Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2CC571AC1B211EFBE64154C762E951A.roa
File: A2CC571AC1B211EFBE64154C762E951A.roa (raw, json)
Hash identifier: +3OkfnyPg5GVtfOR6a5sxugIR/qY0KbuKldXC8Znyj4=
Subject key identifier: 14:6A:44:81:A2:D8:2F:D3:20:A5:2E:87:40:51:92:CA:2E:35:11:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012187
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2CC571AC1B211EFBE64154C762E951A.roa
Signing time: Tue 24 Dec 2024 04:50:45 +0000
ROA not before: Tue 24 Dec 2024 04:50:41 +0000
ROA not after: Wed 10 Dec 2025 04:50:41 +0000
asID: 984
IP address blocks: 154.193.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 10:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74119 (0x12187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:50:41 2024 GMT
Not After : Dec 10 04:50:41 2025 GMT
Subject: CN=676a3da5-fd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:b5:83:97:bc:32:bf:6d:83:9c:ab:c5:c8:
d7:83:3d:7c:e1:ad:6e:e9:98:bd:8b:93:25:11:9b:
07:2b:8d:e1:32:a9:25:a7:29:3a:57:f2:3a:81:36:
69:f7:74:45:d2:69:33:ed:d3:1e:4d:11:8a:00:16:
08:f2:03:1d:94:9d:04:a8:75:a3:ba:f1:a9:0e:c2:
e4:84:c0:b8:62:8d:05:ee:dc:e8:51:db:ae:11:3e:
f0:7c:fd:4c:55:35:19:07:51:3f:17:4e:95:b8:75:
a7:ef:62:95:a4:77:f7:4d:0f:63:83:5a:6c:8a:37:
6f:22:c4:0a:56:32:01:3e:f3:5a:0d:44:40:32:7f:
69:c4:d4:c6:c7:22:f6:8a:e4:85:91:99:f0:6f:7f:
00:37:79:35:68:2c:e5:70:42:94:76:db:0c:f0:16:
78:fe:00:cf:f3:43:49:72:c7:7d:c4:7e:36:90:8a:
a6:15:ab:a0:b3:68:35:a7:d7:55:11:22:93:d1:2b:
86:0a:92:78:94:a0:79:a1:a0:0a:71:57:9e:c7:77:
f2:53:a6:e3:70:5f:1f:71:0e:73:0d:61:bd:bc:74:
d7:05:f0:33:37:7b:f1:00:a9:f2:48:eb:e3:46:e5:
df:12:59:a8:f5:b6:b4:c8:c1:f1:60:a9:fc:75:20:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6A:44:81:A2:D8:2F:D3:20:A5:2E:87:40:51:92:CA:2E:35:11:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2CC571AC1B211EFBE64154C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.109.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:29:89:6e:58:0f:34:f0:28:d3:2c:43:2d:e1:92:aa:48:86:
80:3b:ff:2a:dd:cc:e6:7a:38:ff:0c:96:86:92:16:fd:ce:9a:
a8:a6:80:8b:49:e1:20:e4:d7:2d:a7:93:d1:5d:ec:3d:44:8b:
be:6b:3f:49:15:57:ee:34:1b:61:48:e1:ac:10:68:1d:ce:f2:
77:fd:72:09:8b:a2:6d:51:51:db:01:73:b2:08:89:64:ad:42:
1d:fb:ce:34:31:e6:a8:cd:47:ac:e8:6b:15:e2:94:e9:29:1d:
b7:c3:f4:5f:e0:30:d7:b0:43:43:20:cf:ab:f2:7c:85:27:82:
da:6a:0d:82:1a:7c:a4:06:e4:7a:c0:3a:ff:0b:6f:8d:39:d3:
46:af:8b:70:ca:f2:2c:aa:96:04:82:26:da:e4:c9:69:ba:1d:
a0:f5:c1:13:9a:60:49:b3:15:fe:7d:81:a3:9e:35:20:29:2a:
44:88:42:15:c7:23:a3:9e:dd:52:3f:6a:02:2c:0f:f1:fd:c2:
01:ab:48:f7:f3:22:07:89:3a:b1:34:42:25:41:82:0a:e9:17:
f0:2a:3b:21:43:0d:ee:b4:dd:33:cc:29:50:23:30:2a:fc:66:
37:07:9e:38:23:05:e8:d4:ea:22:2e:8b:9f:ae:53:c9:41:48:
c8:ab:c1:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASGHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDQ1MDQxWhcNMjUxMjEwMDQ1MDQxWjAYMRYw
FAYDVQQDEw02NzZhM2RhNS1mZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAziG1g5e8Mr9tg5yrxcjXgz184a1u6Zi9i5MlEZsHK43hMqklpyk6V/I6
gTZp93RF0mkz7dMeTRGKABYI8gMdlJ0EqHWjuvGpDsLkhMC4Yo0F7tzoUduuET7w
fP1MVTUZB1E/F06VuHWn72KVpHf3TQ9jg1psijdvIsQKVjIBPvNaDURAMn9pxNTG
xyL2iuSFkZnwb38AN3k1aCzlcEKUdtsM8BZ4/gDP80NJcsd9xH42kIqmFaugs2g1
p9dVESKT0SuGCpJ4lKB5oaAKcVeex3fyU6bjcF8fcQ5zDWG9vHTXBfAzN3vxAKny
SOvjRuXfElmo9ba0yMHxYKn8dSDzzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBRq
RIGi2C/TIKUuh0BRksouNRFIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMkNDNTcxQUMxQjIxMUVGQkU2NDE1NEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFtMA0GCSqGSIb3DQEB
CwUAA4IBAQDIKYluWA808CjTLEMt4ZKqSIaAO/8q3czmejj/DJaGkhb9zpqopoCL
SeEg5Nctp5PRXew9RIu+az9JFVfuNBthSOGsEGgdzvJ3/XIJi6JtUVHbAXOyCIlk
rUId+840MeaozUes6GsV4pTpKR23w/Rf4DDXsENDIM+r8nyFJ4Laag2CGnykBuR6
wDr/C2+NOdNGr4twyvIsqpYEgiba5Mlpuh2g9cETmmBJsxX+fYGjnjUgKSpEiEIV
xyOjnt1SP2oCLA/x/cIBq0j38yIHiTqxNEIlQYIK6RfwKjshQw3utN0zzClQIzAq
/GY3B544IwXo1OoiLoufrlPJQUjIq8He
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:59:15 2025 by rpki-client