Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56C038FCC5ED11EF92B362B0762E951A.roa
File: 56C038FCC5ED11EF92B362B0762E951A.roa (raw, json)
Hash identifier: Y2C3OMI5wm1SAkxoltgR3K/+b9/7SPCO6Jv1rGxZcVM=
Subject key identifier: 32:A4:F6:88:3E:2C:52:61:6A:F7:62:C5:2C:F2:AF:10:2B:80:18:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56C038FCC5ED11EF92B362B0762E951A.roa
Signing time: Sun 29 Dec 2024 14:01:02 +0000
ROA not before: Sun 29 Dec 2024 14:00:59 +0000
ROA not after: Sun 12 Dec 2027 14:00:59 +0000
asID: 17561
IP address blocks: 154.211.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77240 (0x12db8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:00:59 2024 GMT
Not After : Dec 12 14:00:59 2027 GMT
Subject: CN=6771561e-4dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:e7:86:5e:08:27:d9:d4:23:6a:28:27:bb:
5b:3a:73:28:05:1a:2a:9f:dc:7a:1a:d2:0d:36:23:
9a:d3:50:92:34:e1:fd:f0:0c:ed:73:6a:81:52:d2:
d0:a8:a0:62:04:c3:54:1a:f1:40:80:8c:e5:26:f4:
e0:5f:36:7e:31:56:38:e7:58:b4:ce:47:2a:7a:96:
cf:d4:c2:32:fb:ed:2c:db:e0:d8:1f:17:11:d3:da:
c8:dc:62:ec:ec:7b:09:3d:4e:bc:82:ce:ba:88:18:
cd:d0:26:b1:5e:36:74:d5:a1:99:be:c1:5e:d4:05:
78:cf:b4:9a:e4:6d:fc:69:3b:d2:e4:ac:bd:64:84:
d0:28:82:a2:83:c3:d3:a5:92:b0:23:36:46:f3:0a:
d0:71:f3:b9:f2:27:4c:86:82:9d:cc:50:fc:92:70:
31:ff:ce:9b:e5:79:d4:be:32:7b:1b:14:b7:41:93:
68:ec:3d:95:16:cd:54:68:c2:fc:53:d5:44:66:e8:
67:9d:f6:1b:58:55:a9:c1:a5:5e:72:a4:aa:f3:69:
d8:e7:64:12:26:ef:ad:b6:18:33:4b:74:8a:8c:6e:
34:4a:17:38:a3:17:fe:b0:36:31:20:e3:ee:22:10:
c0:a4:05:cc:82:b8:07:c5:da:66:6e:92:c7:c9:c0:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:F6:88:3E:2C:52:61:6A:F7:62:C5:2C:F2:AF:10:2B:80:18:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56C038FCC5ED11EF92B362B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.35.0/24
Signature Algorithm: sha256WithRSAEncryption
71:62:04:49:60:59:23:c3:5b:c0:67:86:66:04:29:e3:6a:c3:
b6:1e:ef:31:20:26:a2:85:d7:0a:f7:91:70:53:14:b8:d0:bb:
b1:30:7f:fc:7b:2d:bb:db:05:36:e3:3e:f3:10:ab:d3:d2:fb:
48:7d:f8:1c:2f:69:67:ab:1a:4a:21:e3:3a:6e:0b:8c:3b:4c:
70:d2:ff:b0:82:df:02:60:31:0c:73:24:be:4b:cd:d1:28:14:
8f:ef:1b:63:55:98:74:16:b6:e4:6b:7b:b4:82:a4:95:b7:43:
07:eb:23:bd:5a:49:33:f5:a2:de:9b:93:8f:88:9e:48:23:0f:
b8:b9:af:b1:7e:9d:90:af:49:78:39:7d:3f:5c:29:49:8d:1b:
c5:b1:5e:78:38:fc:0e:4b:4f:9a:f2:3b:2d:9d:67:d5:51:5e:
6a:22:f1:99:00:0b:ba:bd:71:00:82:89:1f:ba:4b:98:9b:14:
fc:aa:be:bc:28:7e:77:78:cc:5a:7d:61:4e:17:0d:56:03:3e:
fa:94:e1:f3:f3:51:e1:9d:e6:29:99:52:18:35:3d:ba:24:f2:
47:de:87:46:13:ca:b9:78:ea:f0:5d:10:a5:7a:2c:22:99:e2:
fa:dc:dc:16:0c:94:02:e2:d2:00:50:e3:94:69:c2:b5:45:3a:
ed:34:3c:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS24MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTQwMDU5WhcNMjcxMjEyMTQwMDU5WjAYMRYw
FAYDVQQDEw02NzcxNTYxZS00ZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA42Hnhl4IJ9nUI2ooJ7tbOnMoBRoqn9x6GtINNiOa01CSNOH98Aztc2qB
UtLQqKBiBMNUGvFAgIzlJvTgXzZ+MVY451i0zkcqepbP1MIy++0s2+DYHxcR09rI
3GLs7HsJPU68gs66iBjN0CaxXjZ01aGZvsFe1AV4z7Sa5G38aTvS5Ky9ZITQKIKi
g8PTpZKwIzZG8wrQcfO58idMhoKdzFD8knAx/86b5XnUvjJ7GxS3QZNo7D2VFs1U
aML8U9VEZuhnnfYbWFWpwaVecqSq82nY52QSJu+tthgzS3SKjG40Shc4oxf+sDYx
IOPuIhDApAXMgrgHxdpmbpLHycBGVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDKk
9og+LFJhavdixSzyrxArgBihMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NkMwMzhGQ0M1RUQxMUVGOTJCMzYyQjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMjMA0GCSqGSIb3DQEB
CwUAA4IBAQBxYgRJYFkjw1vAZ4ZmBCnjasO2Hu8xICaihdcK95FwUxS40LuxMH/8
ey272wU24z7zEKvT0vtIffgcL2lnqxpKIeM6bguMO0xw0v+wgt8CYDEMcyS+S83R
KBSP7xtjVZh0Frbka3u0gqSVt0MH6yO9Wkkz9aLem5OPiJ5IIw+4ua+xfp2Qr0l4
OX0/XClJjRvFsV54OPwOS0+a8jstnWfVUV5qIvGZAAu6vXEAgokfukuYmxT8qr68
KH53eMxafWFOFw1WAz76lOHz81HhneYpmVIYNT26JPJH3odGE8q5eOrwXRCleiwi
meL63NwWDJQC4tIAUOOUacK1RTrtNDwm
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:23:59 2025 by rpki-client