Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8E44E0AC42C11EF9F687F9A762E951A.roa
File: B8E44E0AC42C11EF9F687F9A762E951A.roa (raw, json)
Hash identifier: X13KqSfFoY/g+vNG7K1rkn1hVmbyvaHZbMmIr7RkPcE=
Subject key identifier: 6B:7A:FE:A0:B9:27:CB:AE:9D:C9:C5:A9:69:37:FF:2C:95:9C:1B:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A33
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8E44E0AC42C11EF9F687F9A762E951A.roa
Signing time: Fri 27 Dec 2024 08:29:43 +0000
ROA not before: Fri 27 Dec 2024 08:29:39 +0000
ROA not after: Sun 12 Dec 2027 08:29:39 +0000
asID: 17561
IP address blocks: 154.203.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76339 (0x12a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:29:39 2024 GMT
Not After : Dec 12 08:29:39 2027 GMT
Subject: CN=676e6577-8bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:3c:31:55:db:ec:0f:b0:fe:9e:aa:42:3b:
97:d5:e3:87:5d:a7:06:a5:ec:eb:98:77:df:a0:34:
62:35:ec:99:94:a5:23:98:0b:24:46:28:ae:78:77:
54:64:6c:05:d4:49:5f:ac:5e:c8:81:8e:3c:e8:fa:
c8:47:22:03:fd:17:67:e9:37:5f:ba:86:54:d9:f8:
fa:76:22:67:a6:ae:38:1a:5c:9e:9f:dc:9d:00:27:
ff:b0:80:0c:99:01:0f:78:87:3d:8f:e6:84:15:5e:
77:40:a4:cb:24:ba:91:81:94:d8:65:56:af:14:a8:
09:e5:7c:52:a0:03:25:b9:0e:46:fd:da:63:84:0d:
41:40:1e:0f:fc:ad:ef:79:b4:2b:8c:17:22:f9:a6:
69:20:62:de:26:60:51:44:57:0e:c0:aa:c8:84:07:
5f:51:9d:62:59:0b:33:a4:21:9a:64:59:74:4a:68:
d1:aa:31:c0:1a:7e:42:df:91:6c:bd:ec:cb:57:91:
f4:7a:a7:b2:2b:61:0d:6b:28:70:4f:2f:31:e6:d4:
df:da:c8:15:1c:8f:80:94:8c:0f:66:6e:5d:01:14:
87:bb:c9:76:d2:45:ad:bd:38:b4:67:ef:13:76:94:
de:9a:36:b1:59:42:d1:95:3c:3a:4e:2f:74:1a:3d:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7A:FE:A0:B9:27:CB:AE:9D:C9:C5:A9:69:37:FF:2C:95:9C:1B:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8E44E0AC42C11EF9F687F9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:02:44:62:95:d5:b2:0f:a8:52:a6:48:64:16:db:ef:c3:c6:
8c:70:9b:cf:d1:c1:ee:a3:a2:bc:8b:e3:88:c7:9c:66:dc:01:
7d:ea:5b:a4:44:26:28:dd:92:de:02:97:e0:ef:cf:0b:15:bd:
fe:3c:7b:59:95:37:83:fa:12:46:30:b8:4f:b1:54:26:83:ef:
18:9e:3d:47:e3:9c:21:63:0c:1c:8b:27:f0:bb:f7:a3:4c:b8:
f1:d0:10:16:27:ab:5c:e4:02:92:a4:28:b2:52:1f:50:4d:e3:
ce:d8:99:a4:03:99:4c:c2:70:0b:c8:30:28:6b:d6:f2:38:09:
3e:81:42:16:3c:1f:25:65:6a:0d:42:f0:3a:59:01:21:ed:7f:
af:fa:9f:c2:6f:b0:3f:49:7f:7c:f8:9b:d9:d0:6e:9a:a8:1e:
2b:ba:a9:99:16:da:3a:20:12:9e:00:64:fc:e4:05:76:e5:de:
7a:ff:d6:4e:17:3e:4e:db:a2:92:b6:9b:1b:f4:9d:d4:46:f0:
89:a0:a8:d1:d9:f2:00:4a:d4:d1:35:f4:1b:aa:1c:f0:e2:2d:
1d:1e:d3:8c:fe:5f:49:a9:bf:16:c7:74:82:d0:ce:a5:19:1a:
7a:e4:f2:4a:88:e9:0c:77:2b:11:dd:0d:00:96:fb:d6:0e:95:
4e:7d:0e:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASozMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDgyOTM5WhcNMjcxMjEyMDgyOTM5WjAYMRYw
FAYDVQQDEw02NzZlNjU3Ny04YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtpY8MVXb7A+w/p6qQjuX1eOHXacGpezrmHffoDRiNeyZlKUjmAskRiiu
eHdUZGwF1ElfrF7IgY486PrIRyID/Rdn6TdfuoZU2fj6diJnpq44Glyen9ydACf/
sIAMmQEPeIc9j+aEFV53QKTLJLqRgZTYZVavFKgJ5XxSoAMluQ5G/dpjhA1BQB4P
/K3vebQrjBci+aZpIGLeJmBRRFcOwKrIhAdfUZ1iWQszpCGaZFl0SmjRqjHAGn5C
35FsvezLV5H0eqeyK2ENayhwTy8x5tTf2sgVHI+AlIwPZm5dARSHu8l20kWtvTi0
Z+8TdpTemjaxWULRlTw6Ti90Gj1FoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGt6
/qC5J8uuncnFqWk3/yyVnBuFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9COEU0NEUwQUM0MkMxMUVGOUY2ODdGOUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/AkRildWyD6hSpkhkFtvvw8aMcJvP0cHuo6K8i+OIx5xm3AF96luk
RCYo3ZLeApfg788LFb3+PHtZlTeD+hJGMLhPsVQmg+8Ynj1H45whYwwciyfwu/ej
TLjx0BAWJ6tc5AKSpCiyUh9QTePO2JmkA5lMwnALyDAoa9byOAk+gUIWPB8lZWoN
QvA6WQEh7X+v+p/Cb7A/SX98+JvZ0G6aqB4ruqmZFto6IBKeAGT85AV25d56/9ZO
Fz5O26KStpsb9J3URvCJoKjR2fIAStTRNfQbqhzw4i0dHtOM/l9Jqb8Wx3SC0M6l
GRp65PJKiOkMdysR3Q0AlvvWDpVOfQ7Q
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:33 2025 by rpki-client