Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6191912C25C11EFB30EFF83762E951A.roa
File: F6191912C25C11EFB30EFF83762E951A.roa (raw, json)
Hash identifier: t/3TqGo7T9v+Q1TjBWUBXHFmvbSTeeuw6us3a3ulesA=
Subject key identifier: C1:22:C8:94:95:87:94:51:14:E0:73:A8:75:2B:C7:86:00:DC:99:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012382
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6191912C25C11EFB30EFF83762E951A.roa
Signing time: Wed 25 Dec 2024 01:09:59 +0000
ROA not before: Wed 25 Dec 2024 01:09:56 +0000
ROA not after: Wed 10 Dec 2025 01:09:56 +0000
asID: 984
IP address blocks: 154.199.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74626 (0x12382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:09:56 2024 GMT
Not After : Dec 10 01:09:56 2025 GMT
Subject: CN=676b5b67-ae21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:be:4e:5d:90:7c:77:19:25:38:78:ed:7b:
83:65:50:87:51:32:86:82:7f:42:72:52:61:b7:82:
a8:48:7a:66:03:16:e2:dd:a3:d3:81:21:69:5b:99:
e0:1b:ea:68:03:a0:57:54:ab:6c:22:28:4a:37:25:
1a:a5:34:b7:b5:d0:a9:0b:51:d4:66:c1:b7:ac:68:
6e:e4:3b:8e:24:a3:a5:aa:6a:65:a2:f1:77:83:5c:
ff:5d:1e:2a:b9:18:b4:95:07:6e:90:62:bd:71:10:
fe:b8:d8:44:6c:e7:b4:81:24:53:13:92:27:6e:23:
af:f5:5b:72:f1:5d:6b:3d:e2:29:dd:f0:b8:2a:72:
08:60:e9:f3:56:e5:e9:c3:22:ec:82:c3:b7:f2:29:
fd:d3:ff:96:ac:b4:0a:83:1a:82:63:56:0a:4d:27:
7e:9a:ae:03:75:7c:40:d6:0b:fe:42:b3:81:41:fe:
d6:24:c2:ce:2f:0e:fa:ef:67:ca:12:e7:62:71:b9:
2b:d2:9e:3b:8a:c6:04:fa:9b:84:89:05:f5:21:91:
b7:a4:03:e8:44:b6:36:0b:6d:71:65:65:27:dc:46:
48:10:f7:da:77:ab:e1:80:54:bb:54:f6:23:77:cb:
70:02:85:ef:20:1b:33:0e:77:cc:8d:30:c7:e7:6f:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:C8:94:95:87:94:51:14:E0:73:A8:75:2B:C7:86:00:DC:99:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6191912C25C11EFB30EFF83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:47:00:02:2e:bf:02:9d:90:c1:37:d4:43:65:0f:4b:16:64:
e2:c0:77:6d:13:c5:cd:04:82:40:3d:a6:f8:ad:30:d2:41:7e:
4e:b2:a8:ac:53:55:67:7e:35:ca:f9:92:2e:16:1d:fe:43:1e:
c7:3d:b6:d2:af:55:5d:fb:ac:dc:13:2c:c8:b4:43:9b:4b:58:
04:d1:c8:d6:9d:fc:22:78:7d:6f:89:80:9b:5e:d7:fa:e5:f2:
d8:f1:d2:24:1a:db:8b:bc:7d:eb:6a:56:a8:b3:86:b2:9f:db:
58:fc:6c:f3:c9:54:ac:8a:ca:88:19:d0:c5:92:15:48:c9:38:
99:0b:32:45:6d:a6:06:a8:d6:7d:75:76:f0:9f:e7:69:2a:dd:
0c:8e:31:c8:3b:30:1d:c8:0f:33:63:6f:27:41:13:4e:ae:d3:
f1:36:0e:eb:9b:36:95:a7:c2:0c:b6:e6:24:3c:de:eb:bd:cc:
65:64:06:ed:36:3b:03:20:e6:5d:74:b4:c2:f9:ff:76:c3:8c:
7a:4b:24:0c:58:59:3e:06:11:b9:05:8b:d0:04:48:d3:28:38:
11:5a:35:ef:48:2b:34:16:5d:07:1b:13:3f:ca:76:bb:06:ca:
24:fb:0c:0b:d4:96:c0:f1:a9:7c:f5:d5:25:37:a6:a4:fa:82:
1c:d1:88:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASOCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDEwOTU2WhcNMjUxMjEwMDEwOTU2WjAYMRYw
FAYDVQQDEw02NzZiNWI2Ny1hZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo/G+Tl2QfHcZJTh47XuDZVCHUTKGgn9CclJht4KoSHpmAxbi3aPTgSFp
W5ngG+poA6BXVKtsIihKNyUapTS3tdCpC1HUZsG3rGhu5DuOJKOlqmplovF3g1z/
XR4quRi0lQdukGK9cRD+uNhEbOe0gSRTE5InbiOv9Vty8V1rPeIp3fC4KnIIYOnz
VuXpwyLsgsO38in90/+WrLQKgxqCY1YKTSd+mq4DdXxA1gv+QrOBQf7WJMLOLw76
72fKEudicbkr0p47isYE+puEiQX1IZG3pAPoRLY2C21xZWUn3EZIEPfad6vhgFS7
VPYjd8twAoXvIBszDnfMjTDH529J9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMEi
yJSVh5RRFOBzqHUrx4YA3JnnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNjE5MTkxMkMyNUMxMUVGQjMwRUZGODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsdOMA0GCSqGSIb3DQEB
CwUAA4IBAQC0RwACLr8CnZDBN9RDZQ9LFmTiwHdtE8XNBIJAPab4rTDSQX5Osqis
U1VnfjXK+ZIuFh3+Qx7HPbbSr1Vd+6zcEyzItEObS1gE0cjWnfwieH1viYCbXtf6
5fLY8dIkGtuLvH3ralaos4ayn9tY/GzzyVSsisqIGdDFkhVIyTiZCzJFbaYGqNZ9
dXbwn+dpKt0MjjHIOzAdyA8zY28nQRNOrtPxNg7rmzaVp8IMtuYkPN7rvcxlZAbt
NjsDIOZddLTC+f92w4x6SyQMWFk+BhG5BYvQBEjTKDgRWjXvSCs0Fl0HGxM/yna7
Bsok+wwL1JbA8al89dUlN6ak+oIc0Yiv
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:59 2025 by rpki-client