Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B6362EC36211EFA4AAED8D762E951A.roa
File: 69B6362EC36211EFA4AAED8D762E951A.roa (raw, json)
Hash identifier: OVsbAa8R/F1CTouwi4Wib4Rmlzdcw7k6fZD3VHKOzDI=
Subject key identifier: 99:3D:FA:F0:9B:3F:10:E9:A5:9A:FC:E6:A4:85:BE:A4:D5:9A:D2:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012670
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B6362EC36211EFA4AAED8D762E951A.roa
Signing time: Thu 26 Dec 2024 08:21:32 +0000
ROA not before: Thu 26 Dec 2024 08:21:28 +0000
ROA not after: Sun 12 Dec 2027 08:21:28 +0000
asID: 17561
IP address blocks: 154.92.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75376 (0x12670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:21:28 2024 GMT
Not After : Dec 12 08:21:28 2027 GMT
Subject: CN=676d120c-2f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:8a:9b:bb:23:3d:35:b5:37:27:d4:27:82:
c9:74:3f:66:1b:c0:10:d3:b6:71:14:8f:85:d8:99:
dd:80:41:08:77:36:0b:94:8c:c6:2d:70:20:d7:3b:
52:60:5b:a6:75:1b:f6:d3:9d:73:ea:62:41:29:4a:
a6:79:a3:c5:c3:e0:ed:5c:15:4c:94:d0:c0:cf:b2:
37:be:cc:fb:36:7b:a8:e8:f7:4b:9f:79:89:b5:9f:
6b:ae:85:d1:b9:c8:1b:45:9f:67:d1:d0:7c:7a:32:
95:6b:97:dc:51:ea:f8:fc:6e:0a:70:58:50:84:f3:
96:8b:0f:d8:36:b8:7c:3a:d4:2f:ef:ce:3c:22:d1:
98:0b:63:2a:af:1f:a5:5d:b4:e6:c6:65:b2:43:38:
f7:4e:8b:e8:d9:17:51:d0:bb:74:03:b8:94:81:54:
a1:bd:2a:f3:02:dc:49:3f:73:78:47:9c:07:8e:99:
01:c4:c8:bc:8c:28:86:6f:09:64:87:0c:73:3d:29:
c5:90:3c:dc:bc:2e:b2:85:2b:8c:0c:bd:b7:92:53:
29:13:07:ba:e5:54:75:26:d2:1a:52:91:09:b4:b5:
a8:21:36:8c:86:fc:38:49:2a:fb:eb:36:10:5f:df:
51:07:ce:06:a1:d4:47:63:e9:d4:e2:6e:1a:ba:b1:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:FA:F0:9B:3F:10:E9:A5:9A:FC:E6:A4:85:BE:A4:D5:9A:D2:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69B6362EC36211EFA4AAED8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:22:5b:e6:a0:8f:65:ba:f7:13:5a:f7:b3:51:46:fb:1a:f6:
87:3e:7b:46:0b:7c:24:17:d1:38:e9:7b:1b:ff:1a:08:c2:cb:
c5:52:78:b4:00:80:68:1a:33:db:8c:a7:eb:87:c0:74:8c:4f:
5d:83:a7:78:38:8d:0e:a6:b9:7e:de:a3:67:f0:bc:6d:d7:83:
c6:2b:dc:24:d2:a5:9d:2a:ea:3d:25:46:87:06:81:f2:a5:cb:
46:e3:93:d5:81:dd:1c:65:87:b4:9a:3f:78:4f:48:ed:3d:ed:
9a:e8:c9:61:cf:b7:5c:2e:f2:bd:ae:0a:7b:3e:8b:72:00:68:
02:39:46:22:79:67:0c:78:3c:22:54:12:6b:6c:e8:a3:ed:2c:
f4:d0:8b:ef:e2:c9:ad:ae:d5:c8:12:53:e4:e0:7f:3c:23:ad:
ce:6d:4a:0a:f3:1c:b0:0a:91:9a:31:ee:a9:9a:06:63:80:41:
dd:1d:76:bd:05:82:87:3c:4c:72:e3:97:a1:e8:a6:36:6f:24:
d7:8e:1a:fa:7a:03:94:cc:af:9e:c7:86:ad:1d:72:d7:d7:ad:
62:5f:94:fa:9a:48:81:d8:79:fb:2f:bb:8b:1d:48:d8:94:20:
db:7d:29:b8:e6:1a:3d:ba:96:8a:ba:aa:26:94:24:66:1b:79:
b4:6c:a4:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASZwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDgyMTI4WhcNMjcxMjEyMDgyMTI4WjAYMRYw
FAYDVQQDEw02NzZkMTIwYy0yZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4xOKm7sjPTW1NyfUJ4LJdD9mG8AQ07ZxFI+F2JndgEEIdzYLlIzGLXAg
1ztSYFumdRv2051z6mJBKUqmeaPFw+DtXBVMlNDAz7I3vsz7Nnuo6PdLn3mJtZ9r
roXRucgbRZ9n0dB8ejKVa5fcUer4/G4KcFhQhPOWiw/YNrh8OtQv7848ItGYC2Mq
rx+lXbTmxmWyQzj3Tovo2RdR0Lt0A7iUgVShvSrzAtxJP3N4R5wHjpkBxMi8jCiG
bwlkhwxzPSnFkDzcvC6yhSuMDL23klMpEwe65VR1JtIaUpEJtLWoITaMhvw4SSr7
6zYQX99RB84GodRHY+nU4m4aurGkkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJk9
+vCbPxDppZr85qSFvqTVmtJkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUI2MzYyRUMzNjIxMUVGQTRBQUVEOEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwVMA0GCSqGSIb3DQEB
CwUAA4IBAQAsIlvmoI9luvcTWvezUUb7GvaHPntGC3wkF9E46Xsb/xoIwsvFUni0
AIBoGjPbjKfrh8B0jE9dg6d4OI0Oprl+3qNn8Lxt14PGK9wk0qWdKuo9JUaHBoHy
pctG45PVgd0cZYe0mj94T0jtPe2a6Mlhz7dcLvK9rgp7PotyAGgCOUYieWcMeDwi
VBJrbOij7Sz00Ivv4smtrtXIElPk4H88I63ObUoK8xywCpGaMe6pmgZjgEHdHXa9
BYKHPExy45eh6KY2byTXjhr6egOUzK+ex4atHXLX161iX5T6mkiB2Hn7L7uLHUjY
lCDbfSm45ho9upaKuqomlCRmG3m0bKQZ
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:43:40 2025 by rpki-client