Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4818ECC0FA11EFB4136143762E951A.roa
File: FB4818ECC0FA11EFB4136143762E951A.roa (raw, json)
Hash identifier: XvujWj4qkwPiq/KHd0CYathxwTDnGB20TcngRUNtEZM=
Subject key identifier: FC:F3:AC:BA:EA:60:1D:56:BC:5C:58:3F:E7:19:21:78:A0:D0:13:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011FAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4818ECC0FA11EFB4136143762E951A.roa
Signing time: Mon 23 Dec 2024 06:56:06 +0000
ROA not before: Mon 23 Dec 2024 06:56:02 +0000
ROA not after: Sat 27 Dec 2025 06:56:02 +0000
asID: 137443
IP address blocks: 154.209.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73644 (0x11fac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:56:02 2024 GMT
Not After : Dec 27 06:56:02 2025 GMT
Subject: CN=67690986-a854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:ac:fe:c9:f4:29:89:49:1d:1f:24:d3:c8:
57:3e:20:57:dd:ac:b7:56:17:20:cd:df:36:45:67:
af:4f:a6:4c:cb:a9:be:b5:eb:ec:89:11:93:e4:fa:
32:9b:18:35:d6:18:4f:d4:76:9b:5a:38:7f:f2:2c:
76:aa:a0:67:d4:a4:c6:94:12:ef:e2:59:99:9f:10:
74:c8:8d:6f:c5:8c:32:4a:9f:02:4c:8a:7f:5b:20:
40:44:86:ab:a4:b1:19:b6:08:41:24:ef:40:b3:f3:
e4:a2:60:cd:e2:1b:cb:db:25:4d:51:14:68:f9:f9:
84:d5:b3:06:d1:51:c6:37:e2:e6:c0:82:2f:5a:a2:
ef:14:a6:2c:e4:67:26:f6:d1:cc:e8:b4:87:2e:41:
33:0a:9e:bd:fc:ec:cf:db:04:72:c4:53:64:ee:34:
a5:1e:be:06:a7:b4:db:48:29:7d:86:61:3b:e4:51:
0d:e2:d1:f7:20:0e:0d:a8:9b:cf:c4:e6:04:5b:b2:
64:31:6f:ae:a5:b5:e3:32:de:4e:03:ae:69:12:5d:
d0:93:8b:3a:e1:6d:3b:2c:90:17:d0:e1:66:0b:d0:
10:b5:35:67:d1:6f:93:cf:ee:0b:f5:0d:57:93:9a:
40:ab:36:1e:27:e8:65:87:42:44:38:71:2c:08:ab:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:AC:BA:EA:60:1D:56:BC:5C:58:3F:E7:19:21:78:A0:D0:13:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB4818ECC0FA11EFB4136143762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.2.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6e:46:7b:0d:b4:24:85:d6:9c:45:34:cb:06:57:88:72:d5:
58:6f:6c:64:6d:8f:23:3b:6a:6d:c9:ec:80:03:38:04:26:1d:
6b:47:c4:6c:47:03:26:e4:f8:57:7e:91:b2:15:5d:c2:a0:62:
06:3c:b9:bf:f0:4a:b5:04:ed:2b:e7:ed:23:e0:0b:c1:d8:66:
f4:23:80:02:8c:b9:5b:89:6a:d9:1d:66:6b:ab:e0:09:d9:0c:
7a:dc:d9:17:9e:45:23:9f:e4:57:00:30:64:82:4c:72:70:d5:
2b:49:19:60:c1:13:fb:cb:d4:5c:67:09:f2:a9:8f:1e:0d:69:
62:a8:76:16:98:a2:c0:56:ec:5c:6f:f5:ce:59:86:4c:2e:e7:
da:ff:6b:19:06:59:2c:74:d8:1c:fd:ee:db:42:f9:ac:e2:1f:
4e:e4:67:4d:ab:60:5e:1a:b7:53:49:70:21:b4:5f:08:6b:97:
2d:f0:7a:b7:55:c5:c7:7b:04:f2:d8:37:10:2c:10:4f:5a:66:
c3:13:16:ab:71:34:91:5c:48:9d:23:de:a7:d3:c5:a6:f8:45:
9a:2a:fc:20:f2:d5:c1:a0:42:dd:4e:e7:6a:03:58:03:19:3a:
0e:d6:bb:56:64:77:0c:2b:c3:5c:11:30:02:36:16:fc:2d:b7:
76:d3:92:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR+sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDY1NjAyWhcNMjUxMjI3MDY1NjAyWjAYMRYw
FAYDVQQDEw02NzY5MDk4Ni1hODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2/es/sn0KYlJHR8k08hXPiBX3ay3Vhcgzd82RWevT6ZMy6m+tevsiRGT
5Poymxg11hhP1HabWjh/8ix2qqBn1KTGlBLv4lmZnxB0yI1vxYwySp8CTIp/WyBA
RIarpLEZtghBJO9As/PkomDN4hvL2yVNURRo+fmE1bMG0VHGN+LmwIIvWqLvFKYs
5Gcm9tHM6LSHLkEzCp69/OzP2wRyxFNk7jSlHr4Gp7TbSCl9hmE75FEN4tH3IA4N
qJvPxOYEW7JkMW+upbXjMt5OA65pEl3Qk4s64W07LJAX0OFmC9AQtTVn0W+Tz+4L
9Q1Xk5pAqzYeJ+hlh0JEOHEsCKvqbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPzz
rLrqYB1WvFxYP+cZIXig0BPFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQjQ4MThFQ0MwRkExMUVGQjQxMzYxNDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtECMA0GCSqGSIb3DQEB
CwUAA4IBAQAhbkZ7DbQkhdacRTTLBleIctVYb2xkbY8jO2ptyeyAAzgEJh1rR8Rs
RwMm5PhXfpGyFV3CoGIGPLm/8Eq1BO0r5+0j4AvB2Gb0I4ACjLlbiWrZHWZrq+AJ
2Qx63NkXnkUjn+RXADBkgkxycNUrSRlgwRP7y9RcZwnyqY8eDWliqHYWmKLAVuxc
b/XOWYZMLufa/2sZBlksdNgc/e7bQvms4h9O5GdNq2BeGrdTSXAhtF8Ia5ct8Hq3
VcXHewTy2DcQLBBPWmbDExarcTSRXEidI96n08Wm+EWaKvwg8tXBoELdTudqA1gD
GToO1rtWZHcMK8NcETACNhb8Lbd205JB
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:37 2025 by rpki-client