Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D1B019CC0D011EFA343D3A9762E951A.roa
File: 8D1B019CC0D011EFA343D3A9762E951A.roa (raw, json)
Hash identifier: K7MWZEpuknVXPWgkA4mEvwUwdJY7nclej3rLv6u/6jg=
Subject key identifier: 04:28:E9:10:19:0D:1F:92:DB:9C:CA:24:03:6F:5E:CA:3E:63:5E:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D1B019CC0D011EFA343D3A9762E951A.roa
Signing time: Mon 23 Dec 2024 01:52:22 +0000
ROA not before: Mon 23 Dec 2024 01:52:19 +0000
ROA not after: Wed 10 Dec 2025 01:52:19 +0000
asID: 984
IP address blocks: 154.83.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73262 (0x11e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:52:19 2024 GMT
Not After : Dec 10 01:52:19 2025 GMT
Subject: CN=6768c256-779f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:4e:5f:cd:c4:45:54:bf:30:4e:6d:06:c7:
b8:84:cc:db:ae:99:ce:19:79:33:47:06:92:4c:24:
3d:52:aa:0f:06:a4:4b:3d:0c:d6:d0:9f:9d:c7:2d:
c6:0b:61:30:63:60:e4:2c:a7:d5:04:16:01:68:82:
ae:2d:45:c4:d9:b7:a3:fc:6f:c7:48:f0:25:8a:45:
65:55:f0:3e:16:37:ab:24:88:db:5f:81:af:ff:b9:
9f:eb:16:86:9a:6c:f0:bf:b8:f6:bc:44:70:f4:22:
36:b6:56:ae:f2:8e:e7:6f:f5:f2:4d:70:7c:f2:95:
8f:4d:b5:77:69:87:d6:b6:50:ec:48:46:5c:01:e5:
f0:7a:2b:92:8a:9a:14:61:41:ae:1b:1d:df:a1:15:
46:28:0f:0d:66:f8:9c:64:29:92:70:94:a0:5c:24:
19:2f:38:6f:49:86:44:fd:75:b1:0c:1f:48:e1:fe:
b6:10:5e:73:05:06:ba:cf:c3:54:fa:22:05:52:e4:
47:1d:cc:4b:3f:3b:1f:3e:10:ba:54:5a:97:1a:ca:
6e:c4:e6:12:13:47:03:92:64:2d:13:02:ee:5b:ec:
32:7d:19:fa:37:9b:95:94:0d:ec:f4:f0:a9:66:21:
c8:4c:53:a3:26:9b:9b:de:82:59:12:a9:2a:ec:71:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:28:E9:10:19:0D:1F:92:DB:9C:CA:24:03:6F:5E:CA:3E:63:5E:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D1B019CC0D011EFA343D3A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.82.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0a:2a:16:72:f6:aa:8a:21:da:b4:7d:30:73:8f:a6:37:61:
07:df:1c:db:57:63:c2:45:87:40:fb:3a:77:1a:69:df:2f:13:
cd:c0:bd:ef:40:8d:38:c2:be:4a:04:fc:d5:59:0b:18:ee:23:
80:40:4a:2e:e7:cf:61:34:21:28:0d:a1:68:5a:e2:6a:62:d7:
8b:14:a0:1b:c8:0c:04:6a:72:cd:82:1b:7e:0d:a8:46:87:9f:
04:b2:79:5b:8e:3f:f2:95:40:33:59:5c:2b:58:81:09:00:ab:
c6:59:fd:ca:5a:00:4b:37:f9:25:ed:df:1d:cb:b7:1b:98:21:
bb:85:a7:c1:ae:fa:59:35:81:f0:ba:00:7c:a8:cd:da:bf:81:
1b:04:16:6b:63:87:0e:40:87:09:46:31:3b:54:78:a5:5a:43:
48:3b:b9:46:78:a0:e4:91:e8:fd:a9:bf:68:20:f8:2f:95:c3:
ce:78:f2:3f:29:ab:8d:1d:22:21:c0:89:f6:6f:bf:94:d8:11:
f1:2c:14:71:7a:31:ba:83:e6:4d:6d:d3:c6:2f:15:41:f2:f7:
81:69:15:19:8f:7d:4a:8e:d7:72:83:c2:54:27:36:c8:cc:a6:
9f:86:6a:c5:76:40:e7:23:59:d5:ba:3d:f1:bd:7f:80:ae:d9:
29:32:9d:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR4uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDE1MjE5WhcNMjUxMjEwMDE1MjE5WjAYMRYw
FAYDVQQDEw02NzY4YzI1Ni03NzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAusVOX83ERVS/ME5tBse4hMzbrpnOGXkzRwaSTCQ9UqoPBqRLPQzW0J+d
xy3GC2EwY2DkLKfVBBYBaIKuLUXE2bej/G/HSPAlikVlVfA+FjerJIjbX4Gv/7mf
6xaGmmzwv7j2vERw9CI2tlau8o7nb/XyTXB88pWPTbV3aYfWtlDsSEZcAeXweiuS
ipoUYUGuGx3foRVGKA8NZvicZCmScJSgXCQZLzhvSYZE/XWxDB9I4f62EF5zBQa6
z8NU+iIFUuRHHcxLPzsfPhC6VFqXGspuxOYSE0cDkmQtEwLuW+wyfRn6N5uVlA3s
9PCpZiHITFOjJpub3oJZEqkq7HFLSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAQo
6RAZDR+S25zKJANvXso+Y14mMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RDFCMDE5Q0MwRDAxMUVGQTM0M0QzQTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlNSMA0GCSqGSIb3DQEB
CwUAA4IBAQC7CioWcvaqiiHatH0wc4+mN2EH3xzbV2PCRYdA+zp3GmnfLxPNwL3v
QI04wr5KBPzVWQsY7iOAQEou589hNCEoDaFoWuJqYteLFKAbyAwEanLNght+DahG
h58Esnlbjj/ylUAzWVwrWIEJAKvGWf3KWgBLN/kl7d8dy7cbmCG7hafBrvpZNYHw
ugB8qM3av4EbBBZrY4cOQIcJRjE7VHilWkNIO7lGeKDkkej9qb9oIPgvlcPOePI/
KauNHSIhwIn2b7+U2BHxLBRxejG6g+ZNbdPGLxVB8veBaRUZj31Kjtdyg8JUJzbI
zKafhmrFdkDnI1nVuj3xvX+ArtkpMp0O
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:10 2025 by rpki-client