Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CC7D746C35411EFB2BA35B3762E951A.roa
File: 0CC7D746C35411EFB2BA35B3762E951A.roa (raw, json)
Hash identifier: MYAs1T1ENYp1XzIyL7nlwVUbc327PTBG4K+Wh5KfLqU=
Subject key identifier: 99:57:86:31:DC:77:3A:D5:39:AF:21:54:EA:E0:A6:0C:4E:76:D9:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CC7D746C35411EFB2BA35B3762E951A.roa
Signing time: Thu 26 Dec 2024 06:38:43 +0000
ROA not before: Thu 26 Dec 2024 06:38:39 +0000
ROA not after: Sun 12 Dec 2027 06:38:39 +0000
asID: 17561
IP address blocks: 154.88.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75209 (0x125c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:38:39 2024 GMT
Not After : Dec 12 06:38:39 2027 GMT
Subject: CN=676cf9f3-847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:70:9d:a2:bc:fc:30:7c:05:f9:ee:c6:22:
9f:1b:d2:f5:1b:f8:39:9b:4e:ca:57:ec:75:0a:3b:
7f:42:6c:e9:2a:eb:82:41:88:e8:05:48:43:3c:61:
ef:21:8f:dc:25:c5:80:e5:cc:15:a3:05:ff:0a:7f:
63:95:7b:d2:0e:6a:db:3d:8b:0c:ec:39:35:70:92:
2a:87:17:b3:26:52:02:52:09:29:dd:35:f4:7e:93:
40:c4:20:c5:2b:0e:6b:b7:7a:43:54:bd:21:48:a0:
e0:df:66:a4:80:d1:ae:ca:03:09:42:e1:53:f3:6b:
30:3a:37:dd:8a:fd:d4:4e:ef:cb:e9:a8:e4:98:7e:
50:61:46:9b:4a:f2:1b:a9:3c:eb:8b:30:5f:49:86:
0a:75:a6:36:81:ab:59:13:99:9a:1d:6a:56:f3:ce:
c9:d9:d1:74:bf:86:a4:9c:61:13:30:3d:28:4f:7d:
4b:0a:79:0f:82:ae:af:ca:80:db:5d:81:a8:e4:d6:
b5:0a:3b:48:2f:22:8a:dd:1d:9c:58:25:3c:12:9f:
69:65:03:56:8e:01:bd:89:d4:c3:1e:b1:09:78:af:
e9:88:3e:ec:53:03:99:94:0a:08:01:50:e5:9e:7b:
f2:10:b2:8f:6b:d6:5c:cf:ac:8d:49:6e:87:c0:36:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:86:31:DC:77:3A:D5:39:AF:21:54:EA:E0:A6:0C:4E:76:D9:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0CC7D746C35411EFB2BA35B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:f1:ce:38:97:9a:08:5e:e5:65:b5:57:d0:79:1c:61:01:c3:
13:10:67:77:3b:fb:05:8d:c0:bf:f8:f2:2c:29:31:9e:ed:6c:
94:df:32:19:6d:13:e4:6a:fe:08:9c:be:02:4d:f9:60:3e:e7:
e2:80:f8:d5:98:fc:c5:a0:5a:8b:53:04:cb:35:a1:65:25:89:
2d:17:4d:4b:5d:bf:d6:98:69:6a:6e:30:93:ea:81:66:38:43:
73:f0:19:56:fb:a7:54:31:07:37:2a:9c:3c:2e:f7:53:a7:15:
9c:0f:76:74:e8:bf:dd:9d:40:cd:ca:6f:fb:a0:aa:ba:be:54:
8f:13:88:3e:f4:15:75:a5:02:57:1b:91:cd:69:8b:1b:ac:72:
3e:ef:81:82:eb:5b:92:70:8a:f9:c0:b7:05:2f:00:8a:35:c6:
b6:0b:24:20:10:73:94:bf:37:c7:4a:3d:e7:28:de:23:dc:27:
e0:dc:3e:eb:c0:87:22:aa:c1:0c:80:69:95:7b:68:3d:4f:5c:
e3:36:57:90:85:14:7d:15:69:04:c7:70:a9:f7:ab:40:19:21:
29:b3:d8:ea:60:66:45:25:8f:4e:89:c9:bb:d0:65:9a:71:2c:
b5:ca:82:59:ed:13:56:c8:88:1a:e1:88:24:a6:94:26:47:c9:
92:9e:ad:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASXJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDYzODM5WhcNMjcxMjEyMDYzODM5WjAYMRYw
FAYDVQQDEw02NzZjZjlmMy04NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq3NwnaK8/DB8BfnuxiKfG9L1G/g5m07KV+x1Cjt/QmzpKuuCQYjoBUhD
PGHvIY/cJcWA5cwVowX/Cn9jlXvSDmrbPYsM7Dk1cJIqhxezJlICUgkp3TX0fpNA
xCDFKw5rt3pDVL0hSKDg32akgNGuygMJQuFT82swOjfdiv3UTu/L6ajkmH5QYUab
SvIbqTzrizBfSYYKdaY2gatZE5maHWpW887J2dF0v4aknGETMD0oT31LCnkPgq6v
yoDbXYGo5Na1CjtILyKK3R2cWCU8Ep9pZQNWjgG9idTDHrEJeK/piD7sUwOZlAoI
AVDlnnvyELKPa9Zcz6yNSW6HwDZKnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJlX
hjHcdzrVOa8hVOrgpgxOdtmSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQ0M3RDc0NkMzNTQxMUVGQjJCQTM1QjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgoMA0GCSqGSIb3DQEB
CwUAA4IBAQDO8c44l5oIXuVltVfQeRxhAcMTEGd3O/sFjcC/+PIsKTGe7WyU3zIZ
bRPkav4InL4CTflgPufigPjVmPzFoFqLUwTLNaFlJYktF01LXb/WmGlqbjCT6oFm
OENz8BlW+6dUMQc3Kpw8LvdTpxWcD3Z06L/dnUDNym/7oKq6vlSPE4g+9BV1pQJX
G5HNaYsbrHI+74GC61uScIr5wLcFLwCKNca2CyQgEHOUvzfHSj3nKN4j3Cfg3D7r
wIciqsEMgGmVe2g9T1zjNleQhRR9FWkEx3Cp96tAGSEps9jqYGZFJY9Oicm70GWa
cSy1yoJZ7RNWyIga4YgkppQmR8mSnq1c
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:59 2025 by rpki-client