Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D8070CC0C811EF95909C71762E951A.roa
File: E4D8070CC0C811EF95909C71762E951A.roa (raw, json)
Hash identifier: utLoUe0wvRTt41CZAZNk83fWZmrhi0DmG8xchDmtaaQ=
Subject key identifier: F2:CE:FF:BE:49:48:6B:D5:08:BE:5E:51:E2:51:42:6A:5B:E4:14:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D8070CC0C811EF95909C71762E951A.roa
Signing time: Mon 23 Dec 2024 00:57:34 +0000
ROA not before: Mon 23 Dec 2024 00:00:30 +0000
ROA not after: Wed 10 Dec 2025 00:00:30 +0000
asID: 984
IP address blocks: 154.82.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73180 (0x11ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 00:00:30 2024 GMT
Not After : Dec 10 00:00:30 2025 GMT
Subject: CN=6768b57e-52f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:af:a7:07:ff:cb:68:45:3e:e4:85:f6:2a:
0e:80:7a:dd:61:fd:98:26:a3:66:07:21:af:6d:ea:
86:5b:07:f4:bf:bc:85:70:81:98:e6:6b:1d:5e:c1:
70:83:46:8d:86:98:22:d4:65:2f:8d:d1:2a:25:f3:
ab:e3:12:e7:d0:d5:55:61:f3:7b:7d:c4:11:3f:52:
a5:58:d2:5c:a9:33:0a:30:7f:f7:a4:55:d6:73:75:
88:d1:67:bf:93:38:0e:58:fc:70:37:28:7b:f7:d4:
44:07:d9:a1:7f:0a:98:53:8a:0e:32:e1:bf:e8:12:
f7:e1:5b:89:e0:13:dd:35:df:63:64:55:1c:7f:e0:
9f:27:0b:3a:09:5a:fc:be:2a:c5:87:82:af:d4:27:
4b:9a:4d:16:f4:be:52:0c:58:e3:15:82:5c:11:e3:
94:b5:36:85:62:cf:a2:35:b5:bd:26:d1:77:46:01:
6b:9b:ed:8b:b6:3a:02:84:c7:7e:65:e8:45:b1:6e:
ff:64:bf:d1:9a:07:9d:25:c2:82:03:22:15:01:fe:
57:65:43:49:7d:77:39:60:4d:be:08:95:0e:33:35:
18:43:e2:3d:d0:37:0d:8f:34:dc:4b:9f:d5:53:bd:
a7:1f:9d:9c:59:bd:ac:e2:62:c3:f8:82:68:6a:a7:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:FF:BE:49:48:6B:D5:08:BE:5E:51:E2:51:42:6A:5B:E4:14:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4D8070CC0C811EF95909C71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.225.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:02:43:9f:df:f9:d1:f9:bd:b8:4d:77:13:79:65:db:29:14:
16:b7:1a:7c:1d:58:b6:98:1e:37:88:52:77:d7:2f:62:75:ae:
35:34:ed:e8:f2:08:6f:a4:0c:45:7f:7a:1f:30:fd:ba:cd:45:
9b:32:7b:6b:38:68:3d:18:da:6b:81:19:2b:03:b9:1a:b0:df:
a0:3c:2a:de:cd:b8:60:5c:59:60:b7:8e:43:e6:45:c4:72:3b:
a0:ca:71:20:7c:ae:a0:e5:e2:a9:00:54:42:b3:75:d6:75:b3:
bd:19:ec:81:21:6f:ea:8f:8a:95:c6:cd:25:02:63:59:de:cd:
53:78:8d:1d:9d:2f:0b:2d:a7:5f:81:47:c7:31:0a:18:c5:bc:
6b:b0:c5:5d:d3:fa:24:a7:f4:d4:40:ca:ab:a7:bd:0c:f5:e3:
35:d9:c1:61:33:df:79:b6:bb:15:88:81:46:72:85:9a:a1:49:
93:5c:01:6a:94:73:d8:91:3b:29:8f:4b:a9:93:01:6a:ca:0d:
2c:3e:77:2d:56:2b:90:4e:03:16:c9:4b:0a:f2:1f:33:56:a7:
d7:04:95:18:b8:9d:0d:39:d2:3c:57:eb:c4:6a:8a:14:3b:59:
bd:27:41:88:4c:a5:be:38:e2:06:cd:d5:a3:26:bf:00:a4:0f:
0d:fd:03:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR3cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDAwMDMwWhcNMjUxMjEwMDAwMDMwWjAYMRYw
FAYDVQQDEw02NzY4YjU3ZS01MmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4mCvpwf/y2hFPuSF9ioOgHrdYf2YJqNmByGvbeqGWwf0v7yFcIGY5msd
XsFwg0aNhpgi1GUvjdEqJfOr4xLn0NVVYfN7fcQRP1KlWNJcqTMKMH/3pFXWc3WI
0We/kzgOWPxwNyh799REB9mhfwqYU4oOMuG/6BL34VuJ4BPdNd9jZFUcf+CfJws6
CVr8virFh4Kv1CdLmk0W9L5SDFjjFYJcEeOUtTaFYs+iNbW9JtF3RgFrm+2LtjoC
hMd+ZehFsW7/ZL/RmgedJcKCAyIVAf5XZUNJfXc5YE2+CJUOMzUYQ+I90DcNjzTc
S5/VU72nH52cWb2s4mLD+IJoaqeEnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPLO
/75JSGvVCL5eUeJRQmpb5BRrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNEQ4MDcwQ0MwQzgxMUVGOTU5MDlDNzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLhMA0GCSqGSIb3DQEB
CwUAA4IBAQCzAkOf3/nR+b24TXcTeWXbKRQWtxp8HVi2mB43iFJ31y9ida41NO3o
8ghvpAxFf3ofMP26zUWbMntrOGg9GNprgRkrA7kasN+gPCrezbhgXFlgt45D5kXE
cjugynEgfK6g5eKpAFRCs3XWdbO9GeyBIW/qj4qVxs0lAmNZ3s1TeI0dnS8LLadf
gUfHMQoYxbxrsMVd0/okp/TUQMqrp70M9eM12cFhM995trsViIFGcoWaoUmTXAFq
lHPYkTspj0upkwFqyg0sPnctViuQTgMWyUsK8h8zVqfXBJUYuJ0NOdI8V+vEaooU
O1m9J0GITKW+OOIGzdWjJr8ApA8N/QPe
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:35 2025 by rpki-client