Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9704CFEC26A11EFA19C466C762E951A.roa
File: E9704CFEC26A11EFA19C466C762E951A.roa (raw, json)
Hash identifier: AJG0WdQti/8SRJrvhizkcldCYdOp2TV5cIryoiUlc90=
Subject key identifier: A5:AE:9A:7D:8C:D0:82:D2:F6:6D:B6:28:D7:39:44:9A:8D:4D:5F:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012420
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9704CFEC26A11EFA19C466C762E951A.roa
Signing time: Wed 25 Dec 2024 02:49:51 +0000
ROA not before: Wed 25 Dec 2024 02:49:47 +0000
ROA not after: Wed 10 Dec 2025 02:49:47 +0000
asID: 984
IP address blocks: 154.211.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74784 (0x12420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:49:47 2024 GMT
Not After : Dec 10 02:49:47 2025 GMT
Subject: CN=676b72cf-3e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:c6:e3:d1:b9:b5:d6:31:c5:fe:8b:a8:80:
7f:c8:ee:fa:a8:6a:00:f2:66:05:0d:b5:7b:f2:ab:
b5:09:fd:5d:dc:f7:75:1b:c6:b3:5a:ab:d4:d2:12:
02:38:b4:10:bd:7e:2f:98:c4:28:65:5d:e0:1a:52:
c6:42:cd:95:46:7c:e2:5a:37:39:6b:d6:f0:d4:9b:
f5:e7:5b:9d:39:73:65:ae:65:7a:59:fb:95:8b:3d:
fb:e4:b8:90:6a:4d:c8:9a:bc:61:2c:56:27:85:74:
97:78:25:d8:b3:fa:e3:3d:bb:1b:fb:1d:96:d0:a6:
5b:be:b2:54:97:f6:05:ad:51:c1:bf:1c:09:05:9f:
b1:f3:ad:b5:f5:12:fb:6a:84:73:cd:48:c3:24:2f:
89:4e:6a:4c:83:27:ed:45:68:0a:b2:d5:fc:e9:9c:
e6:ed:20:47:ce:4f:9f:74:e8:21:57:c1:a4:79:54:
22:23:56:a0:a1:07:1b:b5:04:d7:36:f8:60:d2:13:
90:67:ac:23:7c:81:65:a0:4d:26:37:0b:51:14:e5:
28:9e:8f:29:71:ed:73:3b:86:bb:e7:0d:ae:0a:d3:
1e:60:df:9c:b8:d7:41:24:02:75:2c:d5:b1:ec:5e:
e8:cc:87:f8:5f:6b:92:39:e2:7c:36:df:59:0d:9e:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:9A:7D:8C:D0:82:D2:F6:6D:B6:28:D7:39:44:9A:8D:4D:5F:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9704CFEC26A11EFA19C466C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.156.0/24
Signature Algorithm: sha256WithRSAEncryption
82:04:c4:6e:4a:a7:19:12:d7:ae:ae:c2:8d:4f:43:5f:d0:79:
ca:d6:1b:45:9e:0a:93:40:6a:a6:e5:7a:1b:86:5b:6d:d2:4c:
01:f1:45:e2:c2:e8:9e:9a:e1:1c:7c:b0:0a:89:cb:33:5d:31:
b1:36:3a:63:61:6e:53:c7:a5:21:4d:36:00:be:98:4a:ab:94:
6a:03:20:d0:42:2c:f3:95:1f:11:43:89:e3:18:41:94:7a:cd:
8f:0a:f5:2b:b8:13:bf:07:b3:31:f8:bb:46:0d:42:33:91:2e:
bd:39:ed:39:82:e5:c4:b5:ba:04:84:97:e5:b6:8a:e2:79:db:
f9:7e:ba:0b:94:4e:4d:f8:63:85:16:ba:5c:6e:96:91:24:67:
c9:dd:5b:f5:a4:d0:03:c1:9d:b8:5a:02:58:ff:9f:0d:96:7d:
f7:b6:29:22:f1:78:97:7d:3e:94:2b:89:00:84:db:68:2d:1d:
0a:51:f9:9d:f0:2c:37:bd:a4:b1:c1:12:bf:92:18:d4:91:f6:
7c:9a:52:de:99:6c:54:6b:97:eb:93:70:29:83:ee:ff:1b:ac:
b8:5a:34:93:f1:7d:cb:d1:24:e1:11:41:68:a7:c5:a8:88:30:
97:7e:fb:5d:bb:9c:af:2b:fe:da:18:6a:b1:76:7e:5e:85:c9:
3f:c9:a6:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASQgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDI0OTQ3WhcNMjUxMjEwMDI0OTQ3WjAYMRYw
FAYDVQQDEw02NzZiNzJjZi0zZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2obG49G5tdYxxf6LqIB/yO76qGoA8mYFDbV78qu1Cf1d3Pd1G8azWqvU
0hICOLQQvX4vmMQoZV3gGlLGQs2VRnziWjc5a9bw1Jv151udOXNlrmV6WfuViz37
5LiQak3ImrxhLFYnhXSXeCXYs/rjPbsb+x2W0KZbvrJUl/YFrVHBvxwJBZ+x8621
9RL7aoRzzUjDJC+JTmpMgyftRWgKstX86Zzm7SBHzk+fdOghV8GkeVQiI1agoQcb
tQTXNvhg0hOQZ6wjfIFloE0mNwtRFOUono8pce1zO4a75w2uCtMeYN+cuNdBJAJ1
LNWx7F7ozIf4X2uSOeJ8Nt9ZDZ6yhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKWu
mn2M0ILS9m22KNc5RJqNTV8AMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOTcwNENGRUMyNkExMUVGQTE5QzQ2NkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtOcMA0GCSqGSIb3DQEB
CwUAA4IBAQCCBMRuSqcZEteursKNT0Nf0HnK1htFngqTQGqm5Xobhltt0kwB8UXi
wuiemuEcfLAKicszXTGxNjpjYW5Tx6UhTTYAvphKq5RqAyDQQizzlR8RQ4njGEGU
es2PCvUruBO/B7Mx+LtGDUIzkS69Oe05guXEtboEhJfltoriedv5froLlE5N+GOF
FrpcbpaRJGfJ3Vv1pNADwZ24WgJY/58Nln33tiki8XiXfT6UK4kAhNtoLR0KUfmd
8Cw3vaSxwRK/khjUkfZ8mlLemWxUa5frk3Apg+7/G6y4WjST8X3L0SThEUFop8Wo
iDCXfvtdu5yvK/7aGGqxdn5ehck/yabL
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:44 2025 by rpki-client