Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0082726AEEC011EF80066F75762E951A.roa
File: 0082726AEEC011EF80066F75762E951A.roa (raw, json)
Hash identifier: DvNsETRu2dVpBto0Ec24lXTFuEKqs7+TeszQ0k4MYj8=
Subject key identifier: 16:30:95:97:52:0A:77:B9:38:21:05:17:3B:98:AC:5C:9C:57:16:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01589C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0082726AEEC011EF80066F75762E951A.roa
Signing time: Wed 19 Feb 2025 12:49:48 +0000
ROA not before: Wed 19 Feb 2025 12:49:44 +0000
ROA not after: Sat 19 Apr 2025 12:49:44 +0000
asID: 328608
IP address blocks: 154.91.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88220 (0x1589c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 19 12:49:44 2025 GMT
Not After : Apr 19 12:49:44 2025 GMT
Subject: CN=67b5d36c-372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:99:cd:1e:1d:54:34:83:61:4b:8d:2c:24:
d9:3e:a2:9e:b3:1f:60:47:6b:b0:40:8d:c0:56:0d:
d1:27:55:3d:cf:82:fa:04:91:c5:30:bb:43:d2:ec:
3e:28:ba:9a:16:8d:95:24:bf:7e:7d:b7:f2:42:a9:
87:7c:4b:f8:42:7f:7f:24:62:3e:bb:e5:43:3f:ef:
62:1d:ba:a6:bf:7e:cb:29:ef:c2:88:9c:5a:f8:ad:
f2:b7:9c:6d:28:e9:ae:08:d5:26:28:c0:15:04:c7:
cb:0b:fb:31:28:1a:a4:63:0b:c6:82:d6:a3:80:34:
d8:cb:2e:c9:e9:a3:f0:77:0a:8c:29:47:e3:a7:69:
a6:9e:08:e4:f3:38:4f:11:8e:0f:fd:05:91:5a:c7:
d4:64:ec:da:07:02:ad:54:63:27:f3:d8:fb:4b:e6:
3d:b1:77:f1:5d:4d:71:ca:90:c3:e5:18:cc:82:fd:
74:f2:5a:16:46:36:91:a5:01:1d:58:4c:1f:ed:2d:
8c:1b:fd:a3:50:79:a9:06:e1:7f:0f:49:a8:c7:c4:
b3:2a:62:2c:a9:b0:12:41:3f:66:84:9b:62:9a:c3:
30:41:94:2a:02:43:d8:e3:62:3e:7b:dc:66:14:69:
8f:e8:c9:79:a1:d0:d7:05:84:4b:51:42:26:f0:0e:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:30:95:97:52:0A:77:B9:38:21:05:17:3B:98:AC:5C:9C:57:16:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0082726AEEC011EF80066F75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:88:c4:c0:5c:4d:d0:0e:a4:f3:1c:fd:3d:62:41:3a:f5:5a:
b2:2c:99:03:28:46:0e:57:5f:7d:3c:25:09:b4:1d:0e:be:85:
db:88:65:50:7d:57:3c:fe:b1:67:1f:10:50:f1:87:97:f6:3f:
0b:50:4c:52:b5:ca:75:62:a1:8c:34:07:cc:f9:5a:6b:79:4c:
e6:68:b1:46:17:f6:bf:63:ec:be:0a:9a:3f:75:78:67:af:82:
cf:ca:41:42:e1:2b:10:30:1d:e7:a5:af:25:33:ea:d5:d4:7f:
bb:44:63:14:96:57:d6:f9:9a:f1:7f:9d:c7:a8:d6:65:36:0d:
d0:80:be:f9:f9:5c:13:59:f8:83:f5:03:40:05:99:4b:cb:97:
14:62:c6:80:dc:0f:0a:f3:98:bf:b9:f2:de:56:53:c6:4f:df:
5c:f6:d2:9e:9b:e9:9f:fa:f8:ba:bc:20:e6:b6:47:83:60:bd:
ae:fb:ac:1c:77:02:a9:d7:b0:bd:2d:df:40:f6:2c:d1:44:97:
23:43:a1:78:7d:98:10:2c:8d:06:ca:55:ae:a4:ff:28:1a:62:
e7:1f:80:2c:f2:e3:8e:f2:e0:c8:20:c7:61:32:ff:d5:42:f1:
85:89:01:32:1b:b8:e2:f3:7e:34:6c:7c:f3:76:75:4f:8c:f5:
67:ae:43:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVicMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjE5MTI0OTQ0WhcNMjUwNDE5MTI0OTQ0WjAYMRYw
FAYDVQQDEw02N2I1ZDM2Yy0zNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApt2ZzR4dVDSDYUuNLCTZPqKesx9gR2uwQI3AVg3RJ1U9z4L6BJHFMLtD
0uw+KLqaFo2VJL9+fbfyQqmHfEv4Qn9/JGI+u+VDP+9iHbqmv37LKe/CiJxa+K3y
t5xtKOmuCNUmKMAVBMfLC/sxKBqkYwvGgtajgDTYyy7J6aPwdwqMKUfjp2mmngjk
8zhPEY4P/QWRWsfUZOzaBwKtVGMn89j7S+Y9sXfxXU1xypDD5RjMgv108loWRjaR
pQEdWEwf7S2MG/2jUHmpBuF/D0mox8SzKmIsqbASQT9mhJtimsMwQZQqAkPY42I+
e9xmFGmP6Ml5odDXBYRLUUIm8A5f5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBYw
lZdSCne5OCEFFzuYrFycVxY9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMDgyNzI2QUVFQzAxMUVGODAwNjZGNzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlusMA0GCSqGSIb3DQEB
CwUAA4IBAQBriMTAXE3QDqTzHP09YkE69VqyLJkDKEYOV199PCUJtB0OvoXbiGVQ
fVc8/rFnHxBQ8YeX9j8LUExStcp1YqGMNAfM+VpreUzmaLFGF/a/Y+y+Cpo/dXhn
r4LPykFC4SsQMB3npa8lM+rV1H+7RGMUllfW+Zrxf53HqNZlNg3QgL75+VwTWfiD
9QNABZlLy5cUYsaA3A8K85i/ufLeVlPGT99c9tKem+mf+vi6vCDmtkeDYL2u+6wc
dwKp17C9Ld9A9izRRJcjQ6F4fZgQLI0GylWupP8oGmLnH4As8uOO8uDIIMdhMv/V
QvGFiQEyG7ji8340bHzzdnVPjPVnrkO5
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:54 2025 by rpki-client