Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/337FB4D6C3D511EFAB93FB5F762E951A.roa
File: 337FB4D6C3D511EFAB93FB5F762E951A.roa (raw, json)
Hash identifier: dBTdd+giikjKNd3ilOAN8AwkBt36WViQiuorOc+WHJs=
Subject key identifier: 1E:A5:51:A2:F3:6F:72:E7:AB:96:E6:44:31:44:91:E1:A7:35:98:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01286A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/337FB4D6C3D511EFAB93FB5F762E951A.roa
Signing time: Thu 26 Dec 2024 22:03:13 +0000
ROA not before: Thu 26 Dec 2024 22:03:09 +0000
ROA not after: Sun 12 Dec 2027 22:03:09 +0000
asID: 17561
IP address blocks: 154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75882 (0x1286a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:03:09 2024 GMT
Not After : Dec 12 22:03:09 2027 GMT
Subject: CN=676dd2a1-60f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:43:3a:35:d5:ba:53:fa:c9:f1:63:78:89:
2b:72:3d:e2:30:3b:3a:37:5e:d9:87:79:68:d3:57:
3a:e9:e2:8b:9c:31:ae:e6:bd:3a:1f:fb:c4:94:a7:
9d:6b:2c:c5:a3:c0:e9:c8:4b:f8:af:f8:2d:9e:a3:
3a:11:9f:2d:9e:a2:c1:be:6c:a1:90:8f:b6:b7:54:
e9:80:5a:87:a9:d6:0f:95:67:39:6d:e4:c3:be:59:
ad:ea:d4:46:c9:5e:d3:b6:e3:f7:3c:77:d4:b1:5d:
66:3d:0f:00:3c:5e:19:2e:df:20:3c:0a:5d:63:79:
23:cb:ce:42:fb:40:96:a1:ea:8b:04:fc:04:ef:da:
82:a3:fa:41:eb:40:75:77:f6:a8:2f:63:04:b1:d5:
c9:fc:da:9c:10:c3:94:a8:28:10:ae:56:df:18:4f:
39:0a:5d:93:82:3a:da:cb:0a:ee:87:83:90:a9:f4:
c4:36:4f:7e:28:de:0a:3a:b2:7b:1d:f5:b9:97:84:
fa:9e:de:85:3d:e9:08:9a:b9:c3:90:85:57:3f:f8:
a3:f6:27:5b:5e:c1:3f:dd:a1:82:2d:49:4c:55:0b:
98:83:a7:c8:b1:a9:cf:d4:92:5e:20:5e:5b:71:4b:
cb:6e:78:ca:b5:6a:6e:5f:97:ca:b3:63:71:79:c1:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:51:A2:F3:6F:72:E7:AB:96:E6:44:31:44:91:E1:A7:35:98:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/337FB4D6C3D511EFAB93FB5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2e:73:de:3c:bf:3f:15:b6:60:56:ab:52:04:52:a4:4a:d1:
14:e0:af:a3:ca:e3:13:7a:19:ce:53:c7:fb:1f:01:90:8f:90:
39:d6:a9:fc:25:ea:94:25:ae:d9:ac:11:54:8d:a2:c2:e1:b6:
19:17:cc:5c:aa:a0:07:dd:9a:01:e7:7b:57:de:7b:39:fe:55:
b8:ba:ff:57:69:d8:56:ab:3c:29:1e:08:f0:b6:04:73:d5:72:
08:84:42:32:48:2c:54:c9:70:f7:ae:43:2f:4a:d5:d5:31:b1:
b1:83:d5:f2:1c:ab:51:04:3d:4f:07:40:81:02:fc:1c:ed:5c:
5a:1e:a5:2e:f8:52:fd:93:ec:27:c0:80:5c:40:cf:98:21:3f:
52:f0:a2:90:9b:c3:80:a9:7c:c6:27:5a:05:66:b1:6b:84:c8:
b8:30:32:38:39:87:1b:63:93:2f:20:7d:ae:38:04:5f:cd:c0:
a1:73:3b:a0:59:6c:fd:da:ab:58:0e:be:a6:83:4a:90:28:9e:
57:dd:64:20:47:1d:72:c9:9f:cd:f8:aa:7c:9b:c6:4a:dc:45:
2f:d1:08:2d:f8:05:c1:1e:00:54:28:d8:92:e6:2b:05:e0:40:
05:48:e9:ce:b0:28:16:d7:9f:14:60:ce:25:65:ce:fb:2e:20:
53:8f:93:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAShqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjIwMzA5WhcNMjcxMjEyMjIwMzA5WjAYMRYw
FAYDVQQDEw02NzZkZDJhMS02MGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA02hDOjXVulP6yfFjeIkrcj3iMDs6N17Zh3lo01c66eKLnDGu5r06H/vE
lKedayzFo8DpyEv4r/gtnqM6EZ8tnqLBvmyhkI+2t1TpgFqHqdYPlWc5beTDvlmt
6tRGyV7TtuP3PHfUsV1mPQ8APF4ZLt8gPApdY3kjy85C+0CWoeqLBPwE79qCo/pB
60B1d/aoL2MEsdXJ/NqcEMOUqCgQrlbfGE85Cl2Tgjraywruh4OQqfTENk9+KN4K
OrJ7HfW5l4T6nt6FPekImrnDkIVXP/ij9idbXsE/3aGCLUlMVQuYg6fIsanP1JJe
IF5bcUvLbnjKtWpuX5fKs2NxecFGOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB6l
UaLzb3Lnq5bmRDFEkeGnNZjSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMzdGQjRENkMzRDUxMUVGQUI5M0ZCNUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlP3MA0GCSqGSIb3DQEB
CwUAA4IBAQCcLnPePL8/FbZgVqtSBFKkStEU4K+jyuMTehnOU8f7HwGQj5A51qn8
JeqUJa7ZrBFUjaLC4bYZF8xcqqAH3ZoB53tX3ns5/lW4uv9XadhWqzwpHgjwtgRz
1XIIhEIySCxUyXD3rkMvStXVMbGxg9XyHKtRBD1PB0CBAvwc7VxaHqUu+FL9k+wn
wIBcQM+YIT9S8KKQm8OAqXzGJ1oFZrFrhMi4MDI4OYcbY5MvIH2uOARfzcChczug
WWz92qtYDr6mg0qQKJ5X3WQgRx1yyZ/N+Kp8m8ZK3EUv0Qgt+AXBHgBUKNiS5isF
4EAFSOnOsCgW158UYM4lZc77LiBTj5NC
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:45 2025 by rpki-client