Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/038D3EEAC1BB11EFB374697F762E951A.roa
File: 038D3EEAC1BB11EFB374697F762E951A.roa (raw, json)
Hash identifier: f0MljfyheDcJCp7lJ2k2YIFWzESqpmMrxL9c3+4JZ5s=
Subject key identifier: 4A:7D:14:D4:26:04:7A:DE:47:BC:FF:FC:10:0D:BE:81:B9:6C:5B:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/038D3EEAC1BB11EFB374697F762E951A.roa
Signing time: Tue 24 Dec 2024 05:50:43 +0000
ROA not before: Tue 24 Dec 2024 05:50:40 +0000
ROA not after: Wed 10 Dec 2025 05:50:40 +0000
asID: 984
IP address blocks: 154.193.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74219 (0x121eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:50:40 2024 GMT
Not After : Dec 10 05:50:40 2025 GMT
Subject: CN=676a4bb3-d128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:c6:74:4e:c7:f7:8e:f4:36:8b:74:64:bf:
c7:59:0f:39:c7:91:cc:78:7c:af:68:b6:f1:e8:b7:
ab:74:21:3d:9b:86:8a:27:07:e7:ba:7d:85:5a:cd:
9d:bb:0f:77:e5:1e:08:5a:ae:4b:72:fc:c5:f5:1e:
65:6b:1f:f8:24:0d:e1:48:8e:28:4c:3a:56:a7:ec:
1e:d3:80:8c:b2:9e:ad:2c:ae:8f:88:e2:61:bc:45:
c4:47:f6:8c:7b:2a:41:d1:54:a5:16:21:e9:c6:b7:
7b:40:5c:61:6d:7e:a2:be:4c:e7:de:68:04:48:f1:
af:e8:f8:ee:3d:aa:71:47:0b:7b:b3:bf:46:fd:f3:
df:3b:54:c9:33:90:8e:e2:af:9e:50:0c:c7:fb:8c:
4a:31:21:75:ad:b0:96:be:42:20:7a:b1:71:d4:3e:
7a:d0:7d:04:82:f0:40:40:d0:5e:21:8a:a5:07:6c:
94:f8:eb:d0:cc:cc:59:6e:ac:d1:96:42:d4:91:a4:
c7:86:be:2e:e7:d0:c0:91:2a:01:c1:e1:fa:1c:65:
72:fd:ff:19:3f:9b:4f:c7:51:bc:0a:57:45:36:e4:
4d:85:1b:a3:2e:72:cf:a5:7b:c6:20:e9:7c:ec:85:
77:65:7c:62:5e:b3:9b:1b:3c:48:5a:28:bd:c5:a5:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:14:D4:26:04:7A:DE:47:BC:FF:FC:10:0D:BE:81:B9:6C:5B:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/038D3EEAC1BB11EFB374697F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.175.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e7:b9:7f:3f:45:56:e9:bc:34:81:00:43:2c:45:1d:d0:11:
32:7b:66:55:12:be:59:1c:fd:6d:3c:c6:15:6e:e9:7f:e9:8c:
6b:ce:45:eb:85:67:f6:e1:dd:ae:80:70:e2:31:40:ae:b8:0d:
ac:c2:67:9d:60:d0:8b:b2:2e:99:f3:04:55:77:6d:14:ce:b9:
c9:4f:65:93:90:fe:a9:1b:9c:17:9a:86:5d:31:9e:aa:67:9f:
76:ef:6b:b6:5e:53:67:2a:c4:15:18:9e:33:93:e1:33:c4:20:
2b:b5:d7:21:7c:75:15:b1:28:0a:78:e3:05:0b:71:5c:8c:11:
63:d1:c6:63:38:29:2f:35:bd:d7:5c:ea:67:b3:35:a3:8f:bc:
7e:8f:e8:b6:51:8b:dd:2e:8f:e8:7d:b3:e8:38:33:2d:46:cb:
29:7a:82:00:4b:05:77:5d:64:83:50:90:6e:67:72:57:48:23:
82:17:34:74:75:65:51:2b:7a:21:4a:ab:ab:33:3e:48:5a:1e:
e6:d7:1c:ee:d6:0e:f5:2d:78:ef:7a:4d:92:0c:30:5c:4a:19:
d5:ec:87:20:71:d6:94:29:b7:71:42:f5:b6:46:f8:0c:d0:85:
0b:a0:52:ef:c2:0e:9c:eb:5d:57:58:67:b3:8d:31:5f:8a:03:
51:26:fc:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASHrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDU1MDQwWhcNMjUxMjEwMDU1MDQwWjAYMRYw
FAYDVQQDEw02NzZhNGJiMy1kMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvHnGdE7H9470Not0ZL/HWQ85x5HMeHyvaLbx6LerdCE9m4aKJwfnun2F
Ws2duw935R4IWq5LcvzF9R5lax/4JA3hSI4oTDpWp+we04CMsp6tLK6PiOJhvEXE
R/aMeypB0VSlFiHpxrd7QFxhbX6ivkzn3mgESPGv6PjuPapxRwt7s79G/fPfO1TJ
M5CO4q+eUAzH+4xKMSF1rbCWvkIgerFx1D560H0EgvBAQNBeIYqlB2yU+OvQzMxZ
bqzRlkLUkaTHhr4u59DAkSoBweH6HGVy/f8ZP5tPx1G8CldFNuRNhRujLnLPpXvG
IOl87IV3ZXxiXrObGzxIWii9xaWffwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEp9
FNQmBHreR7z//BANvoG5bFsbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMzhEM0VFQUMxQkIxMUVGQjM3NDY5N0Y3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGvMA0GCSqGSIb3DQEB
CwUAA4IBAQAG57l/P0VW6bw0gQBDLEUd0BEye2ZVEr5ZHP1tPMYVbul/6YxrzkXr
hWf24d2ugHDiMUCuuA2swmedYNCLsi6Z8wRVd20UzrnJT2WTkP6pG5wXmoZdMZ6q
Z59272u2XlNnKsQVGJ4zk+EzxCArtdchfHUVsSgKeOMFC3FcjBFj0cZjOCkvNb3X
XOpnszWjj7x+j+i2UYvdLo/ofbPoODMtRsspeoIASwV3XWSDUJBuZ3JXSCOCFzR0
dWVRK3ohSqurMz5IWh7m1xzu1g71LXjvek2SDDBcShnV7IcgcdaUKbdxQvW2RvgM
0IULoFLvwg6c611XWGezjTFfigNRJvxY
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:44 2025 by rpki-client