Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BB3CB8BE9111EFAEADED94762E951A.roa
File: C2BB3CB8BE9111EFAEADED94762E951A.roa (raw, json)
Hash identifier: vQMy2uZduSfItm2lDk6siaxbvfjjKVU1ZY8sjnkdxYE=
Subject key identifier: FC:D9:06:98:C5:07:21:FA:A5:91:CA:D4:0C:83:7F:EF:58:F6:D7:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BB3CB8BE9111EFAEADED94762E951A.roa
Signing time: Fri 20 Dec 2024 05:17:52 +0000
ROA not before: Fri 20 Dec 2024 05:17:48 +0000
ROA not after: Wed 10 Dec 2025 05:17:48 +0000
asID: 984
IP address blocks: 154.82.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72726 (0x11c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 05:17:48 2024 GMT
Not After : Dec 10 05:17:48 2025 GMT
Subject: CN=6764fe00-f27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:81:3f:89:53:73:8e:6f:32:71:5c:9d:3b:
32:26:86:2b:89:df:2d:45:7e:6f:f7:e5:d4:5a:27:
7e:fb:b7:70:f6:9e:e2:02:7a:66:52:2a:91:79:c8:
66:b8:69:18:d8:58:39:7b:39:eb:42:30:f6:33:f0:
d5:de:69:b1:75:7b:b9:31:c9:c6:82:88:d2:1f:24:
b3:9c:aa:69:70:2a:3c:51:f5:f9:87:77:2b:38:c5:
3e:07:d6:29:93:85:44:71:f0:8e:e9:37:6d:82:9c:
4a:70:16:30:e2:c7:c7:7c:45:d2:fd:f8:62:60:42:
fb:5d:6d:62:ba:1e:fe:23:70:10:59:b8:86:fb:b5:
1c:5b:16:80:6f:ff:80:35:83:e7:d4:41:e1:f4:82:
91:00:ba:18:85:71:6c:bc:61:a6:2e:bd:5e:8b:ba:
c9:c3:de:17:17:79:47:c3:4c:dd:42:61:1d:dd:c4:
b6:0a:0d:6c:7e:61:85:bf:ca:8e:0f:fe:7b:c2:df:
ab:46:ce:84:39:14:95:71:46:5d:8b:70:20:84:04:
60:f1:4d:c3:1d:2f:fd:71:db:50:aa:30:52:cc:52:
d3:d5:cf:45:22:d5:48:d4:44:78:b7:84:30:bb:5b:
43:54:c3:88:12:06:ab:51:c6:64:45:c6:3d:0b:91:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D9:06:98:C5:07:21:FA:A5:91:CA:D4:0C:83:7F:EF:58:F6:D7:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2BB3CB8BE9111EFAEADED94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.184.0/24
Signature Algorithm: sha256WithRSAEncryption
97:42:04:e0:0e:ba:9c:e7:08:43:5b:60:f3:b8:99:bd:f6:37:
de:af:16:09:1b:a1:db:c6:95:71:0f:73:26:a9:46:57:d6:d0:
b7:d0:42:d9:40:6a:a4:a1:90:98:f1:ab:92:5b:cd:89:9b:07:
56:ae:29:3e:48:b9:c5:26:fd:2a:a4:b9:d5:34:00:ed:f7:78:
28:98:7e:e8:9d:73:d9:7e:8c:bc:fd:82:cd:e7:9b:4f:9b:0b:
1d:ba:c4:96:52:77:93:8d:f5:7b:da:ce:de:99:4f:c3:31:6b:
59:e6:b9:79:a8:2a:8b:9c:55:87:cf:d1:f4:c2:09:80:63:f2:
8b:a2:f2:37:5a:d1:6f:8c:f3:01:e2:0e:e8:ab:c5:ea:d2:1a:
d6:ae:24:2f:d3:65:05:7e:af:17:5a:50:57:85:64:8c:22:59:
4a:d3:5b:4e:4d:0c:f1:ce:50:18:05:b1:81:ca:c4:a6:94:9d:
78:d8:d2:89:15:22:12:e3:be:9b:b5:af:45:cf:fd:af:2b:7a:
9d:29:ea:dd:67:0c:52:57:04:22:6f:d1:f7:15:0b:e6:3f:b2:
a1:66:ca:17:0c:0c:91:05:5b:39:fd:99:36:c2:de:d1:2b:38:
4c:7b:26:0c:c9:51:2e:aa:46:52:ef:32:72:ed:64:87:a9:36:
2c:8a:4b:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARwWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDUxNzQ4WhcNMjUxMjEwMDUxNzQ4WjAYMRYw
FAYDVQQDEw02NzY0ZmUwMC1mMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo5aBP4lTc45vMnFcnTsyJoYrid8tRX5v9+XUWid++7dw9p7iAnpmUiqR
echmuGkY2Fg5eznrQjD2M/DV3mmxdXu5McnGgojSHySznKppcCo8UfX5h3crOMU+
B9Ypk4VEcfCO6TdtgpxKcBYw4sfHfEXS/fhiYEL7XW1iuh7+I3AQWbiG+7UcWxaA
b/+ANYPn1EHh9IKRALoYhXFsvGGmLr1ei7rJw94XF3lHw0zdQmEd3cS2Cg1sfmGF
v8qOD/57wt+rRs6EORSVcUZdi3AghARg8U3DHS/9cdtQqjBSzFLT1c9FItVI1ER4
t4Qwu1tDVMOIEgarUcZkRcY9C5GuuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPzZ
BpjFByH6pZHK1AyDf+9Y9tdxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMkJCM0NCOEJFOTExMUVGQUVBREVEOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlK4MA0GCSqGSIb3DQEB
CwUAA4IBAQCXQgTgDrqc5whDW2DzuJm99jferxYJG6HbxpVxD3MmqUZX1tC30ELZ
QGqkoZCY8auSW82JmwdWrik+SLnFJv0qpLnVNADt93gomH7onXPZfoy8/YLN55tP
mwsdusSWUneTjfV72s7emU/DMWtZ5rl5qCqLnFWHz9H0wgmAY/KLovI3WtFvjPMB
4g7oq8Xq0hrWriQv02UFfq8XWlBXhWSMIllK01tOTQzxzlAYBbGBysSmlJ142NKJ
FSIS476bta9Fz/2vK3qdKerdZwxSVwQib9H3FQvmP7KhZsoXDAyRBVs5/Zk2wt7R
KzhMeyYMyVEuqkZS7zJy7WSHqTYsiksB
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:04 2025 by rpki-client