Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFF439F2C60411EF87193B46762E951A.roa
File: FFF439F2C60411EF87193B46762E951A.roa (raw, json)
Hash identifier: e9E6GMyVn9Y+besGjfrj2oH9S8Ywq0gFxrlEwJvIdRg=
Subject key identifier: 5A:E8:0A:1E:AB:E7:8E:68:AC:78:19:54:69:47:CE:85:17:01:E8:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFF439F2C60411EF87193B46762E951A.roa
Signing time: Sun 29 Dec 2024 16:50:25 +0000
ROA not before: Sun 29 Dec 2024 16:50:21 +0000
ROA not after: Sun 12 Dec 2027 16:50:21 +0000
asID: 17561
IP address blocks: 154.217.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77440 (0x12e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:50:21 2024 GMT
Not After : Dec 12 16:50:21 2027 GMT
Subject: CN=67717dd1-676e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:b4:80:4a:fc:7b:46:e0:09:85:88:f9:e1:
63:e8:bc:99:19:15:85:7a:64:eb:d2:9f:a8:f6:1a:
c2:94:ec:96:7a:b3:5f:df:8c:17:a2:ce:9d:e6:7e:
ad:62:72:3b:58:0a:59:c1:29:70:78:f5:49:e4:53:
c9:5d:08:a2:01:85:ab:d4:ac:ca:1e:65:2d:cb:19:
e4:e6:00:63:6e:c3:db:4b:d0:b7:ef:41:17:b3:f8:
5f:59:fb:59:a3:b9:fa:1f:c3:36:c0:f2:0d:ca:e9:
90:16:15:99:70:ef:ce:7f:87:42:77:20:0e:05:db:
98:b6:06:e6:68:92:ae:f6:47:76:56:6c:9a:ba:1b:
81:c8:13:dd:54:5f:c3:88:25:37:9d:09:d1:a7:a6:
87:65:9c:a0:24:a5:ee:f9:f9:d3:2f:2e:26:be:a1:
20:05:ab:48:f8:a2:11:d6:f4:44:2a:dd:dd:f4:21:
45:80:0b:eb:2a:46:2d:0a:65:98:c3:4e:37:ee:9f:
6c:a2:eb:b7:d7:51:e9:d7:64:6c:b3:ef:80:30:ad:
9b:cd:15:c2:f1:dd:49:ca:18:1f:52:ca:1d:c2:5f:
21:d1:dd:42:8e:cd:c1:7f:da:a0:b6:c5:9d:e1:92:
ad:eb:1b:52:1e:18:f5:2e:ed:3d:a3:52:19:83:d5:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E8:0A:1E:AB:E7:8E:68:AC:78:19:54:69:47:CE:85:17:01:E8:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFF439F2C60411EF87193B46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.35.0/24
Signature Algorithm: sha256WithRSAEncryption
82:0c:17:74:56:9e:41:17:fe:73:5d:cf:d0:27:73:03:28:91:
82:8b:66:ec:6d:ea:75:a4:70:d2:df:dd:bb:a1:1c:c8:2c:54:
4d:79:2c:37:9f:75:d4:b4:19:11:50:73:1a:21:94:43:32:69:
5f:93:0b:44:b1:d7:b9:b0:57:13:9c:7b:b2:46:a2:9d:6f:e9:
fa:01:e1:ee:d3:2d:76:97:62:9e:2f:b8:18:e2:55:31:b8:fe:
88:d2:3b:fe:ab:3e:7b:3e:02:b0:69:37:4b:3d:55:75:28:5d:
5a:8e:b7:96:33:86:9d:5c:8f:d7:96:b8:54:15:f6:16:74:fe:
11:3f:14:82:48:c6:ab:51:87:c8:d2:09:99:93:fa:7a:89:a4:
50:ad:2d:1c:ab:64:65:80:33:33:e9:d5:b6:eb:3a:42:c1:b2:
04:22:d0:c3:a5:93:b6:cc:45:01:79:86:a1:e2:5c:17:41:b8:
a6:43:d4:fd:50:29:1c:61:3d:e9:fa:43:47:69:eb:0f:c8:2d:
45:2f:4b:bd:94:8b:da:f7:4b:e0:3e:67:2f:b8:08:a2:d1:51:
6a:fc:62:dd:7a:6f:f6:f0:8c:6a:64:c9:d1:8f:7f:28:1a:12:
93:59:ea:5c:2b:2c:6c:0f:6f:31:4e:d0:6d:3e:b4:9c:62:14:
55:47:0e:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS6AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTY1MDIxWhcNMjcxMjEyMTY1MDIxWjAYMRYw
FAYDVQQDEw02NzcxN2RkMS02NzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAykO0gEr8e0bgCYWI+eFj6LyZGRWFemTr0p+o9hrClOyWerNf34wXos6d
5n6tYnI7WApZwSlwePVJ5FPJXQiiAYWr1KzKHmUtyxnk5gBjbsPbS9C370EXs/hf
WftZo7n6H8M2wPINyumQFhWZcO/Of4dCdyAOBduYtgbmaJKu9kd2VmyauhuByBPd
VF/DiCU3nQnRp6aHZZygJKXu+fnTLy4mvqEgBatI+KIR1vREKt3d9CFFgAvrKkYt
CmWYw0437p9souu311Hp12Rss++AMK2bzRXC8d1JyhgfUsodwl8h0d1Cjs3Bf9qg
tsWd4ZKt6xtSHhj1Lu09o1IZg9VKMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFro
Ch6r545orHgZVGlHzoUXAehXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRkY0MzlGMkM2MDQxMUVGODcxOTNCNDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtkjMA0GCSqGSIb3DQEB
CwUAA4IBAQCCDBd0Vp5BF/5zXc/QJ3MDKJGCi2bsbep1pHDS3927oRzILFRNeSw3
n3XUtBkRUHMaIZRDMmlfkwtEsde5sFcTnHuyRqKdb+n6AeHu0y12l2KeL7gY4lUx
uP6I0jv+qz57PgKwaTdLPVV1KF1ajreWM4adXI/XlrhUFfYWdP4RPxSCSMarUYfI
0gmZk/p6iaRQrS0cq2RlgDMz6dW26zpCwbIEItDDpZO2zEUBeYah4lwXQbimQ9T9
UCkcYT3p+kNHaesPyC1FL0u9lIva90vgPmcvuAii0VFq/GLdem/28IxqZMnRj38o
GhKTWepcKyxsD28xTtBtPrScYhRVRw7C
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:28 2025 by rpki-client