Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F83F44C3D311EF891C3155762E951A.roa
File: 69F83F44C3D311EF891C3155762E951A.roa (raw, json)
Hash identifier: xZltClKVegWnQBroye+7BuD/pi77kZTbb7Agt63o8DI=
Subject key identifier: 30:5B:D0:2A:D6:E1:51:7E:0B:C4:37:04:0C:AB:0B:BD:73:C5:15:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012858
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F83F44C3D311EF891C3155762E951A.roa
Signing time: Thu 26 Dec 2024 21:50:26 +0000
ROA not before: Thu 26 Dec 2024 21:50:22 +0000
ROA not after: Sun 12 Dec 2027 21:50:22 +0000
asID: 17561
IP address blocks: 154.83.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75864 (0x12858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:50:22 2024 GMT
Not After : Dec 12 21:50:22 2027 GMT
Subject: CN=676dcfa1-d435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:18:27:2e:a2:07:5a:da:35:50:c9:e5:cf:
c8:e3:81:91:0a:9e:f7:d3:1b:6c:18:3e:dd:f4:33:
f4:c2:a5:48:dc:bd:71:9b:ba:66:f8:0b:9e:c5:cf:
c6:16:bb:05:c4:2f:c1:f6:54:b4:bc:45:0a:cc:43:
8c:8a:5f:12:f5:a0:e9:70:3f:75:d2:6f:c0:86:87:
24:fd:3a:fe:58:d4:7d:97:ba:b8:0e:b5:75:bc:cf:
a5:6a:9f:d2:b7:ae:8d:18:da:81:53:8e:ee:8b:38:
2a:20:18:fc:ec:11:ed:71:bf:6e:b2:34:71:2f:06:
3f:e3:a5:05:83:41:7d:31:cf:e9:23:d4:db:d7:92:
cf:1d:b0:d1:d8:75:fd:8a:5d:10:cd:0e:28:7f:8c:
a8:12:3d:54:76:0a:76:3a:79:85:f0:ab:90:f8:61:
51:7a:62:ef:fd:78:06:c8:e4:2f:c3:17:f6:3b:51:
5b:57:9f:38:da:30:7b:2f:63:79:f7:6e:30:1d:75:
68:01:de:29:b5:7f:55:8a:73:5d:2a:fc:06:29:e0:
6b:5d:07:35:62:44:44:a6:1d:48:60:fe:92:f8:b7:
d8:3f:9d:b2:b8:a5:30:10:e5:09:9b:3d:e2:6f:fa:
85:21:4c:e4:97:f2:fc:14:06:1d:20:ef:1f:57:bb:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5B:D0:2A:D6:E1:51:7E:0B:C4:37:04:0C:AB:0B:BD:73:C5:15:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F83F44C3D311EF891C3155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0b:a4:5b:59:ff:92:4f:5f:2e:3a:83:01:a0:78:0c:26:e2:
cd:43:b2:09:1d:e9:dc:9b:29:af:68:e0:e6:00:42:bc:3e:b0:
73:c9:e9:de:9f:40:3b:7b:36:50:71:c7:06:a0:19:22:8f:90:
0e:b7:6a:b2:ee:30:86:56:8b:16:88:c1:b7:53:b7:63:9c:0b:
cb:56:f5:5d:6f:a5:9c:eb:83:b1:12:c2:fa:e0:60:20:2b:d2:
ef:c8:9f:bb:2c:c2:5a:ea:43:58:71:f9:db:18:cf:19:f4:c4:
9d:02:57:e8:27:8c:fd:04:b7:93:55:52:80:93:b7:08:be:ff:
cd:d7:26:a2:49:8a:9e:72:85:d4:e2:4b:6f:bd:cc:65:5e:b5:
ea:00:45:4c:97:c2:e4:d3:c1:54:9c:7e:62:ff:98:4c:ca:a9:
cd:9c:7d:89:71:9f:18:35:ce:eb:81:e4:f7:bc:aa:c0:ee:c2:
bc:91:3e:3e:a4:06:0b:98:28:cf:ee:a3:14:00:71:49:67:4e:
be:db:82:f1:64:d5:93:a2:e6:0c:7f:a5:4f:12:67:c8:ac:18:
1c:25:42:36:f4:25:3b:72:6e:fb:40:41:40:b6:be:ed:c1:af:
40:b8:87:08:c1:b2:9e:bf:97:58:42:81:59:f1:c9:a4:14:c7:
37:0a:79:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAShYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjE1MDIyWhcNMjcxMjEyMjE1MDIyWjAYMRYw
FAYDVQQDEw02NzZkY2ZhMS1kNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1SMYJy6iB1raNVDJ5c/I44GRCp730xtsGD7d9DP0wqVI3L1xm7pm+Aue
xc/GFrsFxC/B9lS0vEUKzEOMil8S9aDpcD910m/Ahock/Tr+WNR9l7q4DrV1vM+l
ap/St66NGNqBU47uizgqIBj87BHtcb9usjRxLwY/46UFg0F9Mc/pI9Tb15LPHbDR
2HX9il0QzQ4of4yoEj1Udgp2OnmF8KuQ+GFRemLv/XgGyOQvwxf2O1FbV5842jB7
L2N5924wHXVoAd4ptX9VinNdKvwGKeBrXQc1YkREph1IYP6S+LfYP52yuKUwEOUJ
mz3ib/qFIUzkl/L8FAYdIO8fV7ttHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDBb
0CrW4VF+C8Q3BAyrC71zxRXTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUY4M0Y0NEMzRDMxMUVGODkxQzMxNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPTMA0GCSqGSIb3DQEB
CwUAA4IBAQBvC6RbWf+ST18uOoMBoHgMJuLNQ7IJHencmymvaODmAEK8PrBzyene
n0A7ezZQcccGoBkij5AOt2qy7jCGVosWiMG3U7djnAvLVvVdb6Wc64OxEsL64GAg
K9LvyJ+7LMJa6kNYcfnbGM8Z9MSdAlfoJ4z9BLeTVVKAk7cIvv/N1yaiSYqecoXU
4ktvvcxlXrXqAEVMl8Lk08FUnH5i/5hMyqnNnH2JcZ8YNc7rgeT3vKrA7sK8kT4+
pAYLmCjP7qMUAHFJZ06+24LxZNWTouYMf6VPEmfIrBgcJUI29CU7cm77QEFAtr7t
wa9AuIcIwbKev5dYQoFZ8cmkFMc3Cnk6
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:13 2025 by rpki-client