Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDA24BF8C5FE11EFB1FD029D762E951A.roa
File: BDA24BF8C5FE11EFB1FD029D762E951A.roa (raw, json)
Hash identifier: BwKMPJqduGdPSgblFR6VdUVNGWWa8klnP6vB4w6ghM4=
Subject key identifier: EC:1B:95:13:99:05:A4:9A:DA:8A:81:EF:E7:DD:85:26:CB:64:17:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDA24BF8C5FE11EFB1FD029D762E951A.roa
Signing time: Sun 29 Dec 2024 16:05:37 +0000
ROA not before: Sun 29 Dec 2024 16:05:33 +0000
ROA not after: Sun 12 Dec 2027 16:05:33 +0000
asID: 17561
IP address blocks: 154.217.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77386 (0x12e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:05:33 2024 GMT
Not After : Dec 12 16:05:33 2027 GMT
Subject: CN=67717350-918b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:c6:e4:36:75:6b:3a:98:bb:a0:56:ee:b9:
0a:ce:58:60:06:5f:38:c7:94:c0:f7:63:de:0d:9d:
b9:fd:4b:c1:c3:80:83:9e:a0:5c:10:cb:05:7e:f2:
41:f8:92:5f:a8:b4:81:b4:5f:26:e7:23:6b:dc:35:
8f:db:26:1b:71:06:b9:34:c7:40:f6:84:42:99:cf:
52:59:51:8c:62:3b:72:76:87:51:4f:82:79:0a:f7:
2c:42:58:79:92:35:59:9a:06:f8:f3:f2:92:3e:4d:
d1:3c:ca:f2:76:11:9f:11:da:45:3f:4e:17:b7:ac:
67:9d:2e:6c:1b:46:80:f6:dd:af:6a:a9:4e:10:66:
55:6b:5b:af:64:8e:7b:ea:81:db:4f:9e:d3:ee:17:
73:e7:5c:46:b9:96:ce:bf:85:89:99:d2:8a:24:b2:
08:df:ff:10:96:49:51:c8:0f:d6:e8:63:8f:f2:06:
f8:3e:de:1a:4e:7c:e5:4b:39:09:34:3a:34:de:71:
36:4d:34:79:67:9e:f8:36:a8:33:5e:58:51:b6:9d:
97:4f:bf:fb:d0:05:c8:2d:22:cd:48:9a:92:cc:8d:
16:1d:2d:eb:5d:84:b3:ff:63:3f:b0:59:df:6f:09:
3d:55:a4:f6:a5:a2:cb:ae:f6:6c:dd:a0:18:1c:6b:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:95:13:99:05:A4:9A:DA:8A:81:EF:E7:DD:85:26:CB:64:17:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDA24BF8C5FE11EFB1FD029D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.8.0/24
Signature Algorithm: sha256WithRSAEncryption
11:de:9f:0a:93:ab:09:e9:f0:26:0d:02:97:7b:1b:8c:3c:a7:
56:83:20:28:24:09:cb:9c:0d:23:7b:b6:ce:78:77:0f:39:82:
df:66:b2:2f:cc:9e:b2:20:05:83:a1:b8:20:d9:83:af:82:8e:
58:63:e6:4d:a4:3f:fb:a7:23:e1:92:c3:97:f8:ef:f6:48:6e:
38:67:95:da:8f:37:b6:33:52:d7:a0:e4:9a:d2:5a:03:80:4c:
dd:51:55:65:a6:40:47:80:d5:1d:a9:cb:11:aa:54:c4:5d:dd:
8b:ca:58:28:0d:1c:0f:7f:78:6b:99:ec:44:80:cf:ca:b5:a1:
1e:4b:78:cc:5d:ea:3a:de:cf:82:92:96:ec:5f:d6:67:1d:e6:
1c:7a:d8:52:40:7f:4a:97:e4:82:3c:46:e4:1b:35:a6:e0:59:
bc:15:82:5a:4b:2d:3e:f1:e2:4b:28:9c:67:e8:a9:07:e4:a9:
22:e4:ff:65:45:9c:19:54:75:90:72:0e:02:51:e2:cb:2d:bc:
97:c8:c4:f1:dc:1b:36:ab:9d:2d:51:3e:36:80:b2:03:4a:3f:
2c:dc:e3:8f:6e:22:e8:57:e3:a6:0a:e3:cf:2e:d4:a5:01:55:
59:75:37:22:2d:6c:5a:78:41:4a:1b:56:42:ad:93:a3:2a:3e:
da:5f:b3:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS5KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTYwNTMzWhcNMjcxMjEyMTYwNTMzWjAYMRYw
FAYDVQQDEw02NzcxNzM1MC05MThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxgPG5DZ1azqYu6BW7rkKzlhgBl84x5TA92PeDZ25/UvBw4CDnqBcEMsF
fvJB+JJfqLSBtF8m5yNr3DWP2yYbcQa5NMdA9oRCmc9SWVGMYjtydodRT4J5Cvcs
Qlh5kjVZmgb48/KSPk3RPMrydhGfEdpFP04Xt6xnnS5sG0aA9t2vaqlOEGZVa1uv
ZI576oHbT57T7hdz51xGuZbOv4WJmdKKJLII3/8QlklRyA/W6GOP8gb4Pt4aTnzl
SzkJNDo03nE2TTR5Z574NqgzXlhRtp2XT7/70AXILSLNSJqSzI0WHS3rXYSz/2M/
sFnfbwk9VaT2paLLrvZs3aAYHGvgbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOwb
lROZBaSa2oqB7+fdhSbLZBf6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CREEyNEJGOEM1RkUxMUVGQjFGRDAyOUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtkIMA0GCSqGSIb3DQEB
CwUAA4IBAQAR3p8Kk6sJ6fAmDQKXexuMPKdWgyAoJAnLnA0je7bOeHcPOYLfZrIv
zJ6yIAWDobgg2YOvgo5YY+ZNpD/7pyPhksOX+O/2SG44Z5Xajze2M1LXoOSa0loD
gEzdUVVlpkBHgNUdqcsRqlTEXd2LylgoDRwPf3hrmexEgM/KtaEeS3jMXeo63s+C
kpbsX9ZnHeYcethSQH9Kl+SCPEbkGzWm4Fm8FYJaSy0+8eJLKJxn6KkH5Kki5P9l
RZwZVHWQcg4CUeLLLbyXyMTx3Bs2q50tUT42gLIDSj8s3OOPbiLoV+OmCuPPLtSl
AVVZdTciLWxaeEFKG1ZCrZOjKj7aX7NB
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:38 2025 by rpki-client