Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8225E2B2C60111EF9C401FAF762E951A.roa
File: 8225E2B2C60111EF9C401FAF762E951A.roa (raw, json)
Hash identifier: S9sff+VIXhjyJ/ktjkU9mF65FGGdEXWjM03HP9s0fpg=
Subject key identifier: FC:16:38:64:50:2F:77:2C:DC:79:B6:31:57:E3:BE:58:80:24:29:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8225E2B2C60111EF9C401FAF762E951A.roa
Signing time: Sun 29 Dec 2024 16:25:25 +0000
ROA not before: Sun 29 Dec 2024 16:25:21 +0000
ROA not after: Sun 12 Dec 2027 16:25:21 +0000
asID: 17561
IP address blocks: 154.217.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77410 (0x12e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:25:21 2024 GMT
Not After : Dec 12 16:25:21 2027 GMT
Subject: CN=677177f5-a39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:1f:b5:12:cb:ef:97:85:02:70:99:d0:60:
bd:6c:9f:34:95:06:1c:a3:35:a0:f7:83:dd:75:d0:
f6:78:7d:e1:89:d0:4d:48:50:da:dc:df:68:cc:f6:
d2:42:4b:7b:2f:57:dd:d0:87:6e:05:76:b0:fb:ad:
23:15:e8:2e:0f:64:7f:a1:a4:97:f4:81:ad:3b:8a:
fe:07:a7:f4:eb:6e:f5:b6:a0:6d:ca:ee:40:ec:41:
26:ea:44:63:03:20:66:20:16:f8:7a:1c:bc:ba:b5:
8e:54:65:dc:70:6b:df:20:4f:67:d1:fd:ec:65:10:
ff:53:60:84:bc:60:45:50:a8:ab:a6:17:26:60:7b:
0b:c0:59:28:ce:47:93:a1:f5:98:79:be:76:05:2d:
2d:6f:86:d4:36:ef:96:9b:c6:46:e6:c7:25:ae:99:
b1:b3:ac:7b:28:25:c4:e6:61:5a:30:90:2d:33:5c:
66:c7:50:3e:f4:bf:35:a6:3a:fc:40:bd:1a:1e:e2:
1a:a9:d2:c7:08:a7:bd:c8:6e:ce:b0:d8:31:2c:8a:
dd:fb:eb:ad:44:25:10:d7:10:59:73:bf:68:a4:44:
f3:9b:25:f4:6a:53:d0:99:18:f0:70:34:fd:28:20:
2b:68:a0:19:75:c8:34:59:d0:4e:15:94:ea:e7:0e:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:38:64:50:2F:77:2C:DC:79:B6:31:57:E3:BE:58:80:24:29:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8225E2B2C60111EF9C401FAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.20.0/24
Signature Algorithm: sha256WithRSAEncryption
92:15:f8:de:49:3f:5c:37:1e:75:9d:84:60:f3:e7:ae:fd:fb:
f8:f0:17:54:de:1b:b9:c5:cc:ac:05:1d:45:b6:ce:5d:c8:25:
9b:7a:92:5d:59:9c:43:32:5d:f1:29:64:88:d5:d1:d0:d7:4d:
16:b5:2e:2a:fd:86:c0:e1:33:71:df:cb:fb:f6:d2:ea:7c:df:
92:c0:75:cb:b0:ae:5e:5a:e1:bb:03:4e:6f:d1:a3:4b:08:f3:
13:48:56:6f:72:04:eb:08:4b:bb:66:6b:43:88:16:46:0e:e3:
3b:a0:7d:a2:3e:9d:42:4a:b8:6d:8e:c7:b3:26:94:5d:bf:b2:
e0:a8:62:49:f7:4a:04:6b:26:ae:8b:a6:20:ec:37:d9:93:bb:
24:d0:53:d9:75:f5:a8:ed:e0:62:ae:db:9f:12:60:c0:f6:2d:
7f:87:92:3e:ff:4b:5d:2d:44:a0:a2:87:3f:3a:7d:95:50:7a:
aa:e3:f7:78:eb:c5:3d:24:6e:49:b0:8b:52:aa:7f:c5:21:29:
9c:20:d1:f3:9f:36:5c:84:da:0e:72:1c:0e:db:59:1e:9f:4a:
78:c1:49:6b:3a:5f:26:be:8c:b3:0a:a5:7b:e1:d5:3b:9c:55:
5e:5c:71:ce:e7:59:0b:c4:58:4a:3f:b1:84:e0:e8:1f:cc:d2:
34:a9:49:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS5iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTYyNTIxWhcNMjcxMjEyMTYyNTIxWjAYMRYw
FAYDVQQDEw02NzcxNzdmNS1hMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2rYftRLL75eFAnCZ0GC9bJ80lQYcozWg94PdddD2eH3hidBNSFDa3N9o
zPbSQkt7L1fd0IduBXaw+60jFeguD2R/oaSX9IGtO4r+B6f06271tqBtyu5A7EEm
6kRjAyBmIBb4ehy8urWOVGXccGvfIE9n0f3sZRD/U2CEvGBFUKirphcmYHsLwFko
zkeTofWYeb52BS0tb4bUNu+Wm8ZG5sclrpmxs6x7KCXE5mFaMJAtM1xmx1A+9L81
pjr8QL0aHuIaqdLHCKe9yG7OsNgxLIrd++utRCUQ1xBZc79opETzmyX0alPQmRjw
cDT9KCAraKAZdcg0WdBOFZTq5w7UBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPwW
OGRQL3cs3Hm2MVfjvliAJCk/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MjI1RTJCMkM2MDExMUVGOUM0MDFGQUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtkUMA0GCSqGSIb3DQEB
CwUAA4IBAQCSFfjeST9cNx51nYRg8+eu/fv48BdU3hu5xcysBR1Fts5dyCWbepJd
WZxDMl3xKWSI1dHQ100WtS4q/YbA4TNx38v79tLqfN+SwHXLsK5eWuG7A05v0aNL
CPMTSFZvcgTrCEu7ZmtDiBZGDuM7oH2iPp1CSrhtjsezJpRdv7LgqGJJ90oEayau
i6Yg7DfZk7sk0FPZdfWo7eBirtufEmDA9i1/h5I+/0tdLUSgooc/On2VUHqq4/d4
68U9JG5JsItSqn/FISmcINHznzZchNoOchwO21ken0p4wUlrOl8mvoyzCqV74dU7
nFVeXHHO51kLxFhKP7GE4OgfzNI0qUmT
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:03 2025 by rpki-client