Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F981F8BEC3D611EFBE72AF6A762E951A.roa
File: F981F8BEC3D611EFBE72AF6A762E951A.roa (raw, json)
Hash identifier: M0DpbkKSvhbkf3XXjUpTrcCuoYy8f1kLrBzoLSbO+FM=
Subject key identifier: 7C:26:07:9B:D0:4B:FB:59:2D:79:68:31:01:DF:59:BD:E7:A3:7B:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01287C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F981F8BEC3D611EFBE72AF6A762E951A.roa
Signing time: Thu 26 Dec 2024 22:15:55 +0000
ROA not before: Thu 26 Dec 2024 22:15:51 +0000
ROA not after: Fri 12 Dec 2025 22:15:51 +0000
asID: 984
IP address blocks: 154.84.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75900 (0x1287c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:15:51 2024 GMT
Not After : Dec 12 22:15:51 2025 GMT
Subject: CN=676dd59b-bbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:ef:82:f0:a9:6b:95:20:4d:e0:99:c9:1e:
ed:0f:c9:09:78:1f:cf:75:26:21:7e:a4:5b:65:69:
2d:4f:d6:3a:8d:d3:06:01:e6:f5:c0:4c:ee:67:21:
96:5d:1e:1d:83:a0:e8:1f:97:5c:60:02:72:13:40:
5f:36:fb:b4:2e:c6:73:4d:b6:2b:dd:1b:65:ed:25:
7e:56:ec:fc:76:80:d9:fd:6c:0a:42:90:15:d4:2d:
b5:18:f5:79:9c:b2:ce:26:8b:8c:e2:4a:8e:3d:00:
55:91:72:1d:a7:91:1d:7e:bb:ba:85:18:43:c3:a3:
64:83:f3:79:e4:af:f7:d1:5a:b9:47:63:01:fe:9d:
b6:9a:35:4d:88:04:fd:12:74:3c:b9:db:c4:6a:8f:
c0:e5:74:d4:92:d3:64:3c:2f:3d:b1:00:eb:2a:bd:
3d:5f:d6:f7:8e:f8:63:5b:1a:07:b3:ac:41:9c:cb:
27:d7:7e:61:18:a4:a1:42:b1:1c:db:61:e8:e7:5b:
e4:cc:a2:c4:e1:e0:c3:d6:dc:84:99:20:7c:82:e9:
27:94:07:e8:bc:9f:34:14:f0:bd:d6:91:2a:2a:14:
ae:c3:39:6b:3a:67:cf:88:a5:b5:f7:0c:ec:6b:ce:
f5:b9:da:ca:fb:1b:b4:ab:36:ff:b4:6c:71:d6:46:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:07:9B:D0:4B:FB:59:2D:79:68:31:01:DF:59:BD:E7:A3:7B:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F981F8BEC3D611EFBE72AF6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:aa:07:8f:6f:df:d9:09:de:af:25:a7:a1:60:e4:fb:86:1e:
28:d6:44:00:44:e8:51:9e:05:1c:2e:a0:e8:4d:d5:2d:70:20:
d5:16:2a:2e:38:90:2c:4e:8f:00:dd:3b:f9:3a:7a:46:cc:01:
7e:50:a2:50:02:2c:3f:9b:84:a3:e3:98:47:00:1c:0d:bb:19:
b2:2f:52:56:31:17:bd:cc:03:47:37:f8:99:00:70:ab:7e:84:
76:3a:eb:06:6f:50:b4:33:de:ef:11:9e:e6:a5:00:b2:d7:e0:
13:72:f9:10:9e:dd:67:98:1f:18:ad:31:f5:1b:6f:57:eb:dd:
5f:d6:4d:65:8c:83:67:21:23:ac:ca:fd:dd:08:3a:08:0c:69:
71:01:76:d4:d5:c7:5d:95:67:0b:0c:db:74:2d:ae:0b:5c:66:
d8:8c:8b:10:53:8c:32:a7:a4:fe:64:fe:41:13:8c:d4:ee:c4:
bd:d4:18:4d:be:c3:e6:f4:75:e3:7b:1e:56:b8:90:a4:27:00:
c1:7d:27:53:0a:b2:1b:0a:ac:09:26:40:c6:3e:bb:67:9e:6b:
2a:44:72:c3:85:b9:58:5e:83:99:1d:2b:36:2d:f5:8d:70:1b:
f4:3d:65:63:dd:f8:29:64:4b:ac:53:28:58:88:7f:f1:7f:d3:
25:47:39:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASh8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjIxNTUxWhcNMjUxMjEyMjIxNTUxWjAYMRYw
FAYDVQQDEw02NzZkZDU5Yi1iYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtNXvgvCpa5UgTeCZyR7tD8kJeB/PdSYhfqRbZWktT9Y6jdMGAeb1wEzu
ZyGWXR4dg6DoH5dcYAJyE0BfNvu0LsZzTbYr3Rtl7SV+Vuz8doDZ/WwKQpAV1C21
GPV5nLLOJouM4kqOPQBVkXIdp5Edfru6hRhDw6Nkg/N55K/30Vq5R2MB/p22mjVN
iAT9EnQ8udvEao/A5XTUktNkPC89sQDrKr09X9b3jvhjWxoHs6xBnMsn135hGKSh
QrEc22Ho51vkzKLE4eDD1tyEmSB8guknlAfovJ80FPC91pEqKhSuwzlrOmfPiKW1
9wzsa871udrK+xu0qzb/tGxx1kboawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHwm
B5vQS/tZLXloMQHfWb3no3tGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTgxRjhCRUMzRDYxMUVGQkU3MkFGNkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSmMA0GCSqGSIb3DQEB
CwUAA4IBAQCLqgePb9/ZCd6vJaehYOT7hh4o1kQAROhRngUcLqDoTdUtcCDVFiou
OJAsTo8A3Tv5OnpGzAF+UKJQAiw/m4Sj45hHABwNuxmyL1JWMRe9zANHN/iZAHCr
foR2OusGb1C0M97vEZ7mpQCy1+ATcvkQnt1nmB8YrTH1G29X691f1k1ljINnISOs
yv3dCDoIDGlxAXbU1cddlWcLDNt0La4LXGbYjIsQU4wyp6T+ZP5BE4zU7sS91BhN
vsPm9HXjex5WuJCkJwDBfSdTCrIbCqwJJkDGPrtnnmsqRHLDhblYXoOZHSs2LfWN
cBv0PWVj3fgpZEusUyhYiH/xf9MlRznN
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:31 2025 by rpki-client