Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CF8EE4C26711EF91052153762E951A.roa
File: 83CF8EE4C26711EF91052153762E951A.roa (raw, json)
Hash identifier: DWpqlwq6frt5KYyZGmm0zEUf0xyednPcLP3TQvaP9CI=
Subject key identifier: 11:0D:13:6E:AE:77:25:D6:BC:07:11:3B:6B:DF:5F:FF:EB:4E:4B:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CF8EE4C26711EF91052153762E951A.roa
Signing time: Wed 25 Dec 2024 02:25:32 +0000
ROA not before: Wed 25 Dec 2024 02:25:28 +0000
ROA not after: Wed 10 Dec 2025 02:25:28 +0000
asID: 984
IP address blocks: 154.199.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74746 (0x123fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:25:28 2024 GMT
Not After : Dec 10 02:25:28 2025 GMT
Subject: CN=676b6d1c-f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:e4:ff:a3:33:47:87:82:d4:83:1c:fb:87:
d5:f2:d6:0d:a2:4a:f1:a5:4d:00:c9:a9:cb:e0:72:
8f:00:e8:f0:40:c5:d2:05:b5:56:9a:fe:4b:da:6e:
c5:a3:3a:a5:35:b7:2b:89:de:b6:32:8d:0c:4b:d4:
8e:c2:43:37:b3:07:3d:6e:80:b0:06:cb:f9:83:6b:
79:32:c0:fe:97:a6:f1:3e:9f:a7:c0:8b:d3:7a:16:
f7:4a:a6:ed:ff:27:ad:2c:01:36:6d:5b:05:22:b1:
25:24:07:44:91:1d:7d:5b:52:3c:1d:87:b1:63:ed:
6b:9a:eb:58:88:42:73:05:ec:99:dc:e6:61:1c:24:
0f:1f:1a:04:ef:94:de:18:a1:8c:6a:6c:14:9e:c5:
ab:d6:ab:1d:e6:d6:17:c9:ba:fa:ac:0a:d0:6d:c0:
53:96:24:57:d7:83:c9:90:33:81:92:90:43:d6:b3:
07:a9:9a:9d:b7:29:aa:8c:ac:75:e5:65:a8:7c:7c:
3d:0b:85:24:b2:0a:78:81:a8:14:bb:3a:62:2f:e2:
ed:b2:2e:62:b9:a8:ec:4f:0d:cf:d0:35:3e:de:0b:
a6:f6:fa:16:24:ec:5e:f9:fd:f9:86:67:f1:d0:41:
7c:e7:9a:be:a1:42:77:1e:d4:61:55:f1:e8:9a:93:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0D:13:6E:AE:77:25:D6:BC:07:11:3B:6B:DF:5F:FF:EB:4E:4B:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CF8EE4C26711EF91052153762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a5:6b:d3:71:df:b6:94:b1:79:fb:63:c7:d1:8a:a6:8f:15:
ad:16:c9:6e:18:c4:60:67:1d:6c:59:6a:4b:1e:fa:2f:cf:58:
df:a3:e7:ca:67:43:80:a5:bc:08:ff:b2:ad:ae:07:6d:42:c5:
b1:30:e3:94:d8:92:9d:74:ea:0e:9e:bf:19:82:87:f9:72:98:
f6:93:4a:74:4a:0e:87:7d:d6:b3:75:f7:69:3a:7b:a9:05:e9:
0e:85:a1:fe:26:16:a0:9c:f2:f0:40:a1:b0:27:b0:d0:15:60:
dc:75:31:9a:69:f7:7c:bb:18:71:9a:96:80:c5:c5:71:a0:cf:
90:23:e0:57:fd:e0:6b:a9:4a:0b:75:c9:fc:37:ac:97:a0:60:
bc:3a:0a:d0:30:81:7c:dc:ed:80:f7:ff:11:93:b1:e6:55:93:
65:39:ca:4c:f6:12:7c:9d:1a:cc:1a:ad:27:8a:bb:a4:47:63:
c0:4a:c6:3b:c3:bd:c5:83:dc:f8:7e:20:a9:62:45:ac:6c:3b:
a9:c7:b8:44:d9:46:5d:8d:c9:e3:38:62:3e:9d:e8:67:65:49:
63:c7:8d:13:3b:3c:d6:d3:6d:e5:30:ae:23:65:d7:22:b4:e3:
dc:66:0c:6c:63:c2:d2:c9:b4:78:bd:9b:08:17:80:a7:83:85:
fb:9b:f8:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASP6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDIyNTI4WhcNMjUxMjEwMDIyNTI4WjAYMRYw
FAYDVQQDEw02NzZiNmQxYy1mMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxcDk/6MzR4eC1IMc+4fV8tYNokrxpU0AyanL4HKPAOjwQMXSBbVWmv5L
2m7FozqlNbcrid62Mo0MS9SOwkM3swc9boCwBsv5g2t5MsD+l6bxPp+nwIvTehb3
Sqbt/yetLAE2bVsFIrElJAdEkR19W1I8HYexY+1rmutYiEJzBeyZ3OZhHCQPHxoE
75TeGKGMamwUnsWr1qsd5tYXybr6rArQbcBTliRX14PJkDOBkpBD1rMHqZqdtymq
jKx15WWofHw9C4Uksgp4gagUuzpiL+Ltsi5iuajsTw3P0DU+3gum9voWJOxe+f35
hmfx0EF855q+oUJ3HtRhVfHompMiEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBEN
E26udyXWvAcRO2vfX//rTkteMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84M0NGOEVFNEMyNjcxMUVGOTEwNTIxNTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsfPMA0GCSqGSIb3DQEB
CwUAA4IBAQC4pWvTcd+2lLF5+2PH0YqmjxWtFsluGMRgZx1sWWpLHvovz1jfo+fK
Z0OApbwI/7KtrgdtQsWxMOOU2JKddOoOnr8Zgof5cpj2k0p0Sg6HfdazdfdpOnup
BekOhaH+JhagnPLwQKGwJ7DQFWDcdTGaafd8uxhxmpaAxcVxoM+QI+BX/eBrqUoL
dcn8N6yXoGC8OgrQMIF83O2A9/8Rk7HmVZNlOcpM9hJ8nRrMGq0nirukR2PASsY7
w73Fg9z4fiCpYkWsbDupx7hE2UZdjcnjOGI+nehnZUljx40TOzzW023lMK4jZdci
tOPcZgxsY8LSybR4vZsIF4Cng4X7m/jj
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:40 2025 by rpki-client