Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD79C3C4C3CC11EFB8EADBA7762E951A.roa
File: BD79C3C4C3CC11EFB8EADBA7762E951A.roa (raw, json)
Hash identifier: VS7iw9gAh7T9YnIFoTBvt0wuW0WGFuutSBxT3fS7jOk=
Subject key identifier: 9C:34:A7:27:02:B6:57:90:A6:7B:75:E9:84:FA:E6:00:CC:C4:7D:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012814
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD79C3C4C3CC11EFB8EADBA7762E951A.roa
Signing time: Thu 26 Dec 2024 21:02:39 +0000
ROA not before: Thu 26 Dec 2024 21:02:36 +0000
ROA not after: Sun 12 Dec 2027 21:02:36 +0000
asID: 17561
IP address blocks: 154.83.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75796 (0x12814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:02:36 2024 GMT
Not After : Dec 12 21:02:36 2027 GMT
Subject: CN=676dc46f-a87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:4c:35:23:09:48:54:97:cb:05:77:6f:d7:
7f:b7:42:95:38:86:b0:cd:50:89:0a:8e:a6:9d:53:
7e:f2:4d:1e:21:d9:e9:e1:a7:af:82:32:88:72:98:
67:f8:77:b7:9a:ce:0f:38:dd:8a:d1:e3:5f:dd:e0:
15:38:56:de:4d:df:66:3c:ac:5f:cc:24:6d:76:6c:
ef:7c:a7:a4:e4:ef:88:00:48:ab:f9:2d:3a:b7:fe:
fc:3e:e3:9e:84:4f:9c:ef:7f:82:b7:1f:46:b4:be:
7b:30:0f:25:13:db:93:9e:26:ba:9e:4b:12:f7:5c:
aa:35:1a:f8:5e:2f:56:21:85:73:91:93:9c:f8:2b:
a7:9d:b1:e9:cb:a8:ce:d8:02:a9:26:ba:7d:78:8d:
55:28:15:f8:4c:07:6e:a6:3b:c4:57:67:73:18:50:
bf:68:e3:f2:d9:ad:da:c8:50:ea:dc:5e:b0:74:6a:
1f:89:12:f9:35:ba:96:56:51:50:7e:9f:02:7e:6b:
50:03:ae:da:fc:f7:79:dc:cf:04:6f:cd:1d:8d:ca:
16:8a:5a:ba:86:d5:cd:81:bc:ae:27:57:b0:d5:5d:
63:05:8a:13:03:3e:de:df:3a:f8:80:23:46:6f:0c:
e2:2a:88:01:5f:04:02:62:f2:cf:f5:a2:64:64:a3:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:34:A7:27:02:B6:57:90:A6:7B:75:E9:84:FA:E6:00:CC:C4:7D:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD79C3C4C3CC11EFB8EADBA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:d7:03:5f:a3:c6:4a:dd:ed:6a:b4:48:92:7f:2b:55:ad:58:
11:55:19:05:f4:11:4d:1e:2e:3b:03:f9:e9:4b:1a:82:a8:a3:
be:58:65:07:d5:f1:f5:43:44:d7:b2:a3:d2:43:4e:00:38:38:
82:b7:06:c7:f2:32:ee:1d:ec:f0:94:38:a6:96:37:63:06:1b:
ec:07:83:2e:c1:f5:d7:ed:e7:7f:0f:87:d3:da:87:66:54:65:
84:8f:d2:3b:5b:79:c9:3a:5d:8f:60:d6:f5:9a:a8:93:e7:0d:
09:06:61:b5:12:b3:d5:36:37:3f:4f:35:10:0c:34:21:f4:c7:
e1:4a:e2:ea:b4:c5:62:a1:18:eb:28:7f:a3:b6:8d:52:bc:c6:
86:5c:a3:5e:2a:6b:5d:86:41:7d:b7:8e:e9:ca:80:7f:80:1e:
26:b5:b1:c5:4c:9b:8a:98:d4:6d:f9:38:ab:4b:47:91:9c:a3:
a0:f5:6e:76:a2:6b:82:50:8e:5e:19:4f:1f:89:e6:53:1e:a6:
7f:00:32:b1:79:97:7e:99:72:e5:63:7f:cc:58:b5:df:11:ba:
9c:8b:62:92:10:52:e7:de:b4:14:f8:e8:e5:29:74:94:a7:c8:
c0:45:17:1c:c0:31:a5:d9:7d:bb:09:e8:6c:30:a8:57:7f:9a:
30:af:c3:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASgUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjEwMjM2WhcNMjcxMjEyMjEwMjM2WjAYMRYw
FAYDVQQDEw02NzZkYzQ2Zi1hODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmbxMNSMJSFSXywV3b9d/t0KVOIawzVCJCo6mnVN+8k0eIdnp4aevgjKI
cphn+He3ms4PON2K0eNf3eAVOFbeTd9mPKxfzCRtdmzvfKek5O+IAEir+S06t/78
PuOehE+c73+Ctx9GtL57MA8lE9uTnia6nksS91yqNRr4Xi9WIYVzkZOc+CunnbHp
y6jO2AKpJrp9eI1VKBX4TAdupjvEV2dzGFC/aOPy2a3ayFDq3F6wdGofiRL5NbqW
VlFQfp8CfmtQA67a/Pd53M8Eb80djcoWilq6htXNgbyuJ1ew1V1jBYoTAz7e3zr4
gCNGbwziKogBXwQCYvLP9aJkZKMI2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJw0
pycCtleQpnt16YT65gDMxH0JMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRDc5QzNDNEMzQ0MxMUVGQjhFQURCQTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOgMA0GCSqGSIb3DQEB
CwUAA4IBAQDJ1wNfo8ZK3e1qtEiSfytVrVgRVRkF9BFNHi47A/npSxqCqKO+WGUH
1fH1Q0TXsqPSQ04AODiCtwbH8jLuHezwlDimljdjBhvsB4MuwfXX7ed/D4fT2odm
VGWEj9I7W3nJOl2PYNb1mqiT5w0JBmG1ErPVNjc/TzUQDDQh9MfhSuLqtMVioRjr
KH+jto1SvMaGXKNeKmtdhkF9t47pyoB/gB4mtbHFTJuKmNRt+TirS0eRnKOg9W52
omuCUI5eGU8fieZTHqZ/ADKxeZd+mXLlY3/MWLXfEbqci2KSEFLn3rQU+OjlKXSU
p8jARRccwDGl2X27CehsMKhXf5owr8Pd
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:56 2025 by rpki-client