Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F23DB452C40911EFA11DFC42762E951A.roa
File: F23DB452C40911EFA11DFC42762E951A.roa (raw, json)
Hash identifier: GRLKhCC7o5d/vx3QtxIbBFrjBJCe31X59shskgkYgCQ=
Subject key identifier: D0:F7:FE:B2:C4:2E:DC:6A:67:A2:49:BC:1B:DD:FE:52:D4:57:E5:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012909
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F23DB452C40911EFA11DFC42762E951A.roa
Signing time: Fri 27 Dec 2024 04:20:47 +0000
ROA not before: Fri 27 Dec 2024 04:20:43 +0000
ROA not after: Fri 12 Dec 2025 04:20:43 +0000
asID: 984
IP address blocks: 154.196.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76041 (0x12909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:20:43 2024 GMT
Not After : Dec 12 04:20:43 2025 GMT
Subject: CN=676e2b1f-8f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:85:c1:f6:4d:9d:f6:1f:61:8f:29:81:92:
d3:10:38:9b:fe:15:bb:f3:d3:ff:49:86:6c:63:04:
42:21:b8:b8:2f:fd:37:f5:53:ca:ff:b2:34:c8:2c:
12:50:d7:a7:81:64:c2:72:73:2d:46:05:20:aa:c1:
aa:09:d5:cf:34:8c:62:8c:ab:8d:2f:e2:08:35:b9:
bb:98:7a:56:f8:a9:1f:fa:84:54:04:53:9d:7f:ed:
3b:95:ab:b9:47:df:eb:b5:98:d5:f9:4f:5e:3a:72:
dc:df:08:c6:75:26:fb:b1:4d:f3:2e:a8:e4:37:55:
e4:7d:a4:5f:da:be:c8:da:b4:5b:93:52:94:f9:a7:
fa:20:21:71:85:34:8e:81:28:97:ba:4c:97:6e:c3:
00:8a:6e:42:00:38:05:8d:48:83:57:42:dc:83:a5:
99:b7:e2:99:79:7d:d3:eb:5f:50:66:67:0f:21:f1:
b9:3f:f6:18:d1:83:06:e6:93:0b:dd:a2:23:c1:24:
5c:49:50:f8:20:f0:6d:ce:21:10:5b:f9:f1:1c:01:
0a:41:3e:92:7f:26:11:cf:b2:7a:69:a3:21:8f:12:
54:62:3d:a2:d9:e8:38:3e:20:7b:f9:67:f2:03:10:
c9:aa:03:3a:41:6b:f6:eb:fa:d7:1b:cf:1e:38:14:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F7:FE:B2:C4:2E:DC:6A:67:A2:49:BC:1B:DD:FE:52:D4:57:E5:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F23DB452C40911EFA11DFC42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8a:68:b6:4a:50:82:89:68:7a:fb:66:85:60:8e:70:dd:0b:
88:23:14:21:04:b2:95:af:fa:df:6f:2f:44:a3:97:45:75:c7:
62:b2:47:77:8f:fc:1e:27:45:ef:26:45:b4:6b:aa:30:77:c1:
a6:19:0a:8b:2e:f5:96:7d:93:1a:52:06:a6:15:b5:fe:ad:f8:
58:85:6c:5a:43:ed:cd:ea:d7:fc:9a:60:cc:69:d3:67:c3:60:
91:9f:6b:75:ec:39:ec:b3:32:9e:5f:2f:5f:3f:4f:d2:3e:d1:
1d:6d:83:3d:2b:37:9e:8e:6d:ab:d4:25:f6:28:f7:33:66:cb:
70:7b:53:57:da:c4:82:cf:cf:4d:7d:14:20:44:61:b3:5e:ef:
a4:cc:49:94:b8:bb:ee:44:61:c1:da:c7:71:e3:12:11:5a:35:
91:0b:e4:f8:93:03:df:af:aa:63:ed:4d:bb:67:29:41:e5:9e:
2d:db:bc:eb:86:c7:47:55:63:38:37:d4:bb:eb:44:09:76:e5:
97:8d:73:aa:27:32:61:af:15:1f:0c:ab:e2:64:c1:cc:6a:35:
55:77:5c:31:c6:4b:bc:99:9a:4e:a4:3b:fb:01:3c:c8:5e:af:
94:38:da:96:a1:71:f3:1c:3e:63:04:2f:5b:ef:7e:ff:12:07:
ce:08:f5:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASkJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDQyMDQzWhcNMjUxMjEyMDQyMDQzWjAYMRYw
FAYDVQQDEw02NzZlMmIxZi04ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAreGFwfZNnfYfYY8pgZLTEDib/hW789P/SYZsYwRCIbi4L/039VPK/7I0
yCwSUNengWTCcnMtRgUgqsGqCdXPNIxijKuNL+IINbm7mHpW+Kkf+oRUBFOdf+07
lau5R9/rtZjV+U9eOnLc3wjGdSb7sU3zLqjkN1XkfaRf2r7I2rRbk1KU+af6ICFx
hTSOgSiXukyXbsMAim5CADgFjUiDV0Lcg6WZt+KZeX3T619QZmcPIfG5P/YY0YMG
5pML3aIjwSRcSVD4IPBtziEQW/nxHAEKQT6SfyYRz7J6aaMhjxJUYj2i2eg4PiB7
+WfyAxDJqgM6QWv26/rXG88eOBSC2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFND3
/rLELtxqZ6JJvBvd/lLUV+WzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMjNEQjQ1MkM0MDkxMUVGQTExREZDNDI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsSrMA0GCSqGSIb3DQEB
CwUAA4IBAQBdimi2SlCCiWh6+2aFYI5w3QuIIxQhBLKVr/rfby9Eo5dFdcdiskd3
j/weJ0XvJkW0a6owd8GmGQqLLvWWfZMaUgamFbX+rfhYhWxaQ+3N6tf8mmDMadNn
w2CRn2t17DnsszKeXy9fP0/SPtEdbYM9Kzeejm2r1CX2KPczZstwe1NX2sSCz89N
fRQgRGGzXu+kzEmUuLvuRGHB2sdx4xIRWjWRC+T4kwPfr6pj7U27ZylB5Z4t27zr
hsdHVWM4N9S760QJduWXjXOqJzJhrxUfDKviZMHMajVVd1wxxku8mZpOpDv7ATzI
Xq+UONqWoXHzHD5jBC9b737/EgfOCPUn
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:51:34 2025 by rpki-client