Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCABC560C5E611EF90FFCF86762E951A.roa
File: CCABC560C5E611EF90FFCF86762E951A.roa (raw, json)
Hash identifier: nYSiqRsoUW5LA+JLm9GDzvIU1xj5JPeyoZIiseEJQFk=
Subject key identifier: 3A:A6:99:29:98:3D:B7:05:A4:FD:F5:C6:A7:E1:16:97:20:5D:1C:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCABC560C5E611EF90FFCF86762E951A.roa
Signing time: Sun 29 Dec 2024 13:14:14 +0000
ROA not before: Sun 29 Dec 2024 13:14:10 +0000
ROA not after: Fri 12 Dec 2025 13:14:10 +0000
asID: 984
IP address blocks: 154.210.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77184 (0x12d80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:14:10 2024 GMT
Not After : Dec 12 13:14:10 2025 GMT
Subject: CN=67714b26-8d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:c9:e5:f4:e4:07:52:81:b9:71:11:23:09:
73:72:bc:e1:54:76:46:55:16:39:6f:3f:5c:a1:04:
54:16:48:e5:0c:4e:4d:9b:55:d8:02:07:b4:7c:a8:
70:7a:f6:4e:21:03:88:1a:c7:97:d9:4d:dd:ad:ee:
d0:e5:4a:de:ad:ef:18:40:e3:2f:4c:ba:9f:06:d0:
a1:c6:ce:49:f6:21:0d:e2:79:e5:6e:cf:d0:e4:49:
6c:d0:d0:3a:4f:37:f8:20:28:10:bd:64:68:85:d9:
a0:d5:94:22:4a:be:8d:c3:67:c5:fb:20:7a:d4:0c:
b1:73:c7:ca:1b:6b:a1:34:e6:9b:a7:60:79:bd:28:
18:fa:a5:4d:a0:8b:54:d7:0b:54:e7:ab:0e:36:1a:
e5:06:62:c5:f1:5c:11:60:4a:02:e6:92:3c:e3:5f:
55:fa:9b:e0:32:37:50:8f:f7:84:1e:44:cf:83:54:
d0:ca:3a:13:80:ef:5f:13:1d:9c:c9:94:4f:13:ec:
8d:30:3a:ed:c3:f0:33:cf:27:2b:e4:68:c1:9a:76:
59:46:6d:81:1a:55:0e:68:c4:3a:aa:dd:a4:d5:af:
f2:81:e7:0a:0c:82:20:f4:8b:bd:7a:13:03:f4:d5:
b0:6a:30:df:d5:d0:4b:74:fd:07:60:8c:e3:71:2b:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A6:99:29:98:3D:B7:05:A4:FD:F5:C6:A7:E1:16:97:20:5D:1C:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCABC560C5E611EF90FFCF86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d8:55:58:bd:20:82:17:35:0e:08:51:eb:5f:0e:7e:c3:c7:
c3:b9:e7:76:85:7c:aa:ac:8c:13:3c:d3:20:56:62:f8:e7:d3:
cf:fe:fa:51:11:35:9d:2e:6c:7f:7c:9e:91:87:a6:5f:76:27:
7f:c6:2b:df:12:c9:58:4d:96:a4:b1:ca:8c:84:5d:1b:f3:7a:
82:fc:53:9f:b0:4f:f9:d8:14:d3:22:72:d5:6d:00:78:e2:26:
a5:3d:d5:0f:04:d1:7c:bb:05:0a:f2:95:a2:39:98:37:4e:bf:
9a:fc:71:22:55:e6:ec:46:41:05:a9:c7:b7:7c:bc:3e:50:1e:
bf:2d:72:21:38:86:a3:f0:37:37:01:95:4f:75:a5:cd:36:37:
b2:bb:0e:71:6f:0f:ad:cf:b0:f3:a0:b6:25:d3:59:dd:0d:d2:
01:af:ce:89:46:0c:d6:3f:5f:08:2a:b0:41:0a:4f:5a:2a:7e:
7b:4d:96:97:ac:1f:4b:ff:44:40:93:5f:07:3a:ac:4a:52:49:
e8:97:ad:9f:57:76:7d:2c:13:ee:fe:ef:6e:71:2a:91:8e:04:
e7:40:79:59:81:4f:5c:58:57:1b:b7:d7:f8:90:6c:87:04:5c:
b7:85:a4:7e:40:c2:ee:bb:11:f3:d3:2c:5c:6d:f7:fd:91:e2:
b6:eb:09:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS2AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTMxNDEwWhcNMjUxMjEyMTMxNDEwWjAYMRYw
FAYDVQQDEw02NzcxNGIyNi04ZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzAzJ5fTkB1KBuXERIwlzcrzhVHZGVRY5bz9coQRUFkjlDE5Nm1XYAge0
fKhwevZOIQOIGseX2U3dre7Q5Urere8YQOMvTLqfBtChxs5J9iEN4nnlbs/Q5Els
0NA6Tzf4ICgQvWRohdmg1ZQiSr6Nw2fF+yB61Ayxc8fKG2uhNOabp2B5vSgY+qVN
oItU1wtU56sONhrlBmLF8VwRYEoC5pI8419V+pvgMjdQj/eEHkTPg1TQyjoTgO9f
Ex2cyZRPE+yNMDrtw/Azzycr5GjBmnZZRm2BGlUOaMQ6qt2k1a/ygecKDIIg9Iu9
ehMD9NWwajDf1dBLdP0HYIzjcSudfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDqm
mSmYPbcFpP31xqfhFpcgXRwaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQ0FCQzU2MEM1RTYxMUVGOTBGRkNGODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLvMA0GCSqGSIb3DQEB
CwUAA4IBAQDA2FVYvSCCFzUOCFHrXw5+w8fDued2hXyqrIwTPNMgVmL459PP/vpR
ETWdLmx/fJ6Rh6Zfdid/xivfEslYTZakscqMhF0b83qC/FOfsE/52BTTInLVbQB4
4ialPdUPBNF8uwUK8pWiOZg3Tr+a/HEiVebsRkEFqce3fLw+UB6/LXIhOIaj8Dc3
AZVPdaXNNjeyuw5xbw+tz7DzoLYl01ndDdIBr86JRgzWP18IKrBBCk9aKn57TZaX
rB9L/0RAk18HOqxKUknol62fV3Z9LBPu/u9ucSqRjgTnQHlZgU9cWFcbt9f4kGyH
BFy3haR+QMLuuxHz0yxcbff9keK26wns
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:08 2025 by rpki-client