Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA5644AF4A111EF8ECD7962762E951A.roa
File: 0BA5644AF4A111EF8ECD7962762E951A.roa (raw, json)
Hash identifier: +XL7QtYc8/lfOHQ97p47aG0UsYyaRzafC479RvxN4Y4=
Subject key identifier: 0A:B8:69:FB:8D:AA:47:C7:FD:88:CC:25:18:D9:AD:91:16:0A:0C:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016601
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA5644AF4A111EF8ECD7962762E951A.roa
Signing time: Thu 27 Feb 2025 00:23:19 +0000
ROA not before: Thu 27 Feb 2025 00:00:15 +0000
ROA not after: Sat 19 Feb 2028 00:00:15 +0000
asID: 17561
IP address blocks: 154.94.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91649 (0x16601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 00:00:15 2025 GMT
Not After : Feb 19 00:00:15 2028 GMT
Subject: CN=67bfb077-da67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:69:9c:7f:85:45:62:e5:2e:0e:c6:92:fa:
d6:b6:83:6e:0b:37:bd:3d:84:69:bb:39:a2:be:ea:
fc:9f:41:48:68:d0:40:b6:21:78:7d:c4:10:94:e6:
21:ce:44:f5:f1:02:f0:5a:d3:90:29:8b:2d:fa:0b:
a6:6d:9a:81:4a:69:99:c9:9e:16:c2:e0:90:7a:d2:
09:ab:76:b2:cb:a3:e1:40:11:1c:78:2e:82:75:ad:
f7:60:ec:23:08:74:8f:57:0c:41:a0:5e:1a:b1:12:
6d:6d:da:97:09:d8:e1:e5:2d:31:9e:c6:e3:9d:8d:
51:c3:53:ee:17:9f:47:23:e1:fb:db:30:a6:ef:c3:
f4:85:a2:0e:0c:58:32:74:4e:b6:49:9c:05:37:ef:
ac:d4:5a:df:be:ff:aa:70:6e:5c:5e:6e:95:a0:f3:
a0:b3:f2:7c:46:07:9b:60:03:f6:c2:a8:60:aa:f6:
bb:b1:95:16:84:83:87:e6:51:41:28:e0:99:32:65:
15:06:2a:f3:5a:40:b8:63:20:23:96:55:9e:91:4d:
24:c7:c5:ea:59:8c:c0:69:dd:76:08:18:9b:58:65:
4d:0e:e1:10:bf:8d:7e:b2:11:de:b8:41:d1:8e:46:
c9:fa:cb:fd:9a:31:96:7c:34:50:4f:30:90:d9:89:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B8:69:FB:8D:AA:47:C7:FD:88:CC:25:18:D9:AD:91:16:0A:0C:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BA5644AF4A111EF8ECD7962762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:72:36:da:a2:11:96:45:33:aa:ee:bc:4d:77:60:4f:a8:9d:
78:d3:7d:35:c3:93:23:c1:21:8c:b0:10:7f:d2:f3:da:96:e7:
a4:0b:02:98:68:38:a4:69:5d:9d:98:9a:9f:32:c9:c1:35:5c:
ab:52:6a:f6:82:16:e9:5c:9e:d1:28:4d:fa:d0:8d:d8:4c:e8:
7b:b0:2c:3a:48:ee:c4:1f:44:02:ba:23:cb:f9:54:43:9b:55:
56:f9:cf:8d:78:a9:14:c7:20:32:44:6b:26:7a:21:4d:c6:8a:
b1:ba:1a:3c:bf:b5:a1:51:37:97:31:75:d7:a5:7c:83:34:ca:
34:81:d5:14:40:5b:6b:f0:3a:97:af:c0:ff:e6:29:b1:3e:eb:
e0:2f:3d:9f:94:9c:8d:76:e7:72:fc:2c:1b:d8:24:a5:f1:42:
bc:18:10:d3:d9:d9:f7:24:85:a7:b2:70:00:4a:b6:3f:c3:b4:
ee:a3:17:74:94:ca:bb:b9:e4:2b:d6:f0:70:c6:90:30:16:15:
49:92:54:5f:3d:cc:8d:a5:e5:6f:7f:7d:62:34:77:86:70:a4:
cf:e8:27:a9:5c:5e:ce:51:cd:ad:5c:e2:12:48:5e:98:c0:08:
55:90:19:85:10:c8:92:b9:91:7d:bc:a5:72:f4:c1:1e:71:ef:
a6:26:9b:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWYBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDAwMDE1WhcNMjgwMjE5MDAwMDE1WjAYMRYw
FAYDVQQDEw02N2JmYjA3Ny1kYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuu9pnH+FRWLlLg7GkvrWtoNuCze9PYRpuzmivur8n0FIaNBAtiF4fcQQ
lOYhzkT18QLwWtOQKYst+gumbZqBSmmZyZ4WwuCQetIJq3ayy6PhQBEceC6Cda33
YOwjCHSPVwxBoF4asRJtbdqXCdjh5S0xnsbjnY1Rw1PuF59HI+H72zCm78P0haIO
DFgydE62SZwFN++s1Frfvv+qcG5cXm6VoPOgs/J8RgebYAP2wqhgqva7sZUWhIOH
5lFBKOCZMmUVBirzWkC4YyAjllWekU0kx8XqWYzAad12CBibWGVNDuEQv41+shHe
uEHRjkbJ+sv9mjGWfDRQTzCQ2YnuXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAq4
afuNqkfH/YjMJRjZrZEWCgwjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQkE1NjQ0QUY0QTExMUVGOEVDRDc5NjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml7yMA0GCSqGSIb3DQEB
CwUAA4IBAQAvcjbaohGWRTOq7rxNd2BPqJ140301w5MjwSGMsBB/0vPaluekCwKY
aDikaV2dmJqfMsnBNVyrUmr2ghbpXJ7RKE360I3YTOh7sCw6SO7EH0QCuiPL+VRD
m1VW+c+NeKkUxyAyRGsmeiFNxoqxuho8v7WhUTeXMXXXpXyDNMo0gdUUQFtr8DqX
r8D/5imxPuvgLz2flJyNdudy/Cwb2CSl8UK8GBDT2dn3JIWnsnAASrY/w7Tuoxd0
lMq7ueQr1vBwxpAwFhVJklRfPcyNpeVvf31iNHeGcKTP6CepXF7OUc2tXOISSF6Y
wAhVkBmFEMiSuZF9vKVy9MEece+mJpv8
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:18 2025 by rpki-client