Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAC7964C41911EF8FA251A3762E951A.roa
File: BFAC7964C41911EF8FA251A3762E951A.roa (raw, json)
Hash identifier: ewGy6gzpz4j3azS1LGPKwfE1OVNBttxuHoKZCyKBQvw=
Subject key identifier: 74:A4:1A:A3:5B:8A:1B:4B:94:3C:8F:95:D8:5E:C8:BF:CF:B4:0F:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012981
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAC7964C41911EF8FA251A3762E951A.roa
Signing time: Fri 27 Dec 2024 06:13:54 +0000
ROA not before: Fri 27 Dec 2024 06:13:50 +0000
ROA not after: Sun 12 Dec 2027 06:13:50 +0000
asID: 17561
IP address blocks: 154.198.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76161 (0x12981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:13:50 2024 GMT
Not After : Dec 12 06:13:50 2027 GMT
Subject: CN=676e45a2-b3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:3f:11:cb:ae:1e:91:f7:85:0a:4e:5f:92:
c6:18:0a:a7:d3:f5:f0:2d:5a:b4:5e:2b:02:67:ef:
b0:a4:f6:a5:b2:06:0f:38:0b:c6:ae:6c:2a:08:f6:
2e:12:1a:ba:23:4f:48:44:d2:fc:c5:53:57:64:0c:
7c:ab:8a:5a:a7:84:13:f5:57:a2:43:be:86:f0:8e:
d1:10:36:4e:ad:16:b7:82:e3:27:16:20:ac:f3:7e:
ac:2e:d6:6a:c7:4b:5e:f9:ca:0a:6b:fa:71:67:85:
63:2b:bb:12:98:15:55:6a:c2:ab:64:9f:c4:c7:9d:
a8:10:d1:69:04:32:ba:98:64:a9:d6:71:ab:d9:b6:
a0:c7:82:40:94:c5:30:0b:62:12:23:f2:14:f3:cc:
20:b2:13:d6:be:e5:23:e2:0b:54:27:d0:d4:44:94:
df:7d:ec:dd:a4:15:61:d8:19:d3:5a:dd:42:e0:49:
bc:fa:1f:f9:4b:3f:ce:f7:fd:42:1b:27:65:f7:26:
0b:bb:ea:bd:00:aa:4b:2d:e4:0f:0b:66:34:2c:89:
62:69:17:ca:4a:71:c0:e3:a9:4f:6b:c6:57:25:8e:
26:86:6a:d1:ce:5d:fa:84:b2:77:60:f0:64:7d:b7:
cd:38:fa:b9:ae:0e:4f:92:46:c9:c1:7b:e1:0e:82:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A4:1A:A3:5B:8A:1B:4B:94:3C:8F:95:D8:5E:C8:BF:CF:B4:0F:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFAC7964C41911EF8FA251A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:2e:3a:08:b2:25:ab:77:0b:a3:aa:c6:41:65:5c:a1:9e:8f:
02:1c:31:4d:6d:a1:13:a4:4b:3d:c5:b2:40:0e:35:63:c8:14:
82:21:51:44:fe:ae:ec:58:a0:31:ef:e0:70:ab:78:ea:8a:6b:
97:b1:7c:de:46:4d:ae:82:59:98:ce:18:be:d1:9f:71:84:c4:
50:e3:58:a3:08:45:89:c0:6d:11:3d:34:b8:a8:d4:d4:c0:2b:
2f:65:19:28:94:f3:88:e4:6f:0c:e6:a8:46:14:df:e5:7e:ad:
c7:32:27:0a:4b:d5:51:0d:78:40:59:3e:72:21:17:81:50:e3:
db:51:e5:e5:65:66:ce:bc:2c:cf:17:24:81:94:11:8b:83:6a:
23:95:61:5b:80:67:cc:d4:e8:a7:31:7d:5d:e9:80:cc:92:69:
0d:f4:a7:25:71:fc:b1:62:49:e9:9d:d8:78:64:18:1b:b3:0e:
8d:41:8f:e0:09:43:c1:c9:c0:88:3a:6f:dd:cd:24:24:66:ae:
5a:3c:67:09:43:36:6e:71:e3:39:ed:95:cb:c7:e1:89:6d:ae:
61:ca:e8:3d:3e:e5:7e:ad:a2:72:03:b9:85:e2:8b:45:1d:c6:
c4:31:cb:9b:1e:8b:45:ab:56:02:b6:2c:a8:bf:70:86:d7:0b:
88:23:c8:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASmBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDYxMzUwWhcNMjcxMjEyMDYxMzUwWjAYMRYw
FAYDVQQDEw02NzZlNDVhMi1iM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7aI/EcuuHpH3hQpOX5LGGAqn0/XwLVq0XisCZ++wpPalsgYPOAvGrmwq
CPYuEhq6I09IRNL8xVNXZAx8q4pap4QT9VeiQ76G8I7REDZOrRa3guMnFiCs836s
LtZqx0te+coKa/pxZ4VjK7sSmBVVasKrZJ/Ex52oENFpBDK6mGSp1nGr2bagx4JA
lMUwC2ISI/IU88wgshPWvuUj4gtUJ9DURJTffezdpBVh2BnTWt1C4Em8+h/5Sz/O
9/1CGydl9yYLu+q9AKpLLeQPC2Y0LIliaRfKSnHA46lPa8ZXJY4mhmrRzl36hLJ3
YPBkfbfNOPq5rg5PkkbJwXvhDoLm8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHSk
GqNbihtLlDyPldheyL/PtA/KMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRkFDNzk2NEM0MTkxMUVGOEZBMjUxQTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsajMA0GCSqGSIb3DQEB
CwUAA4IBAQCyLjoIsiWrdwujqsZBZVyhno8CHDFNbaETpEs9xbJADjVjyBSCIVFE
/q7sWKAx7+Bwq3jqimuXsXzeRk2uglmYzhi+0Z9xhMRQ41ijCEWJwG0RPTS4qNTU
wCsvZRkolPOI5G8M5qhGFN/lfq3HMicKS9VRDXhAWT5yIReBUOPbUeXlZWbOvCzP
FySBlBGLg2ojlWFbgGfM1OinMX1d6YDMkmkN9KclcfyxYknpndh4ZBgbsw6NQY/g
CUPBycCIOm/dzSQkZq5aPGcJQzZuceM57ZXLx+GJba5hyug9PuV+raJyA7mF4otF
HcbEMcubHotFq1YCtiyov3CG1wuII8jb
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:28 2025 by rpki-client