Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F90226C0C53411EFA3CC459E762E951A.roa
File: F90226C0C53411EFA3CC459E762E951A.roa (raw, json)
Hash identifier: /ta8/oysR0VMBig2LR8QgEb9yhiCpdYs19LUKknsFCU=
Subject key identifier: 21:6D:9C:09:60:94:99:FA:77:0F:7C:D9:DA:00:14:A9:34:3F:F6:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F90226C0C53411EFA3CC459E762E951A.roa
Signing time: Sat 28 Dec 2024 16:01:18 +0000
ROA not before: Sat 28 Dec 2024 16:01:14 +0000
ROA not after: Fri 12 Dec 2025 16:01:14 +0000
asID: 984
IP address blocks: 154.204.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76813 (0x12c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:01:14 2024 GMT
Not After : Dec 12 16:01:14 2025 GMT
Subject: CN=677020ce-f435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c5:dc:99:0a:7a:97:e5:94:e2:73:9f:e4:64:
67:e9:80:f3:3f:c1:8f:d3:32:1e:bc:5c:0f:ac:fb:
d3:d8:9e:8b:95:5b:39:02:c8:ca:7b:d3:5c:9b:a4:
6d:86:cb:f9:0d:e3:c2:01:8c:f5:21:5a:ee:16:29:
6b:c8:d9:f0:d3:ec:6a:2a:d8:69:b7:47:aa:91:bc:
f8:cb:73:b8:60:b0:a3:28:16:49:26:9a:82:ac:59:
84:6c:13:a6:20:57:05:54:25:ba:3e:10:fa:f0:78:
fe:a6:7a:93:67:37:07:12:04:f8:cc:6d:4e:5b:46:
6e:7c:79:d4:04:8d:6b:8e:ea:a0:2e:ca:ec:e1:97:
7b:34:c1:1a:6f:32:da:48:29:98:18:78:50:e4:9e:
88:33:dd:b0:ec:bd:a0:e7:9e:9f:a1:c8:b0:66:93:
4d:38:59:a0:2c:12:93:6b:77:db:e5:c5:0f:13:6a:
6a:75:cf:09:a5:03:0e:61:95:5f:98:cf:27:ef:69:
a8:19:e9:db:83:b9:b0:56:39:1b:55:73:79:bf:84:
14:1a:32:13:fe:41:4c:f4:2f:ba:90:1c:93:07:15:
58:8a:0a:37:ec:20:32:f8:6f:e7:c3:2b:2c:46:6e:
8a:8f:92:a3:e7:50:a5:78:e0:59:cb:41:25:98:72:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6D:9C:09:60:94:99:FA:77:0F:7C:D9:DA:00:14:A9:34:3F:F6:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F90226C0C53411EFA3CC459E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.111.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f9:93:f1:1c:24:d8:e5:7b:0d:c6:4c:a9:ea:07:48:b3:24:
e1:3a:28:1c:9a:b6:f4:17:b2:8e:99:fe:f8:5f:48:d3:8c:55:
10:38:46:86:57:9a:53:d5:d7:0f:27:ad:43:c2:3d:f1:da:b4:
bf:b7:ed:9e:f1:69:c3:9a:76:1b:a7:03:ce:79:69:d8:d5:1e:
9a:ff:af:7a:bf:1f:5e:19:ae:06:a3:fe:31:10:35:23:1c:ad:
59:54:ca:2a:b1:d2:7f:15:a1:f5:1a:85:39:9b:0f:1f:9e:26:
1b:81:8f:2b:9d:c5:27:b4:8b:97:c8:27:09:4a:7a:b5:39:9b:
b1:6e:a5:57:40:c9:ed:e5:f4:42:69:85:70:03:f7:07:6a:28:
00:d2:73:e1:66:59:95:a1:a4:84:d8:26:16:9e:6e:aa:31:dd:
13:fc:b6:0d:c4:09:e3:3d:06:c7:e2:f5:e9:6b:b3:e7:02:4d:
58:c1:e3:ee:99:b6:ef:20:52:5b:8d:a8:a5:c6:58:21:96:27:
4b:b3:c8:1c:8e:85:fc:40:72:c6:79:ff:7c:2f:b5:ad:c0:28:
5f:73:85:a1:20:a9:08:f2:13:36:56:39:a5:10:88:fa:10:59:
39:63:e5:0a:1d:b8:2d:a1:0e:76:13:32:87:8f:e4:9a:49:cd:
e8:ee:1a:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASwNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTYwMTE0WhcNMjUxMjEyMTYwMTE0WjAYMRYw
FAYDVQQDEw02NzcwMjBjZS1mNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7sXcmQp6l+WU4nOf5GRn6YDzP8GP0zIevFwPrPvT2J6LlVs5AsjKe9Nc
m6Rthsv5DePCAYz1IVruFilryNnw0+xqKthpt0eqkbz4y3O4YLCjKBZJJpqCrFmE
bBOmIFcFVCW6PhD68Hj+pnqTZzcHEgT4zG1OW0ZufHnUBI1rjuqgLsrs4Zd7NMEa
bzLaSCmYGHhQ5J6IM92w7L2g556fociwZpNNOFmgLBKTa3fb5cUPE2pqdc8JpQMO
YZVfmM8n72moGenbg7mwVjkbVXN5v4QUGjIT/kFM9C+6kByTBxVYigo37CAy+G/n
wyssRm6Kj5Kj51CleOBZy0ElmHLSUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCFt
nAlglJn6dw982doAFKk0P/baMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTAyMjZDMEM1MzQxMUVGQTNDQzQ1OUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsxvMA0GCSqGSIb3DQEB
CwUAA4IBAQAJ+ZPxHCTY5XsNxkyp6gdIsyThOigcmrb0F7KOmf74X0jTjFUQOEaG
V5pT1dcPJ61Dwj3x2rS/t+2e8WnDmnYbpwPOeWnY1R6a/696vx9eGa4Go/4xEDUj
HK1ZVMoqsdJ/FaH1GoU5mw8fniYbgY8rncUntIuXyCcJSnq1OZuxbqVXQMnt5fRC
aYVwA/cHaigA0nPhZlmVoaSE2CYWnm6qMd0T/LYNxAnjPQbH4vXpa7PnAk1YwePu
mbbvIFJbjailxlghlidLs8gcjoX8QHLGef98L7WtwChfc4WhIKkI8hM2VjmlEIj6
EFk5Y+UKHbgtoQ52EzKHj+SaSc3o7hpn
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:02 2025 by rpki-client