Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39CD420AC27111EF9AEA7697762E951A.roa
File: 39CD420AC27111EF9AEA7697762E951A.roa (raw, json)
Hash identifier: 7P9E++7F/o8yxLzzsfB+hYAO/ROyWTQaK+CqvFVAFXM=
Subject key identifier: 38:6E:A2:73:22:1B:64:FF:44:C2:D0:0D:7B:0B:6F:94:0E:B8:2F:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012466
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39CD420AC27111EF9AEA7697762E951A.roa
Signing time: Wed 25 Dec 2024 03:35:03 +0000
ROA not before: Wed 25 Dec 2024 03:34:59 +0000
ROA not after: Wed 10 Dec 2025 03:34:59 +0000
asID: 984
IP address blocks: 154.211.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74854 (0x12466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:34:59 2024 GMT
Not After : Dec 10 03:34:59 2025 GMT
Subject: CN=676b7d67-581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:fa:c3:7f:32:01:75:af:d8:8e:5d:24:ab:
6a:ff:89:19:8f:32:50:95:19:fc:c8:79:20:04:0f:
a5:5e:40:20:eb:a2:0a:aa:a7:50:34:1a:6d:e1:87:
e7:b2:98:90:07:9e:af:2a:09:ce:28:1d:aa:cf:9d:
5e:61:a4:1e:e6:ad:2d:41:e1:3e:8e:b3:fd:ff:ea:
d2:52:95:b8:97:5d:77:aa:a2:6d:60:0a:f5:2c:e8:
79:a9:d3:76:b4:1a:15:53:f9:c6:8f:59:89:a9:42:
92:9f:25:5f:99:65:a1:40:24:44:df:59:f5:0f:06:
55:d6:2e:a6:f5:d5:56:74:9e:13:f5:17:6d:57:97:
ed:8b:86:5a:df:24:31:0f:34:f4:f6:e3:8b:71:ee:
66:e4:ee:aa:6e:0a:1b:8e:ae:0a:b8:f2:e7:f4:b3:
0a:46:07:f7:40:c7:5f:93:e9:67:73:98:d9:d4:49:
3c:c6:cb:cf:4a:c0:c3:c1:1c:dd:17:98:d5:95:01:
16:b1:cd:88:2b:da:49:80:75:aa:f3:68:21:e1:d0:
f0:a0:9f:33:01:5b:4c:2d:17:04:af:df:9f:d8:0d:
65:f0:7e:de:87:b2:04:cc:ea:82:c7:a8:89:b9:ec:
34:96:34:4a:3e:7a:5d:67:0c:36:b3:bf:5b:ba:26:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:A2:73:22:1B:64:FF:44:C2:D0:0D:7B:0B:6F:94:0E:B8:2F:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39CD420AC27111EF9AEA7697762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.202.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:c0:8c:85:87:71:78:64:a5:1a:8f:5c:b3:fe:7e:b4:ac:0c:
12:ba:40:34:c8:b6:1b:1d:4f:86:c7:d3:1f:02:80:2f:01:f2:
11:f4:dd:ce:2b:c0:8e:14:5c:61:cc:3f:30:47:84:63:c0:6a:
99:e6:f3:21:ad:a1:35:41:b7:b7:68:e9:d4:8e:de:ff:06:65:
e3:ea:97:a5:3b:2e:20:5a:9f:cb:d2:1c:83:ed:9f:78:2e:6e:
dd:67:7a:bc:0d:b5:00:21:a5:55:58:79:b6:80:95:22:61:b5:
08:22:d8:b8:4d:17:10:f5:9c:3b:31:40:d6:a4:26:b1:5a:2b:
3f:41:58:22:e4:41:99:ad:07:b1:62:7e:d1:29:e2:ff:44:1b:
7a:ff:60:55:b0:47:f2:2d:15:28:f0:f8:5f:71:ea:71:dc:54:
9f:7b:08:bc:f5:df:e3:99:49:ea:bf:ec:91:8a:7f:63:c4:e1:
0b:cf:dc:d7:41:18:b0:e7:c7:71:ff:0d:80:84:7b:29:f5:f6:
78:88:d5:d5:68:f3:33:8d:ad:d4:0d:2f:cc:8b:6a:75:4a:f9:
e3:7d:72:6f:0d:b9:c8:46:e7:14:ad:db:ba:65:f6:8f:7a:d4:
05:c5:e6:6c:57:11:e0:f5:13:ec:0c:d5:1f:9a:2b:9a:d6:f2:
c7:95:7b:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASRmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDMzNDU5WhcNMjUxMjEwMDMzNDU5WjAYMRYw
FAYDVQQDEw02NzZiN2Q2Ny01ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0736w38yAXWv2I5dJKtq/4kZjzJQlRn8yHkgBA+lXkAg66IKqqdQNBpt
4YfnspiQB56vKgnOKB2qz51eYaQe5q0tQeE+jrP9/+rSUpW4l113qqJtYAr1LOh5
qdN2tBoVU/nGj1mJqUKSnyVfmWWhQCRE31n1DwZV1i6m9dVWdJ4T9RdtV5fti4Za
3yQxDzT09uOLce5m5O6qbgobjq4KuPLn9LMKRgf3QMdfk+lnc5jZ1Ek8xsvPSsDD
wRzdF5jVlQEWsc2IK9pJgHWq82gh4dDwoJ8zAVtMLRcEr9+f2A1l8H7eh7IEzOqC
x6iJuew0ljRKPnpdZww2s79buiaV6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDhu
onMiG2T/RMLQDXsLb5QOuC90MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zOUNENDIwQUMyNzExMUVGOUFFQTc2OTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPKMA0GCSqGSIb3DQEB
CwUAA4IBAQC5wIyFh3F4ZKUaj1yz/n60rAwSukA0yLYbHU+Gx9MfAoAvAfIR9N3O
K8COFFxhzD8wR4RjwGqZ5vMhraE1Qbe3aOnUjt7/BmXj6pelOy4gWp/L0hyD7Z94
Lm7dZ3q8DbUAIaVVWHm2gJUiYbUIIti4TRcQ9Zw7MUDWpCaxWis/QVgi5EGZrQex
Yn7RKeL/RBt6/2BVsEfyLRUo8Phfcepx3FSfewi89d/jmUnqv+yRin9jxOELz9zX
QRiw58dx/w2AhHsp9fZ4iNXVaPMzja3UDS/Mi2p1SvnjfXJvDbnIRucUrdu6ZfaP
etQFxeZsVxHg9RPsDNUfmiua1vLHlXsW
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:59 2025 by rpki-client