Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED3A5BC0C51E11EF9A154294762E951A.roa
File: ED3A5BC0C51E11EF9A154294762E951A.roa (raw, json)
Hash identifier: BdSbyXL6S1WfC1UOVhrcMygkoxEjHmlvg+14pG3NlMc=
Subject key identifier: 30:23:18:C7:BF:3B:B1:97:0E:85:41:7D:4C:1A:16:24:28:44:6F:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED3A5BC0C51E11EF9A154294762E951A.roa
Signing time: Sat 28 Dec 2024 13:23:29 +0000
ROA not before: Sat 28 Dec 2024 13:23:26 +0000
ROA not after: Sun 12 Dec 2027 13:23:26 +0000
asID: 17561
IP address blocks: 154.203.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76611 (0x12b43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:23:26 2024 GMT
Not After : Dec 12 13:23:26 2027 GMT
Subject: CN=676ffbd1-15c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:ea:80:9a:f5:71:94:cb:26:c6:78:f5:3f:
cc:05:bb:9d:01:34:bc:5e:cf:0d:68:e0:1f:4d:34:
fe:b3:ee:84:00:90:79:fe:d5:f7:7a:38:fe:ea:09:
26:46:3c:26:ca:ea:80:8d:09:0b:ca:ab:82:c0:15:
8d:f4:4f:92:0a:d1:bd:0f:21:58:33:21:80:c7:71:
3c:39:83:b4:61:71:09:b8:82:c5:7c:f1:31:91:9b:
90:4f:f5:71:41:a8:2c:0b:f4:c0:ca:d9:0f:18:27:
da:be:fa:cf:54:24:48:03:73:25:f4:11:51:1d:ce:
d4:d9:4d:cd:6a:88:c0:85:f8:4a:9a:6e:64:38:67:
95:f7:fc:34:a2:0f:7a:73:7a:c9:83:79:58:e7:7f:
4a:c5:51:40:9b:71:75:e9:5c:f0:5f:4e:5f:be:89:
c5:80:07:9f:b1:2f:7b:de:c4:bc:7c:18:38:a1:5e:
c0:d5:84:48:4b:e1:eb:aa:25:29:6d:7b:77:df:c5:
bc:c5:87:bb:be:27:03:02:6a:23:dd:cc:a4:ba:da:
aa:5e:7f:29:a3:97:c9:41:84:fb:7f:4e:2c:0a:05:
8b:79:67:9e:b2:7b:d6:80:65:5a:61:dd:7d:08:d6:
af:0b:37:29:47:8e:16:5e:d0:05:fe:97:d9:5e:75:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:18:C7:BF:3B:B1:97:0E:85:41:7D:4C:1A:16:24:28:44:6F:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED3A5BC0C51E11EF9A154294762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:03:4c:cb:ce:82:0f:01:ef:80:ee:4e:dc:73:0e:f6:4b:84:
64:93:53:e9:45:fc:20:c6:05:5f:17:c6:60:0c:f5:13:05:8f:
7a:13:ef:c8:8a:9b:29:c3:97:0a:10:a8:4e:a8:36:06:8f:06:
ef:11:8a:d9:04:8a:8d:6d:eb:4b:96:0d:cd:3e:68:0a:3e:53:
ce:e3:4b:0c:6f:c7:32:bf:46:47:18:bd:ed:46:e7:f9:f5:f6:
d2:0c:6b:64:f0:b0:de:38:e1:41:08:75:53:2f:cb:10:05:90:
47:2f:bb:99:f3:c1:0b:e9:fc:eb:ef:43:60:dd:33:90:d5:c7:
0f:dc:e0:85:35:52:b3:fd:2f:d5:af:dc:9d:40:15:7b:67:0f:
bc:5d:84:fa:6e:a5:7b:63:7c:bc:03:b1:b9:11:06:d4:34:3c:
1c:f2:37:1a:66:47:44:ec:d4:c8:fe:4b:19:38:90:ac:da:c5:
f4:47:cb:96:0f:48:2c:3a:f4:7a:ed:04:67:6e:12:79:a5:13:
8e:4b:de:e0:8b:6e:53:b5:b6:c7:8e:b8:3b:36:b5:67:b0:ae:
f8:30:75:23:5c:0d:85:e0:e0:3b:28:53:01:43:39:50:44:a2:
02:df:61:46:63:2c:07:ea:6a:4a:f0:e1:fa:65:69:a1:77:35:
b0:c0:cc:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAStDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTMyMzI2WhcNMjcxMjEyMTMyMzI2WjAYMRYw
FAYDVQQDEw02NzZmZmJkMS0xNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv2vqgJr1cZTLJsZ49T/MBbudATS8Xs8NaOAfTTT+s+6EAJB5/tX3ejj+
6gkmRjwmyuqAjQkLyquCwBWN9E+SCtG9DyFYMyGAx3E8OYO0YXEJuILFfPExkZuQ
T/VxQagsC/TAytkPGCfavvrPVCRIA3Ml9BFRHc7U2U3NaojAhfhKmm5kOGeV9/w0
og96c3rJg3lY539KxVFAm3F16VzwX05fvonFgAefsS973sS8fBg4oV7A1YRIS+Hr
qiUpbXt338W8xYe7vicDAmoj3cykutqqXn8po5fJQYT7f04sCgWLeWeesnvWgGVa
Yd19CNavCzcpR44WXtAF/pfZXnXobwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDAj
GMe/O7GXDoVBfUwaFiQoRG8AMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRDNBNUJDMEM1MUUxMUVGOUExNTQyOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssuMA0GCSqGSIb3DQEB
CwUAA4IBAQALA0zLzoIPAe+A7k7ccw72S4Rkk1PpRfwgxgVfF8ZgDPUTBY96E+/I
ipspw5cKEKhOqDYGjwbvEYrZBIqNbetLlg3NPmgKPlPO40sMb8cyv0ZHGL3tRuf5
9fbSDGtk8LDeOOFBCHVTL8sQBZBHL7uZ88EL6fzr70Ng3TOQ1ccP3OCFNVKz/S/V
r9ydQBV7Zw+8XYT6bqV7Y3y8A7G5EQbUNDwc8jcaZkdE7NTI/ksZOJCs2sX0R8uW
D0gsOvR67QRnbhJ5pROOS97gi25TtbbHjrg7NrVnsK74MHUjXA2F4OA7KFMBQzlQ
RKIC32FGYywH6mpK8OH6ZWmhdzWwwMxv
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:28 2025 by rpki-client