Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF710170C60F11EF95BBCE86762E951A.roa
File: BF710170C60F11EF95BBCE86762E951A.roa (raw, json)
Hash identifier: KwCbkRUBcUtmhwgOkgQY0NS0fbHsbb1ebgVxEossZv8=
Subject key identifier: C6:23:9B:CF:ED:08:41:B9:11:77:67:0F:36:9F:CA:56:27:48:31:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF710170C60F11EF95BBCE86762E951A.roa
Signing time: Sun 29 Dec 2024 18:07:21 +0000
ROA not before: Sun 29 Dec 2024 18:07:17 +0000
ROA not after: Sun 12 Dec 2027 18:07:17 +0000
asID: 17561
IP address blocks: 154.217.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77532 (0x12edc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 18:07:17 2024 GMT
Not After : Dec 12 18:07:17 2027 GMT
Subject: CN=67718fd9-e84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:e8:2a:8d:fa:b2:e8:4f:f9:cd:3a:43:dc:
ec:38:ac:c7:62:d2:d8:2c:96:a8:97:27:21:b2:a2:
66:92:f7:49:10:8f:d7:fe:19:ef:79:6b:38:96:96:
fb:9a:8c:e4:fb:1e:9b:75:0c:b0:1c:75:cc:be:75:
f3:0e:96:4f:48:5d:13:c7:0b:79:61:d6:f7:67:78:
9b:33:35:d0:5f:3f:67:2f:b5:fd:ed:63:90:e3:f4:
d2:da:45:ab:f4:16:72:c0:7c:7d:a9:16:94:59:73:
02:db:73:6d:ff:11:3a:aa:32:95:8e:2c:79:b2:a9:
e6:f6:b9:49:52:fc:50:b6:0c:ad:c9:41:6a:e0:52:
46:f7:cc:1b:53:94:45:d3:f1:58:2f:d3:23:f9:4d:
c3:df:a6:cf:5b:90:39:9e:f3:04:a4:3c:f2:0d:f8:
eb:7f:be:b9:80:fd:db:ca:3e:04:f3:0b:e6:df:41:
f9:2d:f7:95:87:b7:44:95:cd:bb:ef:3d:fa:7b:02:
93:75:72:b1:3d:fd:1f:2c:98:01:ce:c2:84:bc:6c:
01:51:b9:ce:63:c0:c7:6b:eb:22:9b:b3:bf:54:12:
ee:e2:7d:e3:dc:c4:8d:73:3f:4a:e8:f4:ce:06:e3:
d6:3f:02:0d:c7:29:10:3f:9a:eb:3f:18:2d:62:fe:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:9B:CF:ED:08:41:B9:11:77:67:0F:36:9F:CA:56:27:48:31:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF710170C60F11EF95BBCE86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.81.0/24
Signature Algorithm: sha256WithRSAEncryption
43:95:00:31:1f:14:2f:12:88:56:60:ff:af:c7:ac:19:6e:76:
30:21:ac:af:93:e5:6e:9b:dd:fb:be:c6:03:6a:0d:1a:55:fa:
58:14:e7:2a:8c:f3:3f:89:4d:0d:29:c5:73:53:fa:ec:e5:6f:
96:c2:59:ae:cb:19:10:2c:64:c1:57:e6:d2:17:26:d3:79:1e:
b9:67:9b:4c:00:29:fd:8c:fa:7e:7a:73:bd:51:df:8e:58:5c:
25:26:57:e8:cf:5c:ad:55:54:7f:39:22:ef:ce:18:5b:4e:4f:
57:e6:12:1f:e7:23:fb:3c:6d:36:2d:3e:18:49:90:a9:17:13:
d0:b3:1b:47:a4:c0:d1:70:97:bb:a9:72:89:f0:72:9e:14:41:
05:26:47:b2:43:02:a4:3c:9c:23:d0:10:b3:a7:04:53:8b:18:
9e:bf:c0:63:ce:d6:02:dc:a9:77:4c:77:0a:01:ad:6b:6a:4f:
0e:80:09:99:24:3a:57:d7:4a:c5:ee:db:54:1b:ce:68:c9:76:
e8:d6:c9:a3:97:29:f9:ac:69:79:43:cf:77:8c:15:d1:af:ba:
61:df:51:5c:14:5e:05:13:ed:5e:1c:e0:66:4f:ec:94:4d:56:
aa:ec:cf:5a:de:09:bb:1e:73:0a:41:0a:e3:ea:09:6b:9c:10:
fa:ad:de:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS7cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTgwNzE3WhcNMjcxMjEyMTgwNzE3WjAYMRYw
FAYDVQQDEw02NzcxOGZkOS1lODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvTHoKo36suhP+c06Q9zsOKzHYtLYLJaolychsqJmkvdJEI/X/hnveWs4
lpb7mozk+x6bdQywHHXMvnXzDpZPSF0Txwt5Ydb3Z3ibMzXQXz9nL7X97WOQ4/TS
2kWr9BZywHx9qRaUWXMC23Nt/xE6qjKVjix5sqnm9rlJUvxQtgytyUFq4FJG98wb
U5RF0/FYL9Mj+U3D36bPW5A5nvMEpDzyDfjrf765gP3byj4E8wvm30H5LfeVh7dE
lc277z36ewKTdXKxPf0fLJgBzsKEvGwBUbnOY8DHa+sim7O/VBLu4n3j3MSNcz9K
6PTOBuPWPwINxykQP5rrPxgtYv7CkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMYj
m8/tCEG5EXdnDzafylYnSDHHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRjcxMDE3MEM2MEYxMUVGOTVCQkNFODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtlRMA0GCSqGSIb3DQEB
CwUAA4IBAQBDlQAxHxQvEohWYP+vx6wZbnYwIayvk+Vum937vsYDag0aVfpYFOcq
jPM/iU0NKcVzU/rs5W+WwlmuyxkQLGTBV+bSFybTeR65Z5tMACn9jPp+enO9Ud+O
WFwlJlfoz1ytVVR/OSLvzhhbTk9X5hIf5yP7PG02LT4YSZCpFxPQsxtHpMDRcJe7
qXKJ8HKeFEEFJkeyQwKkPJwj0BCzpwRTixiev8BjztYC3Kl3THcKAa1rak8OgAmZ
JDpX10rF7ttUG85oyXbo1smjlyn5rGl5Q893jBXRr7ph31FcFF4FE+1eHOBmT+yU
TVaq7M9a3gm7HnMKQQrj6glrnBD6rd4S
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:30:10 2025 by rpki-client