Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C59E216C1D211EF9F56E191762E951A.roa
File: 8C59E216C1D211EF9F56E191762E951A.roa (raw, json)
Hash identifier: X5kvRKNdy10bBT5NrjB5iGA0v9qhE4AWbIOoBUF9aU4=
Subject key identifier: F5:2A:B2:C7:07:A8:CE:80:A3:12:04:44:AB:1C:71:7F:A3:9E:81:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0122B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C59E216C1D211EF9F56E191762E951A.roa
Signing time: Tue 24 Dec 2024 08:39:12 +0000
ROA not before: Tue 24 Dec 2024 08:39:08 +0000
ROA not after: Wed 10 Dec 2025 08:39:08 +0000
asID: 984
IP address blocks: 154.193.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74419 (0x122b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 08:39:08 2024 GMT
Not After : Dec 10 08:39:08 2025 GMT
Subject: CN=676a732f-16d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:5f:e9:96:36:ec:02:1a:9a:8f:76:09:95:
dd:76:1b:ff:77:15:d9:be:ca:7e:62:3d:bc:b7:bb:
ff:ec:80:aa:8e:d8:08:5c:3d:cb:d5:7c:27:59:49:
bc:20:e8:19:2a:9d:5b:95:4e:ba:88:ce:e8:11:b4:
5f:6e:04:52:cd:41:8c:de:ab:14:2e:e5:36:3b:69:
78:22:cf:b8:37:94:48:b0:9a:0b:92:cd:14:f6:8c:
4d:da:2e:51:cb:22:99:db:62:ae:b6:b0:65:ec:72:
66:8b:9e:b3:ab:c4:76:f7:69:7d:67:50:91:82:f2:
d5:0e:13:56:26:29:10:06:b7:16:65:a9:b8:79:d3:
88:6f:a2:f5:01:fe:25:58:a1:33:0e:d8:98:23:04:
e9:61:11:ca:b1:05:b7:a9:49:c1:fb:6c:2e:96:18:
51:13:01:9d:08:e3:f8:80:4b:2e:ee:d1:60:c1:d4:
8f:20:3f:45:c2:52:9e:43:18:a0:11:8b:42:52:c2:
db:2b:a4:6e:0d:b4:52:33:40:a3:9a:52:5f:3b:76:
3a:81:af:e0:aa:02:16:e8:b9:88:59:5e:de:6b:d8:
74:71:27:2b:60:7c:f0:fb:7c:93:71:5d:2d:89:50:
73:fa:e3:82:e6:bc:7b:cb:84:dc:08:18:03:82:6b:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2A:B2:C7:07:A8:CE:80:A3:12:04:44:AB:1C:71:7F:A3:9E:81:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C59E216C1D211EF9F56E191762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.249.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:b4:6e:05:1d:fe:9f:44:f6:40:76:f5:c6:18:2f:99:9b:ea:
e4:72:b7:19:ae:5c:be:fb:d9:c4:f0:ab:c9:9c:be:1a:84:71:
94:73:e6:89:b3:6b:e4:e7:97:c7:bc:5b:5c:8a:bb:97:f6:7e:
d5:e6:bd:54:89:3f:ad:5b:3e:35:6a:ab:4c:ae:5a:a4:48:d0:
f8:b4:c8:7a:5c:48:5e:53:88:30:64:08:9e:89:72:72:e1:e8:
6e:c0:77:20:a3:0a:0a:ef:51:e1:27:6d:7e:4b:e1:8a:0d:33:
bc:2c:00:62:19:0b:2c:1e:c5:b8:13:c1:a7:cb:7d:93:cc:bd:
a1:d0:48:3b:03:a1:dd:39:f1:e9:c4:2c:82:f4:5a:c8:fa:a6:
dd:11:f4:52:21:54:e9:3f:40:6a:a9:2c:69:df:b1:fa:45:71:
86:f3:47:2a:05:92:60:8d:ef:28:a4:3c:c9:1b:ec:67:51:ca:
f6:66:0f:a0:e5:a7:9f:68:4c:84:09:de:0e:57:b7:a5:d5:f9:
d4:cb:f0:c8:d7:66:74:39:03:cc:90:86:93:73:61:2a:e5:bb:
26:77:6c:58:10:1a:7a:f4:51:5a:9f:76:16:6f:99:dd:2b:7f:
a7:f0:12:1f:b4:04:10:56:90:fb:87:d6:c5:4e:31:f1:28:36:
db:d7:29:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASKzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDgzOTA4WhcNMjUxMjEwMDgzOTA4WjAYMRYw
FAYDVQQDEw02NzZhNzMyZi0xNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtfNf6ZY27AIamo92CZXddhv/dxXZvsp+Yj28t7v/7ICqjtgIXD3L1Xwn
WUm8IOgZKp1blU66iM7oEbRfbgRSzUGM3qsULuU2O2l4Is+4N5RIsJoLks0U9oxN
2i5RyyKZ22KutrBl7HJmi56zq8R292l9Z1CRgvLVDhNWJikQBrcWZam4edOIb6L1
Af4lWKEzDtiYIwTpYRHKsQW3qUnB+2wulhhREwGdCOP4gEsu7tFgwdSPID9FwlKe
QxigEYtCUsLbK6RuDbRSM0CjmlJfO3Y6ga/gqgIW6LmIWV7ea9h0cScrYHzw+3yT
cV0tiVBz+uOC5rx7y4TcCBgDgmuVcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPUq
sscHqM6AoxIERKsccX+jnoHRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QzU5RTIxNkMxRDIxMUVGOUY1NkUxOTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsH5MA0GCSqGSIb3DQEB
CwUAA4IBAQDTtG4FHf6fRPZAdvXGGC+Zm+rkcrcZrly++9nE8KvJnL4ahHGUc+aJ
s2vk55fHvFtciruX9n7V5r1UiT+tWz41aqtMrlqkSND4tMh6XEheU4gwZAieiXJy
4ehuwHcgowoK71HhJ21+S+GKDTO8LABiGQssHsW4E8Gny32TzL2h0Eg7A6HdOfHp
xCyC9FrI+qbdEfRSIVTpP0BqqSxp37H6RXGG80cqBZJgje8opDzJG+xnUcr2Zg+g
5aefaEyECd4OV7el1fnUy/DI12Z0OQPMkIaTc2Eq5bsmd2xYEBp69FFan3YWb5nd
K3+n8BIftAQQVpD7h9bFTjHxKDbb1ymj
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:47 2025 by rpki-client