Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B54B3FEEC42A11EF8051908F762E951A.roa
File: B54B3FEEC42A11EF8051908F762E951A.roa (raw, json)
Hash identifier: 5BvDQ0snWJUkvFc9LpcJGntEoX1pjuO8AZMLg3vtQi4=
Subject key identifier: CE:9F:70:01:BC:2B:8F:E4:B7:6F:E0:03:96:DF:20:CA:99:27:8D:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B54B3FEEC42A11EF8051908F762E951A.roa
Signing time: Fri 27 Dec 2024 08:15:18 +0000
ROA not before: Fri 27 Dec 2024 08:15:14 +0000
ROA not after: Sun 12 Dec 2027 08:15:14 +0000
asID: 17561
IP address blocks: 154.202.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76317 (0x12a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:15:14 2024 GMT
Not After : Dec 12 08:15:14 2027 GMT
Subject: CN=676e6216-bc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:88:b9:0e:77:a2:8e:d4:87:c7:0f:b9:2e:
d9:c1:36:88:c9:83:8d:9a:dc:90:b4:c7:b3:82:09:
c9:30:2e:ec:8a:43:bc:1d:5f:10:fb:ff:8d:f2:b0:
df:c2:34:e0:b9:cb:5e:87:e4:11:88:14:75:15:0b:
68:7a:30:df:50:8a:f6:48:4e:30:f1:d3:08:66:3c:
24:88:00:75:99:f5:3c:e9:13:0c:f4:a0:1f:37:38:
e8:39:74:43:16:1f:eb:2e:48:e7:00:8d:2c:6e:d4:
bd:93:29:07:69:43:7e:6e:18:92:c4:22:94:28:f5:
11:0d:36:48:ee:ae:19:5f:88:fb:14:80:08:ed:d5:
df:52:52:eb:2e:33:dc:20:15:ee:ed:4d:39:38:bd:
9f:e2:a4:26:d1:b7:00:e8:91:3d:6f:73:21:bc:b2:
cf:52:59:4c:84:77:07:77:57:a0:8e:19:84:48:a4:
a7:cd:97:20:0e:12:7c:8e:88:c1:1b:a1:de:a3:e2:
b5:45:d7:0a:68:13:7c:b2:57:f4:dc:76:1b:b0:88:
dd:07:17:9c:6f:97:ae:0d:8b:bf:06:00:11:de:ba:
05:ac:c3:0d:48:79:88:69:6f:dc:6c:d7:86:5a:b4:
87:a5:44:37:74:7e:72:1a:b4:11:43:d5:59:8e:03:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:70:01:BC:2B:8F:E4:B7:6F:E0:03:96:DF:20:CA:99:27:8D:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B54B3FEEC42A11EF8051908F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.118.0/24
Signature Algorithm: sha256WithRSAEncryption
56:48:9f:19:4a:7c:74:49:79:a3:16:84:02:a6:6b:39:80:5e:
78:e9:12:bc:a4:56:93:24:10:f0:4b:6c:b2:1e:e0:a5:52:82:
33:61:63:d3:6d:99:38:f7:9f:6c:61:b6:67:94:c4:2c:80:c9:
fd:3c:db:c3:bf:e4:7f:c9:75:ec:20:5a:d5:00:fd:a7:6c:bf:
42:44:75:68:86:46:89:1e:d4:a4:33:84:02:17:f5:4d:00:cd:
f0:21:54:28:c3:92:f2:1b:ab:77:ec:83:aa:b7:32:15:9b:64:
df:2d:55:1e:49:9e:6c:5c:8e:ad:cb:cd:7a:9f:ee:33:81:7b:
0d:d7:56:43:44:52:5f:c5:55:6c:e7:10:1c:ea:aa:c6:f0:46:
87:70:60:35:d9:bc:6b:4a:bb:86:c0:90:58:9e:60:64:d8:ca:
43:60:a1:05:d3:ba:2f:a2:d7:6d:5f:39:36:03:a1:d9:4d:65:
8b:f6:3a:24:b8:64:d5:11:fa:e6:72:9b:88:10:a0:65:c6:f6:
f1:18:93:60:49:dd:4d:80:c1:f5:3f:67:87:2e:51:1a:12:b5:
aa:54:3c:f7:3a:03:13:46:6f:99:2b:03:f7:45:09:e5:bd:62:
ba:2c:53:c0:7b:ce:3f:75:48:61:47:88:58:d3:c0:df:a9:73:
5e:9d:d3:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASodMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDgxNTE0WhcNMjcxMjEyMDgxNTE0WjAYMRYw
FAYDVQQDEw02NzZlNjIxNi1iYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr/CIuQ53oo7Uh8cPuS7ZwTaIyYONmtyQtMezggnJMC7sikO8HV8Q+/+N
8rDfwjTgucteh+QRiBR1FQtoejDfUIr2SE4w8dMIZjwkiAB1mfU86RMM9KAfNzjo
OXRDFh/rLkjnAI0sbtS9kykHaUN+bhiSxCKUKPURDTZI7q4ZX4j7FIAI7dXfUlLr
LjPcIBXu7U05OL2f4qQm0bcA6JE9b3MhvLLPUllMhHcHd1egjhmESKSnzZcgDhJ8
jojBG6Heo+K1RdcKaBN8slf03HYbsIjdBxecb5euDYu/BgAR3roFrMMNSHmIaW/c
bNeGWrSHpUQ3dH5yGrQRQ9VZjgNHAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM6f
cAG8K4/kt2/gA5bfIMqZJ423MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNTRCM0ZFRUM0MkExMUVGODA1MTkwOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsp2MA0GCSqGSIb3DQEB
CwUAA4IBAQBWSJ8ZSnx0SXmjFoQCpms5gF546RK8pFaTJBDwS2yyHuClUoIzYWPT
bZk4959sYbZnlMQsgMn9PNvDv+R/yXXsIFrVAP2nbL9CRHVohkaJHtSkM4QCF/VN
AM3wIVQow5LyG6t37IOqtzIVm2TfLVUeSZ5sXI6ty816n+4zgXsN11ZDRFJfxVVs
5xAc6qrG8EaHcGA12bxrSruGwJBYnmBk2MpDYKEF07ovotdtXzk2A6HZTWWL9jok
uGTVEfrmcpuIEKBlxvbxGJNgSd1NgMH1P2eHLlEaErWqVDz3OgMTRm+ZKwP3RQnl
vWK6LFPAe84/dUhhR4hY08DfqXNendNA
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:00 2025 by rpki-client