Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C10AC9F2C1AB11EFA457879E762E951A.roa
File: C10AC9F2C1AB11EFA457879E762E951A.roa (raw, json)
Hash identifier: pv/4fgWacwxZGv84ZhnFiMTRrQPVOxfQBlcy0lZHTNM=
Subject key identifier: 1D:9A:32:11:82:5C:41:5C:8D:DB:2F:CD:19:42:5C:01:71:D0:45:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012135
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C10AC9F2C1AB11EFA457879E762E951A.roa
Signing time: Tue 24 Dec 2024 04:01:29 +0000
ROA not before: Tue 24 Dec 2024 04:01:26 +0000
ROA not after: Wed 10 Dec 2025 04:01:26 +0000
asID: 984
IP address blocks: 154.92.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74037 (0x12135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:01:26 2024 GMT
Not After : Dec 10 04:01:26 2025 GMT
Subject: CN=676a3219-981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:3a:c2:df:83:29:46:55:24:f9:79:40:c9:
88:d3:ec:23:82:50:f1:47:fe:e2:b7:ab:0a:3a:93:
60:fd:96:6c:67:e8:52:dd:05:9d:3f:41:55:6e:95:
9f:7a:f5:6e:eb:63:99:2f:32:e1:01:14:1f:fc:1f:
e5:47:71:d4:3a:57:e0:9c:5b:19:05:eb:f9:39:15:
c6:54:8a:c7:fa:8e:6a:a8:ff:7b:42:92:34:35:74:
25:fd:49:a1:eb:aa:97:cb:54:93:7d:0e:53:80:c0:
c2:12:50:9d:9b:35:1e:97:21:f0:8c:62:05:35:b3:
2f:83:fe:bb:fa:05:22:e1:7d:d5:63:97:3b:4f:19:
e7:17:14:22:1d:a6:fb:63:4e:f4:0b:e1:af:19:f1:
4e:62:9a:85:44:bf:43:fd:04:34:72:b7:94:52:67:
f0:da:76:1b:e7:62:3e:12:41:7d:f0:eb:89:37:68:
95:2d:d6:c2:91:00:7c:76:ba:02:a3:53:64:e4:03:
1f:a1:a3:90:d2:63:80:95:f1:da:c2:be:5f:e6:95:
fe:35:23:5b:ed:00:9e:e6:e8:05:70:78:63:0a:46:
0c:ae:9a:ee:83:90:96:ad:9b:ea:fc:a9:5e:f1:52:
db:26:96:43:ad:ba:4b:a3:8b:65:71:ab:ec:e5:69:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:32:11:82:5C:41:5C:8D:DB:2F:CD:19:42:5C:01:71:D0:45:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C10AC9F2C1AB11EFA457879E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2f:78:e7:0f:6f:dc:78:a7:a8:24:50:29:31:1f:d8:24:5d:
a5:0e:be:4d:7b:43:fb:99:b1:3c:68:03:f4:42:65:d0:e1:2f:
14:ec:57:0d:60:53:e4:da:98:a6:c7:32:0e:a0:82:7b:9b:8f:
be:5d:e1:a3:1b:a4:63:fc:a6:14:44:2f:98:26:35:bc:e5:14:
23:0c:20:db:51:9f:9a:b4:ef:ee:2e:a0:bc:d3:07:70:36:3c:
5e:9a:29:dc:19:fe:be:47:d4:35:e0:d3:2e:33:fb:7d:5a:67:
68:bb:ea:26:0b:da:53:cb:b3:d2:07:24:63:a6:3c:1f:8e:17:
14:16:58:61:a8:90:70:99:3a:05:e3:ff:c2:33:48:05:15:41:
69:ca:32:b5:36:99:49:13:1a:13:ec:05:a4:da:99:ea:19:79:
bd:67:4d:cd:02:af:ed:5e:62:79:28:58:05:97:11:07:a7:c7:
d1:5d:67:37:ca:d6:55:a7:b9:6c:cb:a8:f6:8c:ba:47:ad:a5:
b6:85:45:a3:68:ea:c7:4a:e8:24:f1:76:5c:d1:69:79:fe:cd:
fb:0b:de:4c:a9:c9:c1:bb:29:ff:b6:70:75:35:f0:f3:a1:ee:
bd:46:05:ce:ee:db:e3:b0:24:86:1c:fc:f4:a7:90:cd:63:1a:
a0:9c:52:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASE1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDQwMTI2WhcNMjUxMjEwMDQwMTI2WjAYMRYw
FAYDVQQDEw02NzZhMzIxOS05ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA15E6wt+DKUZVJPl5QMmI0+wjglDxR/7it6sKOpNg/ZZsZ+hS3QWdP0FV
bpWfevVu62OZLzLhARQf/B/lR3HUOlfgnFsZBev5ORXGVIrH+o5qqP97QpI0NXQl
/Umh66qXy1STfQ5TgMDCElCdmzUelyHwjGIFNbMvg/67+gUi4X3VY5c7TxnnFxQi
Hab7Y070C+GvGfFOYpqFRL9D/QQ0creUUmfw2nYb52I+EkF98OuJN2iVLdbCkQB8
droCo1Nk5AMfoaOQ0mOAlfHawr5f5pX+NSNb7QCe5ugFcHhjCkYMrprug5CWrZvq
/Kle8VLbJpZDrbpLo4tlcavs5Wmu+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB2a
MhGCXEFcjdsvzRlCXAFx0EW2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTBBQzlGMkMxQUIxMUVGQTQ1Nzg3OUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlz4MA0GCSqGSIb3DQEB
CwUAA4IBAQCaL3jnD2/ceKeoJFApMR/YJF2lDr5Ne0P7mbE8aAP0QmXQ4S8U7FcN
YFPk2pimxzIOoIJ7m4++XeGjG6Rj/KYURC+YJjW85RQjDCDbUZ+atO/uLqC80wdw
NjxemincGf6+R9Q14NMuM/t9Wmdou+omC9pTy7PSByRjpjwfjhcUFlhhqJBwmToF
4//CM0gFFUFpyjK1NplJExoT7AWk2pnqGXm9Z03NAq/tXmJ5KFgFlxEHp8fRXWc3
ytZVp7lsy6j2jLpHraW2hUWjaOrHSugk8XZc0Wl5/s37C95MqcnBuyn/tnB1NfDz
oe69RgXO7tvjsCSGHPz0p5DNYxqgnFIQ
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:47 2025 by rpki-client