Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F58A746AC3D711EFB733576F762E951A.roa
File: F58A746AC3D711EFB733576F762E951A.roa (raw, json)
Hash identifier: ejAkGN2DCx/ImWZZftLBG6Yr0eZvtE0aieS2zi8+FHw=
Subject key identifier: C0:44:EA:60:52:D6:02:BD:81:3B:43:48:C4:62:0F:6C:9E:9B:E8:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012886
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F58A746AC3D711EFB733576F762E951A.roa
Signing time: Thu 26 Dec 2024 22:22:58 +0000
ROA not before: Thu 26 Dec 2024 22:22:54 +0000
ROA not after: Sun 12 Dec 2027 22:22:54 +0000
asID: 17561
IP address blocks: 154.85.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75910 (0x12886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:22:54 2024 GMT
Not After : Dec 12 22:22:54 2027 GMT
Subject: CN=676dd742-b8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:c4:6f:8f:e5:08:6b:86:fe:89:58:2b:ba:
16:dd:2d:45:5e:b8:ee:fe:93:05:a2:11:c6:7a:0f:
b3:0f:2c:ba:f7:1f:48:2c:4b:2b:19:4a:75:c0:9a:
8a:37:2b:57:23:ad:28:b4:75:ee:ee:1f:25:27:b3:
5b:20:8f:de:78:f3:0b:f5:22:be:6e:fc:c2:cd:d0:
01:aa:9a:48:95:27:cc:ac:e1:26:36:7a:2a:9c:f7:
4d:43:48:59:6b:fd:31:0a:b2:60:bd:58:49:6b:81:
04:74:ac:99:5e:e1:f3:61:83:95:10:51:35:9f:df:
13:47:4e:ad:67:d1:0b:f1:fe:d7:7c:06:a6:38:35:
f0:81:cc:ab:09:86:f3:e6:b6:22:9b:9c:0d:38:28:
bf:25:18:6a:b8:52:87:5f:45:14:5d:9a:a7:be:3e:
b4:13:b0:57:58:26:39:39:51:f7:d9:58:e3:20:9a:
41:98:0e:8b:9d:52:03:6e:83:36:2d:f3:0f:f2:72:
62:46:ea:7d:dd:02:67:71:c2:d1:df:c3:46:56:2b:
a6:2e:1f:60:de:a0:4e:43:5b:8e:3a:87:25:d8:4e:
25:3e:08:85:3c:30:08:9a:94:dd:39:80:12:9c:1d:
fd:86:55:c6:a0:c7:ad:41:39:a3:19:13:b6:ca:5e:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:EA:60:52:D6:02:BD:81:3B:43:48:C4:62:0F:6C:9E:9B:E8:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F58A746AC3D711EFB733576F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:91:27:4f:9e:67:4d:7b:a7:cf:c9:9b:2c:e5:46:7f:1c:a4:
30:e0:41:1a:e1:32:5f:23:4d:8c:47:cf:f7:db:da:b6:18:bc:
8d:4e:dd:d0:39:c4:ff:08:14:93:3d:ab:f7:9f:33:c6:9a:1c:
f9:af:b8:04:aa:ab:44:ee:cb:1b:fc:4f:06:1c:e1:39:0e:ba:
67:a1:12:11:2c:e7:84:3f:f3:07:fe:ae:5a:82:11:c3:75:fe:
57:38:52:fc:c3:2d:ce:84:a5:54:cc:37:c9:03:9b:bd:38:8b:
2a:b3:af:fa:af:e8:de:19:98:c3:c7:dd:2f:d7:33:d4:b9:34:
35:54:d7:ad:36:02:64:d8:6b:0e:8e:5c:e3:c9:63:7e:2d:ed:
25:3f:49:7a:24:e6:bd:d3:dc:e8:77:7a:17:79:02:7d:e0:b0:
75:c7:81:65:08:6d:c5:bf:06:70:b3:f1:ab:8f:55:5a:de:96:
9a:d0:55:f3:9b:84:bb:de:10:ed:5f:01:0d:cb:7c:cc:fe:e4:
e2:e0:2c:8b:1f:ac:57:17:19:a1:eb:68:b1:a0:d9:4e:2a:cf:
8d:1d:45:60:f6:a1:ce:cb:78:95:53:b0:11:51:77:a7:e5:67:
e7:32:43:b0:48:04:1a:d4:f3:18:7e:98:94:ee:0c:5e:0f:5d:
e1:a0:89:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASiGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjIyMjU0WhcNMjcxMjEyMjIyMjU0WjAYMRYw
FAYDVQQDEw02NzZkZDc0Mi1iOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsyHEb4/lCGuG/olYK7oW3S1FXrju/pMFohHGeg+zDyy69x9ILEsrGUp1
wJqKNytXI60otHXu7h8lJ7NbII/eePML9SK+bvzCzdABqppIlSfMrOEmNnoqnPdN
Q0hZa/0xCrJgvVhJa4EEdKyZXuHzYYOVEFE1n98TR06tZ9EL8f7XfAamODXwgcyr
CYbz5rYim5wNOCi/JRhquFKHX0UUXZqnvj60E7BXWCY5OVH32VjjIJpBmA6LnVID
boM2LfMP8nJiRup93QJnccLR38NGViumLh9g3qBOQ1uOOocl2E4lPgiFPDAImpTd
OYASnB39hlXGoMetQTmjGRO2yl5SOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMBE
6mBS1gK9gTtDSMRiD2yem+iJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNThBNzQ2QUMzRDcxMUVGQjczMzU3NkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlUFMA0GCSqGSIb3DQEB
CwUAA4IBAQCykSdPnmdNe6fPyZss5UZ/HKQw4EEa4TJfI02MR8/329q2GLyNTt3Q
OcT/CBSTPav3nzPGmhz5r7gEqqtE7ssb/E8GHOE5DrpnoRIRLOeEP/MH/q5aghHD
df5XOFL8wy3OhKVUzDfJA5u9OIsqs6/6r+jeGZjDx90v1zPUuTQ1VNetNgJk2GsO
jlzjyWN+Le0lP0l6JOa909zod3oXeQJ94LB1x4FlCG3FvwZws/Grj1Va3paa0FXz
m4S73hDtXwENy3zM/uTi4CyLH6xXFxmh62ixoNlOKs+NHUVg9qHOy3iVU7ARUXen
5WfnMkOwSAQa1PMYfpiU7gxeD13hoImL
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:11:12 2025 by rpki-client