Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8B3580EC5F411EFBD6D3161762E951A.roa
File: F8B3580EC5F411EFBD6D3161762E951A.roa (raw, json)
Hash identifier: lZ1F/iKQTTp3Wto2P3i2YM0rbRvY5DjChhfZuEXJkpE=
Subject key identifier: 7F:F2:BF:14:92:5A:DA:9E:98:62:48:DA:AE:69:3E:7E:82:25:8D:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8B3580EC5F411EFBD6D3161762E951A.roa
Signing time: Sun 29 Dec 2024 14:55:41 +0000
ROA not before: Sun 29 Dec 2024 14:55:37 +0000
ROA not after: Fri 12 Dec 2025 14:55:37 +0000
asID: 984
IP address blocks: 154.213.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77304 (0x12df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:55:37 2024 GMT
Not After : Dec 12 14:55:37 2025 GMT
Subject: CN=677162ed-239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:40:59:35:59:de:9a:28:8c:3e:2a:6d:42:5c:
c6:38:4f:99:0f:9d:59:ed:2e:cd:92:b3:c9:d5:69:
a7:2f:bf:69:4c:54:cb:4d:78:b5:32:e5:4b:d4:88:
17:01:89:d4:85:a0:a7:2c:13:42:88:8d:a7:37:02:
d4:00:a8:d6:db:1b:ac:4e:53:b1:db:22:73:ac:3a:
f9:46:57:5c:66:15:5c:71:d7:d0:bf:1e:4c:fe:a5:
37:d6:e8:e8:70:2b:47:27:58:a5:de:5c:e6:dd:6c:
66:c7:8d:f6:f8:99:9e:dc:df:8b:9e:e9:5a:64:ba:
c6:6e:d6:aa:98:dd:f7:9c:e4:85:cc:b9:51:6c:c5:
03:2a:30:9c:21:69:93:41:0b:c5:ee:ce:f0:6f:c5:
12:f7:f6:01:69:90:95:29:91:f3:5a:60:b2:4b:f4:
3a:4f:03:13:fe:e0:3c:cf:77:fa:01:e0:bd:36:af:
4d:60:a0:73:ce:2f:9e:99:54:8a:d5:da:34:29:71:
c5:00:1b:fc:ab:1c:08:79:15:b0:e6:7e:ae:b9:6e:
ef:27:af:d2:2c:a0:d0:4a:48:c1:25:71:51:69:33:
b8:43:31:e0:48:72:05:52:00:24:b8:19:fb:f6:e5:
1c:0b:30:5d:1e:de:85:fa:ab:22:26:0b:8c:ca:f6:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:BF:14:92:5A:DA:9E:98:62:48:DA:AE:69:3E:7E:82:25:8D:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8B3580EC5F411EFBD6D3161762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ce:a0:f2:79:53:0d:0c:58:dd:03:09:cb:72:a9:6a:19:62:
d3:90:65:20:5b:5e:08:7a:4c:5d:e3:e3:bc:43:a0:40:12:ca:
fa:a7:e6:4b:08:01:34:b9:97:c8:1b:56:44:f3:03:b4:42:11:
83:ef:b1:e0:13:92:fe:84:26:bf:76:7c:4d:3d:86:a6:08:1e:
0a:3c:58:08:c6:17:20:97:f8:1f:67:d3:95:54:80:43:c4:a0:
26:4e:b8:25:6a:21:1b:76:8d:f6:97:c2:60:9e:e8:82:3b:95:
14:aa:2d:77:55:40:f6:01:b4:a3:76:88:7b:60:e4:04:5b:4b:
ec:43:9b:05:48:c1:ca:4f:d4:db:02:95:08:0a:e2:ba:a9:a9:
ee:4f:38:3f:03:11:ad:e6:84:b4:e8:48:a4:e1:95:bc:c1:f7:
9b:8d:68:c2:93:e6:82:54:93:d6:10:0b:40:ff:61:0b:5c:6b:
c5:f5:2f:59:5c:fa:81:a9:b0:0d:0c:9d:3c:33:7d:01:89:8b:
cb:f0:27:44:8d:cf:5b:09:1f:ea:b4:7f:0e:e8:f5:c9:4d:ee:
95:86:a6:32:25:77:a1:7b:bc:75:3f:d5:f6:5b:bf:98:7c:68:
65:39:5e:8d:14:9b:36:0b:1f:9b:99:82:4f:ed:4d:8c:49:76:
f1:8a:cf:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS34MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTQ1NTM3WhcNMjUxMjEyMTQ1NTM3WjAYMRYw
FAYDVQQDEw02NzcxNjJlZC0yMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA70BZNVnemiiMPiptQlzGOE+ZD51Z7S7NkrPJ1WmnL79pTFTLTXi1MuVL
1IgXAYnUhaCnLBNCiI2nNwLUAKjW2xusTlOx2yJzrDr5RldcZhVccdfQvx5M/qU3
1ujocCtHJ1il3lzm3Wxmx432+Jme3N+LnulaZLrGbtaqmN33nOSFzLlRbMUDKjCc
IWmTQQvF7s7wb8US9/YBaZCVKZHzWmCyS/Q6TwMT/uA8z3f6AeC9Nq9NYKBzzi+e
mVSK1do0KXHFABv8qxwIeRWw5n6uuW7vJ6/SLKDQSkjBJXFRaTO4QzHgSHIFUgAk
uBn79uUcCzBdHt6F+qsiJguMyvYwDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH/y
vxSSWtqemGJI2q5pPn6CJY2xMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOEIzNTgwRUM1RjQxMUVGQkQ2RDMxNjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtW1MA0GCSqGSIb3DQEB
CwUAA4IBAQA+zqDyeVMNDFjdAwnLcqlqGWLTkGUgW14Iekxd4+O8Q6BAEsr6p+ZL
CAE0uZfIG1ZE8wO0QhGD77HgE5L+hCa/dnxNPYamCB4KPFgIxhcgl/gfZ9OVVIBD
xKAmTrglaiEbdo32l8JgnuiCO5UUqi13VUD2AbSjdoh7YOQEW0vsQ5sFSMHKT9Tb
ApUICuK6qanuTzg/AxGt5oS06Eik4ZW8wfebjWjCk+aCVJPWEAtA/2ELXGvF9S9Z
XPqBqbANDJ08M30BiYvL8CdEjc9bCR/qtH8O6PXJTe6VhqYyJXehe7x1P9X2W7+Y
fGhlOV6NFJs2Cx+bmYJP7U2MSXbxis8V
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:24:03 2025 by rpki-client