Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668DF8A8C60D11EFACCB9779762E951A.roa
File: 668DF8A8C60D11EFACCB9779762E951A.roa (raw, json)
Hash identifier: 7Qot+3B43zWYzhjdGE9EGt8f36b1M5HycvU5Q5I5gPw=
Subject key identifier: 68:88:1A:80:D8:09:81:99:46:C4:77:B9:FE:31:33:E9:A4:DC:CF:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668DF8A8C60D11EFACCB9779762E951A.roa
Signing time: Sun 29 Dec 2024 17:50:33 +0000
ROA not before: Sun 29 Dec 2024 17:50:29 +0000
ROA not after: Sun 12 Dec 2027 17:50:29 +0000
asID: 17561
IP address blocks: 154.217.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77512 (0x12ec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:50:29 2024 GMT
Not After : Dec 12 17:50:29 2027 GMT
Subject: CN=67718be9-bbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:e1:62:bc:85:2d:57:59:85:56:31:ba:53:
19:29:77:8e:22:f8:f8:03:ec:08:f5:18:0a:3a:4d:
75:79:d4:f0:85:1b:29:dd:87:01:1e:72:de:36:ec:
6a:28:d3:8b:49:7f:6e:52:34:e1:4f:af:4e:31:cc:
fa:9d:9f:b7:01:50:a0:d8:a1:db:a4:c1:08:71:00:
2e:31:c1:c8:98:0f:5c:ac:1a:22:ef:3f:4a:a0:a8:
7f:42:8c:8d:52:17:95:49:85:73:44:d5:b7:df:71:
6d:b4:8b:36:f3:2e:07:a7:7b:60:dc:81:f4:35:6a:
14:9f:13:47:48:77:83:dd:79:46:4a:1b:fb:dd:fe:
7e:52:4b:60:e2:ee:5e:42:48:40:34:a7:b6:17:ff:
39:20:61:f8:7a:28:a6:99:52:eb:a7:bc:38:cb:fa:
4f:3b:5e:5d:2e:ee:a0:38:4f:05:09:6a:a4:35:3e:
5f:1d:17:da:63:33:57:69:3c:67:63:73:7d:75:70:
4a:6c:b2:20:48:0a:d2:8d:6c:ce:41:bf:35:8c:24:
8c:03:04:1c:af:90:7c:70:3a:ec:cf:32:84:49:a0:
da:29:4e:74:00:ab:ad:c7:37:9b:42:e2:85:f3:b8:
4c:53:d5:b4:c4:e1:8d:1e:79:41:c8:6b:8f:b0:ed:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:88:1A:80:D8:09:81:99:46:C4:77:B9:FE:31:33:E9:A4:DC:CF:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668DF8A8C60D11EFACCB9779762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4a:f6:85:d2:dc:19:ef:1a:e3:bb:4e:f4:9a:10:c7:c0:a6:
84:f3:aa:71:5f:88:59:af:7f:71:56:24:4d:a5:38:da:29:1e:
30:86:31:e4:59:cb:c6:95:cb:3c:7b:15:30:7c:73:a1:3b:86:
a9:c6:fa:d3:4e:53:cd:e1:b0:9b:2a:dd:0f:37:26:f0:91:2b:
dc:75:08:3b:f6:58:78:85:7a:c4:0d:e1:00:f8:44:c6:ec:c4:
ac:9b:69:91:2c:0d:11:00:1f:f3:be:de:fb:59:9c:ec:17:d1:
ce:81:33:15:21:ee:08:13:71:db:91:3d:11:7a:e3:ae:4f:cf:
0a:ab:e0:9c:be:36:76:8e:c9:e8:91:e5:62:7c:b1:b0:35:ae:
55:4b:f2:fd:6e:02:0e:22:54:bf:be:d8:37:a3:1d:4a:d0:83:
6e:fd:ce:1d:f3:04:bd:d9:11:4c:a0:ba:e6:29:0d:f9:ad:13:
79:eb:70:17:03:42:8a:02:03:ee:f3:c5:6a:77:59:25:c3:6a:
65:2c:db:62:cf:a3:c1:ba:bc:9b:58:f6:b9:98:1b:c9:c0:ae:
84:c4:7a:81:07:86:4c:cb:14:e3:5a:5f:0e:60:d7:bb:d4:29:
da:4a:8d:37:0a:eb:17:60:85:84:9a:63:ca:80:20:04:0c:de:
fe:dc:42:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS7IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTc1MDI5WhcNMjcxMjEyMTc1MDI5WjAYMRYw
FAYDVQQDEw02NzcxOGJlOS1iYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwvPhYryFLVdZhVYxulMZKXeOIvj4A+wI9RgKOk11edTwhRsp3YcBHnLe
NuxqKNOLSX9uUjThT69OMcz6nZ+3AVCg2KHbpMEIcQAuMcHImA9crBoi7z9KoKh/
QoyNUheVSYVzRNW333FttIs28y4Hp3tg3IH0NWoUnxNHSHeD3XlGShv73f5+Uktg
4u5eQkhANKe2F/85IGH4eiimmVLrp7w4y/pPO15dLu6gOE8FCWqkNT5fHRfaYzNX
aTxnY3N9dXBKbLIgSArSjWzOQb81jCSMAwQcr5B8cDrszzKESaDaKU50AKutxzeb
QuKF87hMU9W0xOGNHnlByGuPsO0hCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGiI
GoDYCYGZRsR3uf4xM+mk3M/cMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NjhERjhBOEM2MEQxMUVGQUNDQjk3Nzk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtlHMA0GCSqGSIb3DQEB
CwUAA4IBAQCwSvaF0twZ7xrju070mhDHwKaE86pxX4hZr39xViRNpTjaKR4whjHk
WcvGlcs8exUwfHOhO4apxvrTTlPN4bCbKt0PNybwkSvcdQg79lh4hXrEDeEA+ETG
7MSsm2mRLA0RAB/zvt77WZzsF9HOgTMVIe4IE3HbkT0ReuOuT88Kq+CcvjZ2jsno
keVifLGwNa5VS/L9bgIOIlS/vtg3ox1K0INu/c4d8wS92RFMoLrmKQ35rRN563AX
A0KKAgPu88Vqd1klw2plLNtiz6PBurybWPa5mBvJwK6ExHqBB4ZMyxTjWl8OYNe7
1CnaSo03CusXYIWEmmPKgCAEDN7+3EJA
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:33:03 2025 by rpki-client