Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E829D096C5E811EF90F4A193762E951A.roa
File: E829D096C5E811EF90F4A193762E951A.roa (raw, json)
Hash identifier: QyyS6p7HB+89euk9crg/DvBas8niDhnq8x04OHGEZTw=
Subject key identifier: 7A:A7:CE:C2:BA:86:A8:55:93:6D:53:B2:6A:5D:62:80:48:BD:33:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E829D096C5E811EF90F4A193762E951A.roa
Signing time: Sun 29 Dec 2024 13:29:19 +0000
ROA not before: Sun 29 Dec 2024 13:29:15 +0000
ROA not after: Fri 12 Dec 2025 13:29:15 +0000
asID: 984
IP address blocks: 154.210.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77202 (0x12d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:29:15 2024 GMT
Not After : Dec 12 13:29:15 2025 GMT
Subject: CN=67714eaf-362d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:86:c9:bf:90:9f:e3:a4:e5:ef:fc:04:97:
0b:a4:93:90:e2:b6:54:e8:db:5b:36:31:8b:62:05:
08:34:b3:97:3f:cc:3f:58:78:fc:2c:b2:ae:74:f7:
87:b4:ed:5e:7b:76:5d:20:75:e5:9d:16:7d:75:f2:
e5:7e:d3:5d:21:90:58:13:29:09:cf:10:58:27:45:
85:f0:62:ff:88:08:84:63:5b:9f:a6:87:e8:8a:89:
62:03:50:8a:32:58:43:be:bb:77:87:7b:88:e9:77:
1a:8c:fc:9c:da:74:f8:3b:64:fe:f6:4d:c9:db:af:
ef:2c:30:66:98:b3:b2:6f:18:02:02:3e:5a:e4:c2:
7c:36:7b:10:8b:3f:72:ef:05:e9:95:47:cc:c7:df:
5f:60:b6:e7:d0:18:05:31:e5:32:11:3f:4b:a8:95:
ee:4e:25:b5:59:d9:cf:a8:be:cd:1a:89:4b:99:2b:
60:b9:33:ff:0e:b6:da:31:bb:00:b4:39:f9:0f:92:
af:38:82:ae:41:e5:66:59:5b:e6:4e:8a:f5:f7:1b:
a4:fa:67:58:3f:85:02:ef:39:0a:5f:72:e5:98:64:
95:c9:b0:1b:f5:ea:88:db:a4:b8:5e:57:71:70:38:
9d:b7:5f:eb:f7:9c:a8:79:9c:93:98:d2:d9:11:cd:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A7:CE:C2:BA:86:A8:55:93:6D:53:B2:6A:5D:62:80:48:BD:33:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E829D096C5E811EF90F4A193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:3f:a6:69:46:9a:01:bf:ec:a2:79:c9:34:b7:95:6b:e0:a6:
1e:de:ae:28:2e:01:b2:34:bd:07:7b:e5:d4:b5:af:df:e2:f4:
06:3a:4f:1e:6e:90:1e:46:82:a5:cf:a6:35:b4:59:d8:6e:15:
28:73:f7:ec:17:0d:0d:52:da:5f:8b:4a:3a:05:9c:08:7e:ee:
63:1d:94:84:ea:6e:a5:49:c6:2a:68:6f:31:29:a1:24:2f:07:
42:ca:69:f1:a6:1b:2c:06:d0:da:71:b3:25:b2:71:9f:af:f9:
13:19:73:b9:ce:f3:9b:7c:f3:be:a5:75:7d:c4:9d:75:f8:4d:
cf:36:dc:46:ca:ee:be:88:3a:ab:10:e6:51:02:86:8c:07:3e:
cc:82:96:3b:ab:84:19:82:ae:4f:f4:c2:b8:55:a3:56:b3:aa:
05:0c:20:ea:89:d4:5e:12:c4:fa:10:29:2c:21:c2:8c:77:70:
8c:b3:95:d6:da:c3:e2:ab:07:94:cd:7a:84:cb:0e:eb:e8:33:
e1:c7:81:a9:27:45:62:ee:cf:b4:5c:df:2f:2e:be:73:1e:4d:
cb:e5:73:74:b6:bb:27:a8:31:9d:d6:af:af:38:6f:6a:85:b5:
67:cf:53:78:2a:04:6f:36:23:27:c2:fd:f8:57:f4:06:1d:4a:
d0:a4:ec:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS2SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTMyOTE1WhcNMjUxMjEyMTMyOTE1WjAYMRYw
FAYDVQQDEw02NzcxNGVhZi0zNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx8eGyb+Qn+Ok5e/8BJcLpJOQ4rZU6NtbNjGLYgUINLOXP8w/WHj8LLKu
dPeHtO1ee3ZdIHXlnRZ9dfLlftNdIZBYEykJzxBYJ0WF8GL/iAiEY1ufpofoioli
A1CKMlhDvrt3h3uI6XcajPyc2nT4O2T+9k3J26/vLDBmmLOybxgCAj5a5MJ8NnsQ
iz9y7wXplUfMx99fYLbn0BgFMeUyET9LqJXuTiW1WdnPqL7NGolLmStguTP/Drba
MbsAtDn5D5KvOIKuQeVmWVvmTor19xuk+mdYP4UC7zkKX3LlmGSVybAb9eqI26S4
XldxcDidt1/r95yoeZyTmNLZEc0xIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHqn
zsK6hqhVk21TsmpdYoBIvTPoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FODI5RDA5NkM1RTgxMUVGOTBGNEExOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtL4MA0GCSqGSIb3DQEB
CwUAA4IBAQCzP6ZpRpoBv+yieck0t5Vr4KYe3q4oLgGyNL0He+XUta/f4vQGOk8e
bpAeRoKlz6Y1tFnYbhUoc/fsFw0NUtpfi0o6BZwIfu5jHZSE6m6lScYqaG8xKaEk
LwdCymnxphssBtDacbMlsnGfr/kTGXO5zvObfPO+pXV9xJ11+E3PNtxGyu6+iDqr
EOZRAoaMBz7MgpY7q4QZgq5P9MK4VaNWs6oFDCDqidReEsT6ECksIcKMd3CMs5XW
2sPiqweUzXqEyw7r6DPhx4GpJ0Vi7s+0XN8vLr5zHk3L5XN0trsnqDGd1q+vOG9q
hbVnz1N4KgRvNiMnwv34V/QGHUrQpOx6
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:23 2025 by rpki-client