Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5693CC36C53411EF81BEF899762E951A.roa
File: 5693CC36C53411EF81BEF899762E951A.roa (raw, json)
Hash identifier: gcIeJUFYrRL9urG9OZLpT7PjC8ewfVe80g+bo/2BEFg=
Subject key identifier: AD:F0:97:D0:32:90:1B:DD:C2:8D:AC:CF:A4:C6:86:A8:87:F8:EF:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5693CC36C53411EF81BEF899762E951A.roa
Signing time: Sat 28 Dec 2024 15:56:45 +0000
ROA not before: Sat 28 Dec 2024 15:56:42 +0000
ROA not after: Sun 12 Dec 2027 15:56:42 +0000
asID: 17561
IP address blocks: 154.204.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76807 (0x12c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:56:42 2024 GMT
Not After : Dec 12 15:56:42 2027 GMT
Subject: CN=67701fbd-0683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:75:88:85:0b:b2:61:bf:31:e0:31:b8:68:
b9:c0:df:e5:2d:d1:13:b9:11:e9:36:59:5a:67:ea:
23:1d:64:af:98:65:80:62:b9:9a:8f:e5:03:95:9b:
65:1a:35:ab:3d:1f:6c:49:2b:2f:63:4c:78:ab:3c:
38:8b:7c:4a:ce:9e:88:9c:51:58:21:ba:9e:c4:cd:
83:38:56:80:da:a8:be:89:e1:ff:45:42:0d:13:e8:
4c:fe:af:4c:b5:7a:ef:87:6f:f7:fa:00:b6:b6:d8:
bc:c6:44:97:52:38:ac:87:ef:b8:f9:c6:22:42:c2:
4c:32:11:a9:92:89:b4:e3:d6:a9:1c:fe:5b:c7:af:
85:14:0e:13:3b:4d:c2:ce:a9:18:6a:a9:e9:dc:b3:
5d:11:83:96:fc:01:4e:b1:49:af:a4:37:4d:99:2f:
87:e7:70:69:49:44:e7:48:8c:90:c8:e9:20:2b:82:
80:0a:20:c5:95:8c:cc:36:75:ce:e5:b9:db:3a:fb:
bb:ff:78:86:89:1e:e2:38:b8:fc:a7:c6:24:68:ae:
60:cb:1a:89:55:85:11:64:92:57:b7:a6:19:c0:3c:
98:08:67:ee:d8:f8:3d:6d:50:4a:60:52:4b:4d:79:
67:01:37:07:a9:f8:0d:92:76:d9:e8:33:2e:4b:7a:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:97:D0:32:90:1B:DD:C2:8D:AC:CF:A4:C6:86:A8:87:F8:EF:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5693CC36C53411EF81BEF899762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.108.0/24
Signature Algorithm: sha256WithRSAEncryption
09:03:d6:a5:ac:69:7a:d8:01:de:c2:9f:3c:78:d4:d8:50:20:
b6:2f:61:b9:e0:b5:73:47:8c:4d:a8:44:68:e0:84:a2:b6:7b:
b4:74:a2:07:8a:04:f5:06:7e:f1:a9:4e:b2:83:11:69:bb:13:
79:4d:bc:0c:f0:f6:1f:6f:ee:43:da:ac:a7:a4:e3:cb:89:5f:
de:55:bd:46:a7:61:fb:24:c9:2c:2d:25:2e:50:5b:32:e9:88:
d4:d0:a2:af:bf:2d:ad:78:ae:e5:a8:cd:1f:da:84:8a:8b:04:
d6:f2:b6:4f:78:20:50:65:07:13:d3:b1:74:40:63:95:0b:ea:
a6:b0:3a:14:ab:1d:89:74:21:6a:18:65:94:dc:00:88:8d:40:
d1:29:d3:ee:04:d3:cc:3b:c1:28:f0:11:fb:52:77:88:c2:ab:
4c:c0:2f:ff:bd:7f:ac:32:79:6a:00:bf:60:52:a4:d0:bf:eb:
3b:da:dd:a6:7c:ce:1c:8b:df:25:cb:81:ff:10:a9:45:b5:c0:
08:24:6f:16:be:74:67:4e:b1:f3:35:55:d4:b1:10:54:3c:3a:
6f:34:11:13:99:95:5e:ce:19:3d:cb:4e:f2:96:8a:4a:9e:36:
26:68:8b:e9:ad:02:e5:6d:a1:cf:a2:16:ff:29:19:0f:41:62:
8d:89:85:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASwHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTU1NjQyWhcNMjcxMjEyMTU1NjQyWjAYMRYw
FAYDVQQDEw02NzcwMWZiZC0wNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZB1iIULsmG/MeAxuGi5wN/lLdETuRHpNllaZ+ojHWSvmGWAYrmaj+UD
lZtlGjWrPR9sSSsvY0x4qzw4i3xKzp6InFFYIbqexM2DOFaA2qi+ieH/RUINE+hM
/q9MtXrvh2/3+gC2tti8xkSXUjish++4+cYiQsJMMhGpkom049apHP5bx6+FFA4T
O03CzqkYaqnp3LNdEYOW/AFOsUmvpDdNmS+H53BpSUTnSIyQyOkgK4KACiDFlYzM
NnXO5bnbOvu7/3iGiR7iOLj8p8YkaK5gyxqJVYURZJJXt6YZwDyYCGfu2Pg9bVBK
YFJLTXlnATcHqfgNknbZ6DMuS3pmKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK3w
l9AykBvdwo2sz6TGhqiH+O+EMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NjkzQ0MzNkM1MzQxMUVGODFCRUY4OTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsxsMA0GCSqGSIb3DQEB
CwUAA4IBAQAJA9alrGl62AHewp88eNTYUCC2L2G54LVzR4xNqERo4ISitnu0dKIH
igT1Bn7xqU6ygxFpuxN5TbwM8PYfb+5D2qynpOPLiV/eVb1Gp2H7JMksLSUuUFsy
6YjU0KKvvy2teK7lqM0f2oSKiwTW8rZPeCBQZQcT07F0QGOVC+qmsDoUqx2JdCFq
GGWU3ACIjUDRKdPuBNPMO8Eo8BH7UneIwqtMwC//vX+sMnlqAL9gUqTQv+s72t2m
fM4ci98ly4H/EKlFtcAIJG8WvnRnTrHzNVXUsRBUPDpvNBETmZVezhk9y07ylopK
njYmaIvprQLlbaHPohb/KRkPQWKNiYUc
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:35 2025 by rpki-client