Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9987A61AC0CB11EF9866B885762E951A.roa
File: 9987A61AC0CB11EF9866B885762E951A.roa (raw, json)
Hash identifier: +w101cNPGK0aUuFMVau8Kk+jLJUhKsV3PRtUyXvLYMQ=
Subject key identifier: B6:2C:83:DE:BC:36:A0:56:00:18:EA:48:A9:E6:C4:5F:46:18:F7:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9987A61AC0CB11EF9866B885762E951A.roa
Signing time: Mon 23 Dec 2024 01:16:56 +0000
ROA not before: Mon 23 Dec 2024 01:16:52 +0000
ROA not after: Wed 10 Dec 2025 01:16:52 +0000
asID: 984
IP address blocks: 154.82.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73216 (0x11e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:16:52 2024 GMT
Not After : Dec 10 01:16:52 2025 GMT
Subject: CN=6768ba08-db8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:20:8f:3a:d5:7f:c3:36:b3:f1:3d:1c:a4:
b2:33:99:d7:fe:95:bf:e9:04:16:83:66:b2:5b:33:
94:2d:65:21:94:fd:41:f9:dd:c7:26:64:1f:f8:33:
88:2b:af:46:2c:b4:87:b4:1c:81:39:fc:b8:70:e6:
f1:5e:c9:08:b1:98:89:db:8f:cf:f6:00:ae:be:61:
77:89:f4:40:71:da:ba:06:cd:9e:8a:4f:19:aa:2f:
6c:21:15:79:22:0e:1b:0f:83:0c:25:96:fe:83:1d:
4e:85:12:20:56:7b:93:be:ad:cd:ce:61:6d:5c:3e:
68:f0:e7:9f:3e:4b:25:b3:39:9d:6b:4b:03:68:b9:
fc:47:48:9d:11:19:4a:9a:f9:00:83:24:cc:fd:ba:
ff:7f:f7:fc:f4:95:43:d3:ce:b2:67:7a:b1:85:d7:
8a:03:54:60:d1:dc:b3:7c:22:4a:d6:9f:32:a2:7e:
b0:b2:ec:04:39:ac:81:cf:80:f9:8f:f2:02:06:2d:
0b:75:db:f1:07:4b:74:fb:36:84:e3:88:5f:ff:d0:
01:ce:25:7d:66:e2:f1:69:b4:b7:96:06:7e:3b:33:
9f:e0:b2:46:eb:74:f8:66:a8:fa:52:48:95:35:83:
e9:d9:6f:cc:05:2b:10:24:16:b6:e9:58:e2:86:86:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2C:83:DE:BC:36:A0:56:00:18:EA:48:A9:E6:C4:5F:46:18:F7:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9987A61AC0CB11EF9866B885762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.243.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:b1:bb:43:5c:d6:95:b2:fc:d7:95:ef:83:5b:7d:47:c4:7b:
35:a3:39:9c:df:aa:20:eb:8a:32:aa:bd:5c:88:c3:f0:21:6e:
d4:71:1e:78:dd:0f:87:d8:b1:8a:d9:bc:0d:6d:88:50:d4:dc:
90:04:72:1c:57:40:69:27:3a:ad:9c:1f:2c:10:d2:e3:73:bd:
5c:90:68:c7:5b:46:73:f6:3f:16:68:06:4e:08:ab:93:c4:f6:
b7:70:8b:c3:68:bf:cd:43:e8:2f:6a:a5:7a:9d:85:1f:e0:17:
47:93:0b:4a:85:ac:26:a1:5b:a7:46:5e:1c:0d:75:72:ae:d9:
e7:c5:2a:59:b7:01:49:2d:59:4f:58:6f:2b:89:fe:9e:53:e9:
6c:db:88:1b:0d:95:ba:36:ad:23:69:ed:3b:ce:61:1d:b3:68:
02:76:f3:42:64:61:b3:91:de:c8:61:6f:da:a5:9d:d8:a7:04:
11:5c:61:e1:0c:17:ac:42:b5:de:36:57:24:49:31:7b:e6:ee:
f4:d7:a0:a1:c1:cf:3f:37:bc:c9:21:9c:10:67:3b:17:12:e8:
4a:7f:55:11:59:0b:47:c9:12:73:c7:99:18:5d:de:07:de:f4:
23:cc:df:d4:71:69:59:ca:72:cb:38:f8:a6:c2:d6:ce:ec:76:
42:ca:8e:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR4AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDExNjUyWhcNMjUxMjEwMDExNjUyWjAYMRYw
FAYDVQQDEw02NzY4YmEwOC1kYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyGggjzrVf8M2s/E9HKSyM5nX/pW/6QQWg2ayWzOULWUhlP1B+d3HJmQf
+DOIK69GLLSHtByBOfy4cObxXskIsZiJ24/P9gCuvmF3ifRAcdq6Bs2eik8Zqi9s
IRV5Ig4bD4MMJZb+gx1OhRIgVnuTvq3NzmFtXD5o8OefPkslszmda0sDaLn8R0id
ERlKmvkAgyTM/br/f/f89JVD086yZ3qxhdeKA1Rg0dyzfCJK1p8yon6wsuwEOayB
z4D5j/ICBi0LddvxB0t0+zaE44hf/9ABziV9ZuLxabS3lgZ+OzOf4LJG63T4Zqj6
UkiVNYPp2W/MBSsQJBa26Vjihoaw9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLYs
g968NqBWABjqSKnmxF9GGPemMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OTg3QTYxQUMwQ0IxMUVGOTg2NkI4ODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLzMA0GCSqGSIb3DQEB
CwUAA4IBAQDXsbtDXNaVsvzXle+DW31HxHs1ozmc36og64oyqr1ciMPwIW7UcR54
3Q+H2LGK2bwNbYhQ1NyQBHIcV0BpJzqtnB8sENLjc71ckGjHW0Zz9j8WaAZOCKuT
xPa3cIvDaL/NQ+gvaqV6nYUf4BdHkwtKhawmoVunRl4cDXVyrtnnxSpZtwFJLVlP
WG8rif6eU+ls24gbDZW6Nq0jae07zmEds2gCdvNCZGGzkd7IYW/apZ3YpwQRXGHh
DBesQrXeNlckSTF75u7016Chwc8/N7zJIZwQZzsXEuhKf1URWQtHyRJzx5kYXd4H
3vQjzN/UcWlZynLLOPimwtbO7HZCyo69
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:58 2025 by rpki-client