Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62883018C1A111EF9AB80C59762E951A.roa
File: 62883018C1A111EF9AB80C59762E951A.roa (raw, json)
Hash identifier: 5mKknuyL5S0dnBg3dzK26wpTYPPZ0JwJKMWEkIg/y94=
Subject key identifier: 1E:75:71:52:2B:B9:AF:40:63:61:9E:A5:79:2D:EC:9F:D7:BB:93:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62883018C1A111EF9AB80C59762E951A.roa
Signing time: Tue 24 Dec 2024 02:47:16 +0000
ROA not before: Tue 24 Dec 2024 02:47:12 +0000
ROA not after: Wed 10 Dec 2025 02:47:12 +0000
asID: 984
IP address blocks: 154.90.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73911 (0x120b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:47:12 2024 GMT
Not After : Dec 10 02:47:12 2025 GMT
Subject: CN=676a20b4-295b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:a4:62:2a:d6:94:c8:57:24:e7:93:48:71:
04:21:4b:d6:08:57:63:cc:2e:b6:39:dc:ad:ba:0b:
f0:2f:b1:94:88:8c:1c:38:92:2c:34:4d:b7:4f:04:
2f:8b:25:32:b4:3e:8d:f0:fe:e9:74:31:f9:84:0c:
c1:5f:33:96:9a:41:d7:1f:8a:04:18:1e:ec:4d:c1:
c4:97:a1:9f:36:62:5d:fd:f0:11:d1:d5:02:9a:46:
4c:e8:23:c9:7c:a7:57:51:89:7c:15:85:77:55:7e:
78:5c:40:79:75:f2:ff:f3:d0:ae:fc:99:29:22:5f:
1e:ba:bc:0d:64:b1:a0:97:85:3a:bf:d9:72:07:2e:
45:8b:e4:49:dc:5e:b0:ce:f4:3e:d5:ca:2d:ef:57:
11:9e:f0:85:48:8c:c6:39:d8:f0:81:95:b8:98:9a:
2b:05:11:f9:6a:8b:55:76:df:19:c6:25:9e:9d:96:
45:a0:29:9a:34:a8:60:9a:4f:08:0e:eb:14:19:9b:
b5:66:73:b9:99:b3:0f:d7:2b:66:25:5e:3c:d1:32:
b7:c3:74:2f:eb:6d:0a:f2:96:88:67:8b:e8:98:7e:
58:7b:50:e3:a3:a2:0c:65:49:dd:91:1f:14:a3:88:
18:47:de:7b:74:1e:13:26:87:46:83:8f:0d:80:b0:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:75:71:52:2B:B9:AF:40:63:61:9E:A5:79:2D:EC:9F:D7:BB:93:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62883018C1A111EF9AB80C59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.247.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a2:c5:60:1e:85:a3:ca:8b:16:8b:13:44:fb:4f:df:84:f5:
83:1b:6d:49:ef:15:62:bf:7a:e3:32:8c:1c:34:1c:b1:2d:0f:
b9:64:73:c1:0b:31:16:8a:16:78:46:03:ee:1c:a2:1d:66:a1:
4d:25:07:c7:01:0b:fc:15:47:64:5e:ab:69:94:79:33:d6:07:
01:ef:a9:3c:06:f9:35:19:fc:92:95:f7:e1:e0:15:75:4e:10:
77:78:87:e2:35:0f:58:58:7a:56:64:2b:88:3b:3f:f5:5c:3d:
c8:7a:e7:29:d5:8f:43:db:cf:7b:eb:d5:69:5c:d4:59:51:57:
01:ec:f9:6a:67:b9:b6:41:45:6c:ac:62:27:31:ee:ac:91:ac:
5d:28:0c:de:4d:95:87:e7:24:58:96:37:86:ec:bf:c7:30:8e:
17:16:59:d8:78:b3:70:53:4d:c3:39:44:93:35:2b:1e:12:82:
02:d0:79:3d:07:78:87:98:f4:cb:a4:f1:d1:af:b9:9b:fd:d1:
b1:1b:90:4c:31:87:5d:d6:c2:83:39:3d:f9:c0:b2:97:f1:2e:
5d:f6:76:e9:d3:cb:17:ba:0b:f0:d3:09:18:2c:93:fd:6d:ea:
29:a8:af:fa:49:a7:4b:d6:70:69:42:00:d9:34:ff:c7:ad:8d:
59:75:3e:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASC3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDI0NzEyWhcNMjUxMjEwMDI0NzEyWjAYMRYw
FAYDVQQDEw02NzZhMjBiNC0yOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAug6kYirWlMhXJOeTSHEEIUvWCFdjzC62OdytugvwL7GUiIwcOJIsNE23
TwQviyUytD6N8P7pdDH5hAzBXzOWmkHXH4oEGB7sTcHEl6GfNmJd/fAR0dUCmkZM
6CPJfKdXUYl8FYV3VX54XEB5dfL/89Cu/JkpIl8eurwNZLGgl4U6v9lyBy5Fi+RJ
3F6wzvQ+1cot71cRnvCFSIzGOdjwgZW4mJorBRH5aotVdt8ZxiWenZZFoCmaNKhg
mk8IDusUGZu1ZnO5mbMP1ytmJV480TK3w3Qv620K8paIZ4vomH5Ye1Djo6IMZUnd
kR8Uo4gYR957dB4TJodGg48NgLA1XwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB51
cVIrua9AY2GepXkt7J/Xu5O/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Mjg4MzAxOEMxQTExMUVGOUFCODBDNTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlr3MA0GCSqGSIb3DQEB
CwUAA4IBAQAXosVgHoWjyosWixNE+0/fhPWDG21J7xViv3rjMowcNByxLQ+5ZHPB
CzEWihZ4RgPuHKIdZqFNJQfHAQv8FUdkXqtplHkz1gcB76k8Bvk1GfySlffh4BV1
ThB3eIfiNQ9YWHpWZCuIOz/1XD3Ieucp1Y9D289769VpXNRZUVcB7PlqZ7m2QUVs
rGInMe6skaxdKAzeTZWH5yRYljeG7L/HMI4XFlnYeLNwU03DOUSTNSseEoIC0Hk9
B3iHmPTLpPHRr7mb/dGxG5BMMYdd1sKDOT35wLKX8S5d9nbp08sXugvw0wkYLJP9
beopqK/6SadL1nBpQgDZNP/HrY1ZdT67
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:42 2025 by rpki-client