Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB9EEF3AC42111EF9286C857762E951A.roa
File: FB9EEF3AC42111EF9286C857762E951A.roa (raw, json)
Hash identifier: 4A4Aai5HK2OXpIlpERihyjBv/MzvLap9duf4E3S7MXw=
Subject key identifier: DE:3D:71:F4:FA:F0:41:7E:32:74:DC:D0:F9:B5:87:C5:40:AF:E7:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB9EEF3AC42111EF9286C857762E951A.roa
Signing time: Fri 27 Dec 2024 07:12:51 +0000
ROA not before: Fri 27 Dec 2024 07:12:47 +0000
ROA not after: Sun 12 Dec 2027 07:12:47 +0000
asID: 17561
IP address blocks: 154.201.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76233 (0x129c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:12:47 2024 GMT
Not After : Dec 12 07:12:47 2027 GMT
Subject: CN=676e5372-9535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:7f:8c:5b:2b:90:6f:72:44:99:ce:08:c5:
08:96:65:98:d7:4a:93:a5:3c:dc:19:cb:89:a7:7a:
39:f5:17:3a:ff:35:2e:86:5a:c1:bf:cc:ca:fd:af:
bb:f0:4b:03:fb:3e:84:5b:79:50:d0:2e:f2:ea:de:
3e:45:df:76:9b:98:68:17:4f:9b:51:53:c2:e7:5a:
2f:12:02:39:c1:94:db:47:ef:25:b5:67:a5:53:9d:
ee:c5:13:3c:80:1d:a1:fd:9c:1a:5e:a4:22:79:3c:
a4:53:c9:9b:55:7f:fa:8d:d2:98:fc:98:45:e9:a1:
33:b3:fa:10:52:b1:4c:94:cf:97:a9:7d:76:0c:74:
a2:c1:46:ee:7c:e7:bf:b7:6f:80:11:b5:4e:0c:c4:
50:18:91:cd:90:e4:01:2a:b4:cb:18:b4:bb:d5:5f:
c3:78:5d:2d:6f:f0:da:5e:c1:22:57:48:b1:3f:42:
94:71:73:d9:6f:74:a2:6f:e2:7e:7d:a9:5a:28:fe:
79:11:79:b5:ee:aa:de:e6:49:47:7b:33:23:c3:87:
f5:c4:80:db:f8:f8:b7:cb:9c:c4:a5:7f:34:2e:a5:
6e:77:0a:f2:d2:82:93:5a:f4:f9:b1:a0:13:aa:74:
62:ba:61:ca:f3:16:54:fe:ef:fd:6b:28:e7:7b:53:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3D:71:F4:FA:F0:41:7E:32:74:DC:D0:F9:B5:87:C5:40:AF:E7:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB9EEF3AC42111EF9286C857762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.60.0/24
Signature Algorithm: sha256WithRSAEncryption
21:49:94:07:30:5a:69:29:af:1e:26:29:71:6c:39:e5:d1:41:
ab:01:23:24:5b:04:a9:60:98:72:f8:2d:ca:21:f6:70:34:68:
9d:a1:b9:64:d7:f3:07:88:a3:8a:4f:ca:a4:d8:bf:06:b2:63:
b1:c3:0b:7f:f9:89:f1:c6:cd:ae:6e:a4:13:00:1c:1a:ee:83:
d2:dc:c6:3c:a2:45:08:25:6a:f0:a9:25:ae:ef:84:91:20:f6:
38:6c:c6:b0:35:1d:d8:63:ae:eb:8e:14:9c:1c:c1:59:ab:17:
fd:4a:b4:d1:10:fd:7f:e9:af:cb:c0:17:a9:90:12:84:db:63:
6b:a9:be:fa:cd:f1:29:c0:66:53:8d:34:c4:9f:f4:2f:4a:fa:
95:2c:0e:cf:8a:04:bb:29:31:49:01:69:40:98:8c:e0:c3:9d:
8c:59:c0:6f:15:75:1d:8a:ac:b3:83:11:6f:2e:fb:37:ff:c8:
ad:36:4b:71:91:6d:20:38:c7:2c:78:97:b1:d1:34:11:25:95:
58:9a:11:36:7f:c7:b8:3d:dd:2c:10:fa:5f:b6:74:58:e5:1c:
a3:f0:9e:20:7d:ad:c4:09:9c:d8:a5:73:ae:12:6e:81:5e:8b:
fc:5c:20:d6:ed:82:65:9a:55:25:28:50:98:a2:f6:7b:9f:81:
fb:49:fa:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASnJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDcxMjQ3WhcNMjcxMjEyMDcxMjQ3WjAYMRYw
FAYDVQQDEw02NzZlNTM3Mi05NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAum1/jFsrkG9yRJnOCMUIlmWY10qTpTzcGcuJp3o59Rc6/zUuhlrBv8zK
/a+78EsD+z6EW3lQ0C7y6t4+Rd92m5hoF0+bUVPC51ovEgI5wZTbR+8ltWelU53u
xRM8gB2h/ZwaXqQieTykU8mbVX/6jdKY/JhF6aEzs/oQUrFMlM+XqX12DHSiwUbu
fOe/t2+AEbVODMRQGJHNkOQBKrTLGLS71V/DeF0tb/DaXsEiV0ixP0KUcXPZb3Si
b+J+falaKP55EXm17qre5klHezMjw4f1xIDb+Pi3y5zEpX80LqVudwry0oKTWvT5
saATqnRiumHK8xZU/u/9ayjne1N8EwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN49
cfT68EF+MnTc0Pm1h8VAr+cjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQjlFRUYzQUM0MjExMUVGOTI4NkM4NTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsk8MA0GCSqGSIb3DQEB
CwUAA4IBAQAhSZQHMFppKa8eJilxbDnl0UGrASMkWwSpYJhy+C3KIfZwNGidoblk
1/MHiKOKT8qk2L8GsmOxwwt/+Ynxxs2ubqQTABwa7oPS3MY8okUIJWrwqSWu74SR
IPY4bMawNR3YY67rjhScHMFZqxf9SrTREP1/6a/LwBepkBKE22Nrqb76zfEpwGZT
jTTEn/QvSvqVLA7PigS7KTFJAWlAmIzgw52MWcBvFXUdiqyzgxFvLvs3/8itNktx
kW0gOMcseJex0TQRJZVYmhE2f8e4Pd0sEPpftnRY5Ryj8J4gfa3ECZzYpXOuEm6B
Xov8XCDW7YJlmlUlKFCYovZ7n4H7Sfqa
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:49:47 2025 by rpki-client