Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B208EFB2C62211EFBD1A147F762E951A.roa
File: B208EFB2C62211EFBD1A147F762E951A.roa (raw, json)
Hash identifier: 6yMgWVGXjWaHeAXq7fHbe93PtdlYwYoxnrMDNvz3uGM=
Subject key identifier: 31:B2:31:55:91:E6:E5:DD:46:48:A4:E5:CA:25:82:66:EF:F8:DC:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B208EFB2C62211EFBD1A147F762E951A.roa
Signing time: Sun 29 Dec 2024 20:22:59 +0000
ROA not before: Sun 29 Dec 2024 20:22:55 +0000
ROA not after: Sun 12 Dec 2027 20:22:55 +0000
asID: 17561
IP address blocks: 154.217.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77690 (0x12f7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:22:55 2024 GMT
Not After : Dec 12 20:22:55 2027 GMT
Subject: CN=6771afa3-df1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:ba:69:ff:1d:8f:78:07:ef:0c:b5:fa:d0:
ec:58:c3:81:46:a1:3e:74:25:97:32:86:d3:9e:11:
3e:6d:01:bc:4b:18:d9:8f:57:0b:44:f7:2a:ba:2b:
1f:0b:9a:00:b0:f9:e8:07:5d:eb:df:5c:1d:54:b4:
a2:ff:ea:cd:98:5b:23:17:54:2b:70:c0:14:25:83:
59:dc:83:47:93:f7:21:f7:41:d6:0b:c8:0f:70:06:
a1:27:29:da:5e:1d:69:c2:63:83:a0:30:64:71:9a:
3f:2e:4c:8a:1d:20:a0:d0:0b:d3:98:e9:e0:4e:f5:
60:69:19:76:2d:c4:78:97:34:0c:5b:83:17:9b:fa:
ce:b5:ec:e0:2a:5b:f7:65:ba:1c:53:dc:34:90:75:
9d:7e:5e:5d:fa:4e:67:10:db:df:ae:0d:3e:60:24:
f6:bb:6f:2a:c0:c0:ec:7a:5d:4c:3c:c3:bc:e2:36:
cf:b3:7a:b4:5c:78:6d:29:b6:9d:13:4b:ad:02:17:
72:34:61:b2:a2:75:e6:e0:3e:82:c1:58:b4:6e:dc:
3b:0c:fb:44:d3:f0:a8:01:30:c3:39:14:e7:11:25:
0f:c2:41:a6:43:4f:3c:5e:d9:82:42:d6:27:26:08:
2a:6c:98:56:c4:ba:24:3b:3d:71:41:ef:ac:29:2e:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B2:31:55:91:E6:E5:DD:46:48:A4:E5:CA:25:82:66:EF:F8:DC:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B208EFB2C62211EFBD1A147F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:94:d2:72:c5:ef:7f:47:00:b1:5d:fe:41:39:6e:e1:c9:41:
10:54:f4:68:6e:65:04:8d:e5:c9:cb:4d:75:e7:78:6a:43:4d:
8b:0c:48:25:27:c9:85:a8:8a:60:8f:33:fe:1c:ee:3a:1e:ee:
4c:0d:5c:f3:40:a4:4c:87:e9:f6:96:de:6f:d7:b5:39:44:bd:
4b:ea:9b:1a:99:82:51:ac:33:1a:65:f3:cf:a5:5a:7f:e1:d4:
80:fb:9b:e4:29:95:f8:a7:82:57:78:de:18:e9:d7:38:cf:47:
21:88:42:85:f3:6b:53:75:49:e5:9c:9d:e8:f3:3a:93:76:83:
ca:de:95:82:9e:a4:e7:53:7b:2f:6f:8c:91:53:df:13:0f:eb:
d4:ed:b0:d0:26:3e:f8:6a:42:3c:08:f6:1e:15:db:b0:09:59:
c6:7d:2a:d3:9c:e9:39:40:b7:e3:46:a6:1a:1d:c0:2b:96:39:
94:b4:ce:80:64:71:54:99:28:6c:54:25:b6:b9:68:2f:3b:c8:
4e:6d:47:57:3d:e2:73:ab:2e:07:1f:a1:60:a2:56:ed:85:c0:
58:75:9f:71:12:76:39:4e:79:a1:64:b3:88:f8:e3:ab:b3:ba:
d3:a8:d9:a1:a4:c2:22:d8:86:50:b4:a4:3f:d1:5e:b5:e9:4d:
87:9b:63:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS96MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjAyMjU1WhcNMjcxMjEyMjAyMjU1WjAYMRYw
FAYDVQQDEw02NzcxYWZhMy1kZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxs66af8dj3gH7wy1+tDsWMOBRqE+dCWXMobTnhE+bQG8SxjZj1cLRPcq
uisfC5oAsPnoB13r31wdVLSi/+rNmFsjF1QrcMAUJYNZ3INHk/ch90HWC8gPcAah
JynaXh1pwmODoDBkcZo/LkyKHSCg0AvTmOngTvVgaRl2LcR4lzQMW4MXm/rOtezg
Klv3ZbocU9w0kHWdfl5d+k5nENvfrg0+YCT2u28qwMDsel1MPMO84jbPs3q0XHht
KbadE0utAhdyNGGyonXm4D6CwVi0btw7DPtE0/CoATDDORTnESUPwkGmQ088XtmC
QtYnJggqbJhWxLokOz1xQe+sKS624wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDGy
MVWR5uXdRkik5colgmbv+NwtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMjA4RUZCMkM2MjIxMUVGQkQxQTE0N0Y3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtmgMA0GCSqGSIb3DQEB
CwUAA4IBAQColNJyxe9/RwCxXf5BOW7hyUEQVPRobmUEjeXJy01153hqQ02LDEgl
J8mFqIpgjzP+HO46Hu5MDVzzQKRMh+n2lt5v17U5RL1L6psamYJRrDMaZfPPpVp/
4dSA+5vkKZX4p4JXeN4Y6dc4z0chiEKF82tTdUnlnJ3o8zqTdoPK3pWCnqTnU3sv
b4yRU98TD+vU7bDQJj74akI8CPYeFduwCVnGfSrTnOk5QLfjRqYaHcArljmUtM6A
ZHFUmShsVCW2uWgvO8hObUdXPeJzqy4HH6FgolbthcBYdZ9xEnY5TnmhZLOI+OOr
s7rTqNmhpMIi2IZQtKQ/0V616U2Hm2Mi
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:52:32 2025 by rpki-client