Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA7ACC4C41F11EF92AC7046762E951A.roa
File: 2BA7ACC4C41F11EF92AC7046762E951A.roa (raw, json)
Hash identifier: ZO2bGoEm0Butw3Q9S8Apm/qJ3KbpZLKlkajtjyOCl1w=
Subject key identifier: AB:54:BC:5A:0E:E5:EA:3C:94:3B:D2:B2:75:1A:15:8D:8C:62:C2:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA7ACC4C41F11EF92AC7046762E951A.roa
Signing time: Fri 27 Dec 2024 06:52:43 +0000
ROA not before: Fri 27 Dec 2024 06:52:39 +0000
ROA not after: Sun 12 Dec 2027 06:52:39 +0000
asID: 17561
IP address blocks: 154.201.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76205 (0x129ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:52:39 2024 GMT
Not After : Dec 12 06:52:39 2027 GMT
Subject: CN=676e4ebb-ca8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:9f:a4:32:ba:88:c0:a6:59:2c:70:98:70:
05:a4:4e:9c:bc:db:e4:78:ca:d3:ea:93:0b:a9:cc:
25:26:95:5b:de:6e:1e:02:5e:70:53:4b:2f:f8:f6:
7f:9e:7a:6b:c9:f9:59:b4:5c:ca:b2:6b:f9:3a:88:
55:6a:0e:59:77:42:bf:c5:8d:a0:29:a1:27:c4:37:
3c:0f:37:1c:38:b4:f6:14:a5:0e:9f:42:72:8c:54:
a8:7c:2c:f5:c1:03:70:e3:e7:fa:02:ec:79:30:0e:
49:1c:69:45:f9:14:a3:e7:2e:9c:53:94:9a:02:83:
ef:27:ee:5c:3f:74:b8:fc:73:f1:f9:bb:45:ef:0c:
6f:f6:a7:c7:67:1c:e1:5d:97:65:2f:d0:2d:6e:9d:
20:db:e0:ec:32:a4:4a:ca:1f:e0:2a:cf:7f:d8:38:
70:48:23:94:ff:86:6f:0b:ef:f5:fe:b7:33:7a:e0:
6d:ac:25:61:40:f1:88:d6:ed:c8:7a:71:15:61:3e:
01:66:17:27:ed:4e:bf:ed:ab:fb:e8:fd:bf:1d:46:
63:ec:19:e4:1a:c4:39:5b:fd:1d:b1:25:1d:91:00:
17:0a:f7:01:13:6a:59:c6:da:c4:9b:0e:7f:d0:79:
b9:6a:40:aa:31:fa:24:cc:11:83:9a:18:3e:44:5a:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:BC:5A:0E:E5:EA:3C:94:3B:D2:B2:75:1A:15:8D:8C:62:C2:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA7ACC4C41F11EF92AC7046762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.41.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:51:d0:3b:55:9a:01:e2:d1:f1:fd:40:b5:22:93:5b:92:0f:
5d:1b:c2:63:64:de:a0:0c:1e:0c:d4:f8:bf:a3:47:53:97:25:
9e:ed:db:60:e2:e3:0d:32:91:de:f5:c9:1d:ee:f5:f9:fb:31:
3b:3e:c5:d9:f9:7a:5d:5a:56:0f:15:bb:e6:12:32:a4:9d:1d:
c7:89:ce:fb:3c:10:2f:9b:c9:ce:aa:9a:c5:08:14:db:84:9b:
09:7a:f8:a9:e6:da:f9:70:58:a5:3e:4b:0b:b7:14:45:11:b9:
ed:40:b9:bb:92:bf:b0:13:44:31:98:d6:a2:e3:bb:02:07:21:
73:99:e8:67:ba:cc:0d:65:00:3a:90:d4:51:97:fb:8e:59:8a:
d6:a8:21:63:6d:23:43:a3:5e:79:66:4e:db:cf:6a:d3:6a:47:
32:fa:56:ad:20:f0:7b:ee:60:81:fb:14:68:07:80:a7:3b:aa:
9a:59:ca:f7:63:ee:23:57:ac:e3:97:26:12:83:40:7c:a3:1c:
d6:f0:3c:a7:8a:00:c0:a6:ab:41:20:34:3c:d8:3e:c5:d9:ec:
f8:50:72:d6:93:73:46:e1:ce:14:76:f4:cc:77:2c:3f:07:7f:
08:92:46:eb:9c:d5:04:75:07:29:0d:d2:b6:b1:2b:10:97:51:
04:08:35:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASmtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDY1MjM5WhcNMjcxMjEyMDY1MjM5WjAYMRYw
FAYDVQQDEw02NzZlNGViYi1jYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxY6fpDK6iMCmWSxwmHAFpE6cvNvkeMrT6pMLqcwlJpVb3m4eAl5wU0sv
+PZ/nnpryflZtFzKsmv5OohVag5Zd0K/xY2gKaEnxDc8DzccOLT2FKUOn0JyjFSo
fCz1wQNw4+f6Aux5MA5JHGlF+RSj5y6cU5SaAoPvJ+5cP3S4/HPx+btF7wxv9qfH
ZxzhXZdlL9Atbp0g2+DsMqRKyh/gKs9/2DhwSCOU/4ZvC+/1/rczeuBtrCVhQPGI
1u3IenEVYT4BZhcn7U6/7av76P2/HUZj7BnkGsQ5W/0dsSUdkQAXCvcBE2pZxtrE
mw5/0Hm5akCqMfokzBGDmhg+RFq3XQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKtU
vFoO5eo8lDvSsnUaFY2MYsKaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQkE3QUNDNEM0MUYxMUVGOTJBQzcwNDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmskpMA0GCSqGSIb3DQEB
CwUAA4IBAQC8UdA7VZoB4tHx/UC1IpNbkg9dG8JjZN6gDB4M1Pi/o0dTlyWe7dtg
4uMNMpHe9ckd7vX5+zE7PsXZ+XpdWlYPFbvmEjKknR3Hic77PBAvm8nOqprFCBTb
hJsJevip5tr5cFilPksLtxRFEbntQLm7kr+wE0QxmNai47sCByFzmehnuswNZQA6
kNRRl/uOWYrWqCFjbSNDo155Zk7bz2rTakcy+latIPB77mCB+xRoB4CnO6qaWcr3
Y+4jV6zjlyYSg0B8oxzW8DynigDApqtBIDQ82D7F2ez4UHLWk3NG4c4UdvTMdyw/
B38IkkbrnNUEdQcpDdK2sSsQl1EECDUt
-----END CERTIFICATE-----
Generated at Thu Apr 10 18:37:21 2025 by rpki-client