksyexhUA+VtwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBqf
CKIgomY8Kg6tzs+8dDtQ7qjYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNEQxRjBFNkMzQzgxMUVGOTA3MDg5OEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOIMA0GCSqGSIb3DQEB
CwUAA4IBAQASh6V5nuqWmcYh+xiopQbfDsnsFcczgZt9tSNLI5+wjUnwx8bssw29
+rqZsQ7OrI2YWb/8BZF4u/No2w4WkYAg6fdWwfLs27UazF8zX8MWgyiDkTDmFtbQ
u/F0voxPobXm//T34akck8U8hqmwPGqm4cSoCJliri5q7S6/nAVDnCCQjPbU4ZdL
eVfSD4g+phmlGURIAF3+vmeW2CuG9Bb87s53HJUjxxPkDssGTYuUlgN53TVhj3Kc
KEW3P2oRfP8xuTeo+CmCW1ztw6S9xiaBK47ejaa3WNiUk+E7TPPk9FkYixelvm0h
PiJlxuQ36cexA3MoB1LCW5b9b2gUqQw+
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:08 2025 by rpki-client