Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/070B6C4ADA1B11EFB5E3EB6F762E951A.roa
File: 070B6C4ADA1B11EFB5E3EB6F762E951A.roa (raw, json)
Hash identifier: +4MZY1010Y/n3qEPbn+MPfi5et4/EFlURmW8jrIRjok=
Subject key identifier: 87:E3:27:45:FF:9F:A6:80:F9:24:53:B6:58:24:17:03:A2:70:38:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/070B6C4ADA1B11EFB5E3EB6F762E951A.roa
Signing time: Fri 24 Jan 2025 06:18:29 +0000
ROA not before: Fri 24 Jan 2025 06:18:25 +0000
ROA not after: Tue 13 May 2025 06:18:25 +0000
asID: 138915
IP address blocks: 154.205.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82928 (0x143f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 24 06:18:25 2025 GMT
Not After : May 13 06:18:25 2025 GMT
Subject: CN=679330b5-6b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:82:9a:22:96:73:24:b1:86:60:64:41:88:
43:13:49:93:6a:b3:40:0c:f0:e0:1e:a6:5d:df:7e:
16:c9:28:1c:07:50:50:c5:3a:9f:43:54:0d:9b:2d:
69:e1:27:58:85:db:06:3a:be:e1:32:e0:24:86:08:
bc:1f:a2:0b:aa:e0:37:f3:cc:a1:b5:f5:0f:af:7b:
95:02:af:48:41:5a:85:0b:1f:45:a9:67:11:4e:f2:
69:95:f4:e2:dc:aa:12:0a:88:b6:1f:bb:5b:8b:48:
1f:76:8e:a4:20:51:18:cd:c4:68:0d:87:97:27:9c:
fe:14:5c:7b:d3:b2:74:90:ee:76:66:7c:f7:e9:dc:
ac:a7:ea:eb:07:67:f5:ea:d4:ec:e1:d4:b8:18:33:
b0:61:a6:45:ae:07:ad:19:09:46:81:9f:d5:de:82:
2d:3a:b1:60:63:3e:5b:e3:c9:d8:d2:c3:42:39:93:
52:91:fb:0b:88:a0:e6:fb:2f:02:74:a2:16:ad:79:
2f:fb:20:03:4d:25:9a:45:0c:48:c8:f1:bf:c7:c1:
72:94:a3:76:ae:26:77:30:a5:e3:17:a4:9e:f6:d4:
28:5c:a5:f1:8b:05:56:c7:21:1a:5e:62:b7:c0:8b:
0a:23:f0:65:70:e2:92:41:21:42:a2:6e:c2:87:e8:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:27:45:FF:9F:A6:80:F9:24:53:B6:58:24:17:03:A2:70:38:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/070B6C4ADA1B11EFB5E3EB6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.142.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:a7:07:32:b3:ac:29:24:a6:ee:41:4a:45:dd:5e:90:7e:9b:
80:21:7f:80:36:24:94:9d:8d:2b:a8:99:28:47:74:47:2f:5c:
07:04:4e:9f:ce:4a:aa:cd:4a:4a:84:11:da:3e:e2:2e:94:9a:
42:fd:f2:1a:f7:9a:e2:4a:83:4c:a7:01:40:5f:36:b3:62:fc:
2a:ba:48:2c:eb:95:c1:84:e7:a6:d8:e2:c5:34:68:eb:72:05:
10:5a:dd:48:e8:1f:b9:87:91:af:0d:75:e5:0b:0d:01:ae:bf:
1a:52:b8:e8:95:1c:3b:20:c8:5f:1b:3f:a6:25:0a:e3:12:b1:
85:49:f7:70:09:d2:bc:84:9d:a2:92:f9:33:4b:d3:06:cf:53:
62:ed:1b:ec:7a:0d:a5:ee:aa:34:b0:81:ba:b3:28:a2:23:1f:
3c:2e:d5:17:61:52:aa:78:8d:97:1b:1c:da:10:47:de:d7:b6:
21:ff:79:23:9d:68:c9:6a:36:fd:0a:a4:3c:6a:6f:59:34:e6:
ce:e0:2a:bc:33:d7:46:41:d2:25:16:93:19:db:61:17:d2:1b:
da:71:c8:2d:f1:50:c8:d6:8c:bf:42:30:c9:62:dc:f3:21:f8:
2c:ec:af:84:0f:40:b4:c7:15:eb:03:80:2e:d1:07:08:22:30:
89:96:7f:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUPwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDYxODI1WhcNMjUwNTEzMDYxODI1WjAYMRYw
FAYDVQQDEw02NzkzMzBiNS02Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3DqCmiKWcySxhmBkQYhDE0mTarNADPDgHqZd334WySgcB1BQxTqfQ1QN
my1p4SdYhdsGOr7hMuAkhgi8H6ILquA388yhtfUPr3uVAq9IQVqFCx9FqWcRTvJp
lfTi3KoSCoi2H7tbi0gfdo6kIFEYzcRoDYeXJ5z+FFx707J0kO52Znz36dysp+rr
B2f16tTs4dS4GDOwYaZFrgetGQlGgZ/V3oItOrFgYz5b48nY0sNCOZNSkfsLiKDm
+y8CdKIWrXkv+yADTSWaRQxIyPG/x8FylKN2riZ3MKXjF6Se9tQoXKXxiwVWxyEa
XmK3wIsKI/BlcOKSQSFCom7Ch+h9YQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIfj
J0X/n6aA+SRTtlgkFwOicDh5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzBCNkM0QURBMUIxMUVGQjVFM0VCNkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms2OMA0GCSqGSIb3DQEB
CwUAA4IBAQCqpwcys6wpJKbuQUpF3V6QfpuAIX+ANiSUnY0rqJkoR3RHL1wHBE6f
zkqqzUpKhBHaPuIulJpC/fIa95riSoNMpwFAXzazYvwqukgs65XBhOem2OLFNGjr
cgUQWt1I6B+5h5GvDXXlCw0Brr8aUrjolRw7IMhfGz+mJQrjErGFSfdwCdK8hJ2i
kvkzS9MGz1Ni7Rvseg2l7qo0sIG6syiiIx88LtUXYVKqeI2XGxzaEEfe17Yh/3kj
nWjJajb9CqQ8am9ZNObO4Cq8M9dGQdIlFpMZ22EX0hvaccgt8VDI1oy/QjDJYtzz
Ifgs7K+ED0C0xxXrA4Au0QcIIjCJln/6
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:02 2025 by rpki-client