Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E3B520AEE0E11EFAB5D786F762E951A.roa
File: 8E3B520AEE0E11EFAB5D786F762E951A.roa (raw, json)
Hash identifier: ulm6LQC8XOcdknmQ5frqhuzhRgpTEKsLoTePwhEPHeE=
Subject key identifier: E3:E8:8B:76:D6:93:08:7B:56:2E:F1:96:EF:E8:38:1E:CC:02:51:D5
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 19E3
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E3B520AEE0E11EFAB5D786F762E951A.roa
Signing time: Tue 18 Feb 2025 15:39:35 +0000
ROA not before: Tue 18 Feb 2025 15:39:32 +0000
ROA not after: Sat 20 Feb 2027 15:39:32 +0000
asID: 61317
IP address blocks: 154.16.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6627 (0x19e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 18 15:39:32 2025 GMT
Not After : Feb 20 15:39:32 2027 GMT
Subject: CN=67b4a9b7-99cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:96:7a:75:93:85:08:d2:e6:9f:3e:24:57:
31:87:10:d1:80:62:bf:b8:87:e0:b0:f7:b3:47:4b:
6a:9c:b1:d1:3b:c8:9f:89:84:4e:95:96:75:b7:d3:
f6:b0:b4:8b:38:b7:9d:41:b5:6f:89:55:db:7d:0d:
92:bb:7c:e1:18:48:a2:84:c6:a8:77:e3:35:07:43:
9a:a3:07:13:77:b8:5f:7e:cf:13:27:a2:89:c8:35:
5e:3d:d9:a1:71:d3:f5:73:29:49:b7:66:9d:f6:c7:
8c:b5:d4:6b:9f:ef:56:2e:26:d3:75:3b:47:d7:20:
7f:39:ca:5c:8f:3f:d4:e5:c2:3b:52:1d:95:97:8f:
8d:69:d6:12:79:3a:f2:ac:25:f6:cf:25:42:d1:ac:
09:b6:ed:97:31:60:a0:49:95:05:73:1e:85:74:7b:
4e:cc:e6:5a:99:e6:e7:90:e3:46:c3:47:94:43:6d:
b7:35:2a:8c:64:82:e5:0e:ce:5d:02:00:70:1d:9b:
22:a6:80:e2:2f:71:8c:b9:58:c4:ac:9d:bd:1e:76:
a5:99:ab:22:c5:f1:83:05:16:ca:7a:b9:40:6f:9a:
f3:87:b1:7c:35:18:32:f3:a2:6d:7c:76:b1:b2:39:
79:68:4d:01:ba:a8:59:83:e4:61:a6:be:82:c6:07:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E8:8B:76:D6:93:08:7B:56:2E:F1:96:EF:E8:38:1E:CC:02:51:D5
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8E3B520AEE0E11EFAB5D786F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:72:36:89:9d:26:5d:3a:58:45:35:7c:19:19:0b:06:b4:6d:
ac:42:f2:1d:6b:83:ca:ee:20:6b:cc:59:31:98:cf:43:c2:44:
46:63:93:7c:53:6d:1f:30:2e:f5:a5:4d:73:5b:bf:01:0f:57:
8b:ab:e1:b7:62:26:79:84:d4:e5:fb:e2:d1:a3:5e:2b:6a:46:
30:52:b3:68:31:c5:6b:89:87:68:f3:93:44:21:6f:b8:69:92:
1c:87:ac:32:27:74:fb:84:73:38:96:3c:24:e2:97:28:c6:17:
fa:21:47:a4:c1:e5:88:4b:21:a1:18:fc:d6:e4:41:6d:91:58:
4d:01:ff:88:66:e1:43:38:6a:e6:c6:67:b2:5a:64:5d:7c:2d:
22:cd:32:3b:24:9d:23:33:25:2c:ca:62:99:04:01:b0:e5:0f:
6c:54:19:9b:a0:d8:b3:bc:6c:d8:f7:dd:a2:4b:e0:04:96:4d:
fd:80:fd:c7:e2:82:ff:b1:76:af:31:64:c4:20:4a:53:fd:b3:
f2:e5:d5:43:f7:51:32:94:6f:c7:d9:b4:93:fe:6a:fa:d1:11:
69:01:0d:b9:1a:ff:5e:1c:92:4e:4c:be:75:8b:99:ed:2e:66:
d1:72:5b:10:ae:8e:67:55:70:34:a5:93:29:bd:c6:c0:b4:ab:
9c:f7:1b:d1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGeMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTAyMTgxNTM5MzJaFw0yNzAyMjAxNTM5MzJaMBgxFjAU
BgNVBAMTDTY3YjRhOWI3LTk5Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdmpZ6dZOFCNLmnz4kVzGHENGAYr+4h+Cw97NHS2qcsdE7yJ+JhE6VlnW3
0/awtIs4t51BtW+JVdt9DZK7fOEYSKKExqh34zUHQ5qjBxN3uF9+zxMnoonINV49
2aFx0/VzKUm3Zp32x4y11Guf71YuJtN1O0fXIH85ylyPP9TlwjtSHZWXj41p1hJ5
OvKsJfbPJULRrAm27ZcxYKBJlQVzHoV0e07M5lqZ5ueQ40bDR5RDbbc1KoxkguUO
zl0CAHAdmyKmgOIvcYy5WMSsnb0edqWZqyLF8YMFFsp6uUBvmvOHsXw1GDLzom18
drGyOXloTQG6qFmD5GGmvoLGBwd5AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4+iL
dtaTCHtWLvGW7+g4HswCUdUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzhFM0I1MjBBRUUwRTExRUZBQjVENzg2Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEF8wDQYJKoZIhvcNAQEL
BQADggEBAEpyNomdJl06WEU1fBkZCwa0baxC8h1rg8ruIGvMWTGYz0PCREZjk3xT
bR8wLvWlTXNbvwEPV4ur4bdiJnmE1OX74tGjXitqRjBSs2gxxWuJh2jzk0Qhb7hp
khyHrDIndPuEcziWPCTilyjGF/ohR6TB5YhLIaEY/NbkQW2RWE0B/4hm4UM4aubG
Z7JaZF18LSLNMjsknSMzJSzKYpkEAbDlD2xUGZug2LO8bNj33aJL4ASWTf2A/cfi
gv+xdq8xZMQgSlP9s/Ll1UP3UTKUb8fZtJP+avrREWkBDbka/14ckk5MvnWLme0u
ZtFyWxCujmdVcDSlkym9xsC0q5z3G9E=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:54 2025 by rpki-client