Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5033BCAAABFA11EFAA4D4082762E951A.roa
File: 5033BCAAABFA11EFAA4D4082762E951A.roa (raw, json)
Hash identifier: zTNqWn4S8MN9tBQd1LGcPIDlSZr0/jMVl3M5BRFvl1Y=
Subject key identifier: 82:41:3F:6A:01:98:41:0D:0A:51:BF:07:80:47:03:83:32:D5:52:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0113BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5033BCAAABFA11EFAA4D4082762E951A.roa
Signing time: Tue 26 Nov 2024 13:28:25 +0000
ROA not before: Tue 26 Nov 2024 13:28:21 +0000
ROA not after: Thu 30 Oct 2025 13:28:21 +0000
asID: 58460
IP address blocks: 154.198.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70587 (0x113bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 26 13:28:21 2024 GMT
Not After : Oct 30 13:28:21 2025 GMT
Subject: CN=6745ccf9-a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:d1:b6:1e:ed:a8:5b:81:44:b4:73:61:9b:
3c:2f:fd:2a:8e:64:65:b5:73:ff:dc:d2:e2:11:4c:
47:e5:7c:1b:fa:43:ac:90:ce:18:22:9b:ea:04:e0:
f7:2e:c6:a5:ce:b4:62:39:55:dd:67:f5:ce:af:4a:
31:dc:a8:27:4d:b9:59:47:76:95:2a:08:6a:74:14:
2e:0e:6d:d1:00:33:34:ca:7e:a9:e4:8c:62:94:dc:
9d:71:5e:85:8a:73:71:ea:e3:36:0e:26:6a:c3:91:
60:1d:b5:71:b2:99:65:68:57:9a:70:d2:da:68:12:
2e:c7:ad:10:83:4c:fe:c9:77:56:f5:cb:3d:72:d5:
2c:88:c3:69:7a:6b:3f:5b:96:af:98:2c:77:1c:19:
4d:f0:7a:9f:46:50:9b:fa:b0:72:d1:c0:7f:0a:03:
3f:cc:a4:00:b0:03:a7:ac:2b:55:dd:74:dc:0b:d6:
ec:16:87:48:63:b3:cf:f8:a8:d9:71:37:92:f1:39:
58:22:f9:a2:0b:25:8d:f6:6e:65:7a:f4:15:81:6a:
1d:5a:9f:7f:90:df:c8:14:19:9d:79:58:bb:1b:92:
d8:fe:37:10:eb:d2:d3:a0:31:a1:3f:aa:7c:79:f7:
21:91:98:b2:9b:9f:36:18:a6:73:fc:3c:56:e5:6f:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:3F:6A:01:98:41:0D:0A:51:BF:07:80:47:03:83:32:D5:52:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5033BCAAABFA11EFAA4D4082762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.0.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a8:65:55:aa:48:e2:12:60:cd:8f:47:41:ae:04:c5:7e:63:
70:14:86:46:58:d4:3e:71:86:cc:f5:0b:9d:e7:17:29:4c:94:
b5:fd:0a:aa:49:f4:e5:aa:46:12:04:f5:4c:53:9e:9e:c5:86:
1b:8f:83:58:d3:e9:14:0c:e6:bb:0a:38:b9:90:4b:f6:97:22:
32:1b:33:bb:ed:40:2c:5b:0b:b0:bc:d3:c5:33:59:25:28:b3:
6e:4b:81:dc:55:e6:ef:b9:ec:a5:91:b2:b2:0e:4b:6d:d5:61:
86:4b:9b:32:d5:22:38:a3:80:2a:41:f0:1e:68:ca:77:f9:fa:
c8:7f:00:dd:bf:a7:a0:ef:c5:53:9d:a0:67:2c:08:4f:d1:8a:
78:27:41:7b:97:bf:49:0e:3a:1f:46:f2:be:43:b8:cd:a7:9f:
78:2e:af:23:bc:eb:fd:5e:c8:3a:72:ed:bb:b6:d1:3a:48:02:
21:06:69:ff:b6:bc:68:30:ad:d8:8f:60:0c:00:af:7d:4a:6e:
f2:99:e3:69:d4:f8:c9:49:0b:d1:72:70:72:96:8d:14:7b:62:
39:a5:5d:55:72:6e:41:04:2c:b8:73:5a:b8:11:3e:3f:c9:3f:
a1:7d:84:67:f5:07:73:2c:c8:ca:6d:7c:49:04:03:b2:05:e2:
d8:71:af:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARO7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI2MTMyODIxWhcNMjUxMDMwMTMyODIxWjAYMRYw
FAYDVQQDEw02NzQ1Y2NmOS1hNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArMnRth7tqFuBRLRzYZs8L/0qjmRltXP/3NLiEUxH5Xwb+kOskM4YIpvq
BOD3LsalzrRiOVXdZ/XOr0ox3KgnTblZR3aVKghqdBQuDm3RADM0yn6p5IxilNyd
cV6FinNx6uM2DiZqw5FgHbVxspllaFeacNLaaBIux60Qg0z+yXdW9cs9ctUsiMNp
ems/W5avmCx3HBlN8HqfRlCb+rBy0cB/CgM/zKQAsAOnrCtV3XTcC9bsFodIY7PP
+KjZcTeS8TlYIvmiCyWN9m5levQVgWodWp9/kN/IFBmdeVi7G5LY/jcQ69LToDGh
P6p8efchkZiym582GKZz/DxW5W9owQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIJB
P2oBmEENClG/B4BHA4My1VITMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MDMzQkNBQUFCRkExMUVGQUE0RDQwODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAqGVVqkjiEmDNj0dBrgTFfmNwFIZGWNQ+cYbM9Qud5xcpTJS1/Qqq
SfTlqkYSBPVMU56exYYbj4NY0+kUDOa7Cji5kEv2lyIyGzO77UAsWwuwvNPFM1kl
KLNuS4HcVebvueylkbKyDktt1WGGS5sy1SI4o4AqQfAeaMp3+frIfwDdv6eg78VT
naBnLAhP0Yp4J0F7l79JDjofRvK+Q7jNp594Lq8jvOv9Xsg6cu27ttE6SAIhBmn/
trxoMK3Yj2AMAK99Sm7ymeNp1PjJSQvRcnBylo0Ue2I5pV1Vcm5BBCy4c1q4ET4/
yT+hfYRn9QdzLMjKbXxJBAOyBeLYca/D
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:16:27 2025 by rpki-client