Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB8527F6CDE711EF94A88C75762E951A.roa
File: FB8527F6CDE711EF94A88C75762E951A.roa (raw, json)
Hash identifier: M3hdWBKAQqBeoaSBIrGJ+CcVNbXF+l6qssDQhjk3zVk=
Subject key identifier: EE:4B:45:EC:FE:96:9A:E5:4F:56:20:65:57:BA:83:AE:3E:81:7E:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB8527F6CDE711EF94A88C75762E951A.roa
Signing time: Wed 08 Jan 2025 17:42:51 +0000
ROA not before: Wed 08 Jan 2025 17:42:48 +0000
ROA not after: Sat 03 Jan 2026 17:42:48 +0000
asID: 984
IP address blocks: 154.89.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79857 (0x137f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:42:48 2025 GMT
Not After : Jan 3 17:42:48 2026 GMT
Subject: CN=677eb91b-bb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:60:b4:c5:d3:d7:4a:87:3e:c6:06:78:27:a4:
02:2d:60:ab:8e:f8:2b:b2:32:b2:5c:2d:c2:3c:cb:
17:cc:15:0a:e1:3f:85:da:f9:fc:8c:8d:c4:16:db:
ff:d2:15:26:09:fe:e4:b1:5e:97:e0:a2:d1:54:19:
dc:cf:a2:f5:78:7e:1e:b6:26:72:66:e4:9c:f7:2f:
63:a9:8a:0a:51:e2:4f:34:0a:e6:6b:53:d6:75:05:
82:36:c2:5f:6e:bc:7f:30:20:4c:d9:54:9d:95:15:
a1:a9:26:f9:b1:34:69:d7:77:70:f1:0c:df:7c:f4:
8f:3c:ff:cb:d9:ef:7b:a3:89:01:7b:ce:a6:99:d7:
5b:7c:54:b7:c6:2e:67:2e:ce:9f:02:42:4d:34:a5:
35:44:ea:07:22:77:4a:4e:b3:9a:f3:f0:5c:2a:cc:
80:fb:b8:e3:c5:19:33:d5:63:f9:c2:65:d1:a8:09:
60:77:99:e4:0e:33:33:c6:00:93:6b:82:48:fa:9a:
0e:f2:6f:88:8a:51:4e:b2:8c:b4:ee:e0:bb:3d:50:
75:a1:20:c1:ff:c6:ea:cc:c8:d9:fc:b6:be:c7:e4:
06:70:d3:99:ea:d8:28:26:23:16:ae:29:2f:33:ad:
52:63:e6:0a:35:f7:7d:5f:a2:3e:13:01:81:10:da:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4B:45:EC:FE:96:9A:E5:4F:56:20:65:57:BA:83:AE:3E:81:7E:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB8527F6CDE711EF94A88C75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.199.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1e:69:99:e9:df:5f:23:18:45:70:d4:ce:f1:29:e2:89:dd:
f2:e7:1f:24:bf:7d:34:fa:a9:ed:5d:04:e7:db:54:c9:05:27:
ac:53:81:eb:82:98:5f:ac:4d:95:0b:c4:ff:f4:31:ba:aa:36:
1e:a8:29:41:40:e9:ab:fd:d7:61:fd:a0:12:29:1e:2b:00:6e:
2b:53:3b:49:63:92:ff:1b:99:4c:48:66:01:02:29:2e:17:b7:
59:3f:66:6f:89:a7:f9:b9:62:d3:6e:30:48:fe:b3:5a:c2:0c:
34:91:eb:de:60:b5:0a:29:d7:db:aa:0e:9f:62:4a:02:e4:52:
8f:fe:2f:68:c6:ba:ea:cc:ac:4f:17:b5:70:1e:c0:62:4e:ee:
70:97:dd:db:a8:7a:bd:05:23:bb:14:df:02:fa:8c:95:fd:0f:
89:8b:e0:88:f1:17:06:80:67:0f:7a:2a:87:28:b7:3c:68:3e:
ad:e3:47:27:4c:a2:01:55:83:aa:45:20:6c:ef:ca:31:07:4b:
ba:60:25:85:d8:a6:10:5c:fc:00:01:b3:a8:db:ee:a3:e4:78:
e8:6c:df:91:5b:e0:1b:97:e3:53:32:44:d6:c7:27:1c:bc:4a:
93:08:62:90:61:bc:f1:87:34:a7:d5:5c:b7:f1:f6:91:28:bd:
ee:b5:6a:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATfxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTc0MjQ4WhcNMjYwMTAzMTc0MjQ4WjAYMRYw
FAYDVQQDEw02NzdlYjkxYi1iYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA62C0xdPXSoc+xgZ4J6QCLWCrjvgrsjKyXC3CPMsXzBUK4T+F2vn8jI3E
Ftv/0hUmCf7ksV6X4KLRVBncz6L1eH4etiZyZuSc9y9jqYoKUeJPNArma1PWdQWC
NsJfbrx/MCBM2VSdlRWhqSb5sTRp13dw8QzffPSPPP/L2e97o4kBe86mmddbfFS3
xi5nLs6fAkJNNKU1ROoHIndKTrOa8/BcKsyA+7jjxRkz1WP5wmXRqAlgd5nkDjMz
xgCTa4JI+poO8m+IilFOsoy07uC7PVB1oSDB/8bqzMjZ/La+x+QGcNOZ6tgoJiMW
rikvM61SY+YKNfd9X6I+EwGBENrp2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO5L
Rez+lprlT1YgZVe6g64+gX5kMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQjg1MjdGNkNERTcxMUVGOTRBODhDNzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnHMA0GCSqGSIb3DQEB
CwUAA4IBAQAwHmmZ6d9fIxhFcNTO8Sniid3y5x8kv300+qntXQTn21TJBSesU4Hr
gphfrE2VC8T/9DG6qjYeqClBQOmr/ddh/aASKR4rAG4rUztJY5L/G5lMSGYBAiku
F7dZP2Zviaf5uWLTbjBI/rNawgw0keveYLUKKdfbqg6fYkoC5FKP/i9oxrrqzKxP
F7VwHsBiTu5wl93bqHq9BSO7FN8C+oyV/Q+Ji+CI8RcGgGcPeiqHKLc8aD6t40cn
TKIBVYOqRSBs78oxB0u6YCWF2KYQXPwAAbOo2+6j5HjobN+RW+Abl+NTMkTWxycc
vEqTCGKQYbzxhzSn1Vy38faRKL3utWoN
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:58 2025 by rpki-client