Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC528A6C62111EF9DB0C97A762E951A.roa
File: FBC528A6C62111EF9DB0C97A762E951A.roa (raw, json)
Hash identifier: sdAhSJHUOfGqo5BgPiHO37xnAFtdM+RN6+kBN16PSBA=
Subject key identifier: 52:3C:C8:FE:A1:32:B0:B0:B3:A4:E2:3C:25:B7:F2:36:1A:19:9C:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC528A6C62111EF9DB0C97A762E951A.roa
Signing time: Sun 29 Dec 2024 20:17:53 +0000
ROA not before: Sun 29 Dec 2024 20:17:49 +0000
ROA not after: Sun 12 Dec 2027 20:17:49 +0000
asID: 17561
IP address blocks: 154.217.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77684 (0x12f74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 20:17:49 2024 GMT
Not After : Dec 12 20:17:49 2027 GMT
Subject: CN=6771ae71-dca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b1:21:a4:19:08:5e:e9:ed:ea:a7:ee:70:d1:
88:01:28:c0:5f:5b:dc:5b:ce:81:94:fc:db:a1:f7:
94:c1:fa:3c:cd:31:e0:5b:f2:63:d0:a8:2a:bc:3d:
2a:65:20:8c:18:80:f6:9b:48:e9:de:cb:16:0c:81:
7b:07:b2:b3:d8:21:f2:d6:fc:62:51:db:01:4e:37:
ff:18:b8:c1:66:26:64:b0:e7:4c:7e:61:c6:67:41:
fc:b8:21:13:22:2c:33:3f:45:7c:94:31:17:45:79:
c5:46:e1:dc:e9:ca:42:65:ff:e3:88:58:94:cf:c5:
9b:eb:11:ea:46:0b:2f:76:d3:a8:23:2d:54:dd:af:
9b:5e:a7:d3:7d:6d:a0:6f:65:84:cb:93:df:73:a3:
e7:7b:50:e6:0f:ee:66:d5:b8:7b:92:41:42:0e:ef:
e7:fc:ed:bb:e0:fc:2f:18:37:56:71:fb:7b:53:5f:
a5:ce:b5:89:24:75:a2:79:5f:f8:d8:d4:48:65:32:
a4:ec:10:bc:2d:ea:fa:4c:e1:6b:ed:08:8b:37:7b:
35:eb:61:a8:38:f1:00:5b:2a:fe:f2:a7:29:28:6a:
d0:b9:5b:b1:43:16:72:d5:73:a8:39:65:ed:93:2e:
76:4e:36:0c:db:d8:d9:8f:c8:5e:06:f2:c0:b3:1e:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:C8:FE:A1:32:B0:B0:B3:A4:E2:3C:25:B7:F2:36:1A:19:9C:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBC528A6C62111EF9DB0C97A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:3b:25:49:84:74:ba:2f:96:8f:3c:ae:bc:fa:a1:0c:ca:cf:
b7:0f:f6:a6:e9:ba:59:34:d3:05:a3:4b:a1:1e:08:bc:05:7a:
cd:68:4d:11:25:50:8f:d3:96:bf:96:29:11:c9:98:4c:db:5e:
b8:db:50:77:17:42:70:30:58:39:74:5a:fe:34:40:0f:f4:20:
b2:b1:9b:c7:bc:1b:2b:00:78:a0:f8:4f:2a:d2:e1:cd:dc:b5:
01:f2:fb:fd:1c:ea:2d:7c:5d:26:ae:bb:1c:7d:2d:34:f9:76:
c9:8f:76:00:3e:77:0a:83:4b:b1:6d:e0:45:4d:5f:f2:ea:58:
f0:09:19:42:7d:30:f7:3e:b3:c0:ba:b6:1c:19:d6:b7:76:eb:
88:7d:a5:6b:68:98:f8:35:36:35:18:d8:b3:72:57:a9:1e:cb:
19:e9:1d:87:c9:8f:c0:ac:15:37:ff:88:9f:8e:85:15:ab:84:
76:85:0d:a4:13:2d:ee:e2:ea:3e:2d:b2:de:b3:3e:b9:c6:eb:
95:7f:31:7a:db:2f:3d:53:9c:74:4b:aa:19:c4:75:0f:18:34:
5d:d5:b1:8f:0c:50:5c:24:af:fb:56:eb:3c:44:d9:0c:ab:47:
f2:60:1f:d3:3d:97:25:e3:8e:70:c3:ec:6d:1f:01:65:37:25:
4e:d3:cf:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS90MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjAxNzQ5WhcNMjcxMjEyMjAxNzQ5WjAYMRYw
FAYDVQQDEw02NzcxYWU3MS1kY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4rEhpBkIXunt6qfucNGIASjAX1vcW86BlPzbofeUwfo8zTHgW/Jj0Kgq
vD0qZSCMGID2m0jp3ssWDIF7B7Kz2CHy1vxiUdsBTjf/GLjBZiZksOdMfmHGZ0H8
uCETIiwzP0V8lDEXRXnFRuHc6cpCZf/jiFiUz8Wb6xHqRgsvdtOoIy1U3a+bXqfT
fW2gb2WEy5Pfc6Pne1DmD+5m1bh7kkFCDu/n/O274PwvGDdWcft7U1+lzrWJJHWi
eV/42NRIZTKk7BC8Ler6TOFr7QiLN3s162GoOPEAWyr+8qcpKGrQuVuxQxZy1XOo
OWXtky52TjYM29jZj8heBvLAsx7RqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFI8
yP6hMrCws6TiPCW38jYaGZzyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQkM1MjhBNkM2MjExMUVGOURCMEM5N0E3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtmdMA0GCSqGSIb3DQEB
CwUAA4IBAQDIOyVJhHS6L5aPPK68+qEMys+3D/am6bpZNNMFo0uhHgi8BXrNaE0R
JVCP05a/likRyZhM216421B3F0JwMFg5dFr+NEAP9CCysZvHvBsrAHig+E8q0uHN
3LUB8vv9HOotfF0mrrscfS00+XbJj3YAPncKg0uxbeBFTV/y6ljwCRlCfTD3PrPA
urYcGda3duuIfaVraJj4NTY1GNizclepHssZ6R2HyY/ArBU3/4ifjoUVq4R2hQ2k
Ey3u4uo+LbLesz65xuuVfzF62y89U5x0S6oZxHUPGDRd1bGPDFBcJK/7Vus8RNkM
q0fyYB/TPZcl445ww+xtHwFlNyVO088w
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:12:38 2025 by rpki-client