Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FF4791CF4BC11EFAC6E6AB0762E951A.roa
File: 0FF4791CF4BC11EFAC6E6AB0762E951A.roa (raw, json)
Hash identifier: 1q0STqTN+8u+rKvhMSh5UBbcizVj/JXq9VHEUHG8MSI=
Subject key identifier: 02:27:A6:10:B4:D1:1E:54:32:0E:93:AD:A6:B3:75:19:14:98:EF:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FF4791CF4BC11EFAC6E6AB0762E951A.roa
Signing time: Thu 27 Feb 2025 03:36:43 +0000
ROA not before: Thu 27 Feb 2025 03:36:39 +0000
ROA not after: Thu 19 Feb 2026 03:36:39 +0000
asID: 984
IP address blocks: 154.200.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91698 (0x16632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 03:36:39 2025 GMT
Not After : Feb 19 03:36:39 2026 GMT
Subject: CN=67bfddcb-5172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:67:34:a5:d6:b0:25:e8:6a:07:1b:8c:df:3b:
c5:1f:26:e0:e2:9f:c8:3b:6d:c1:26:d3:20:21:99:
6c:ef:f4:23:e5:c8:a4:ed:06:f6:c5:6d:9c:44:38:
c6:0c:e9:aa:3e:36:d4:e3:27:4c:19:13:73:45:38:
1e:c8:75:f2:32:d7:56:66:ef:af:1d:9d:df:f2:4b:
41:b5:26:aa:0f:3b:84:90:0f:27:6e:7e:27:b4:e5:
a4:7e:7c:83:7e:19:8d:4f:fb:19:66:ab:05:c0:51:
2c:14:a6:ae:15:81:59:dc:02:bc:01:3e:89:8a:41:
2f:e8:e3:88:13:15:a3:ea:57:cc:0f:6d:0e:39:1d:
ca:10:23:a4:2f:cb:38:cf:19:b0:ef:48:82:1a:3c:
e5:24:b3:55:7c:16:76:cd:5f:25:19:e6:b0:1a:40:
dc:b2:5d:6f:c0:99:73:58:dc:02:a2:12:d3:96:fe:
9f:a2:d9:3f:83:d8:65:ff:40:b9:9d:3b:a7:9c:d6:
6b:21:e3:8f:e7:37:33:cd:f3:03:7a:38:fd:6a:93:
5b:7a:0c:38:f7:9d:92:f4:4f:5e:46:23:75:4a:c5:
5f:b2:ef:db:e3:b2:e7:6d:13:07:ea:8f:e5:87:46:
2b:7a:df:e3:99:c8:85:7b:30:59:aa:34:7a:6e:23:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:A6:10:B4:D1:1E:54:32:0E:93:AD:A6:B3:75:19:14:98:EF:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FF4791CF4BC11EFAC6E6AB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cf:1e:8f:c6:53:98:e9:05:e2:02:27:8b:bd:fe:b6:63:8b:
d9:11:f3:de:3b:c1:03:a6:e4:09:62:6f:d9:3f:f1:30:a9:66:
73:d9:8f:ca:28:1b:f6:90:2f:78:e9:70:a1:5d:bd:8b:5d:40:
5c:f3:0e:51:87:93:67:8c:ed:87:77:d8:89:1d:94:59:37:14:
f8:ba:0c:a7:ff:0e:c7:f3:bb:f3:3c:0d:e2:09:22:b0:b7:ee:
45:be:1d:90:cd:e6:e8:1c:bf:6c:89:93:f8:69:4a:a0:f6:21:
c6:6d:95:c5:c0:6e:0a:a1:e0:ef:e8:1f:ce:37:ac:9b:96:76:
93:0d:0f:0e:3f:56:ea:ec:61:a2:a0:1a:70:d5:6a:f3:45:3f:
c0:f4:27:ac:b1:6b:ea:a9:96:c1:07:7b:e0:45:72:bf:46:58:
c0:86:58:ee:40:08:28:3c:c0:f8:a7:af:1f:24:aa:6b:18:b9:
11:b7:cb:a6:06:13:95:50:bf:0c:75:f8:63:b2:86:2f:99:40:
c2:ad:28:e0:56:f0:d2:74:59:54:9d:1c:f6:1a:c9:eb:ff:e4:
18:08:59:b0:18:49:3d:60:30:23:a9:02:ee:09:17:2c:df:d0:
d1:e6:41:a2:b7:32:d2:11:3d:fb:63:3c:68:68:6e:28:ef:57:
7a:b7:76:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWYyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDMzNjM5WhcNMjYwMjE5MDMzNjM5WjAYMRYw
FAYDVQQDEw02N2JmZGRjYi01MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7Gc0pdawJehqBxuM3zvFHybg4p/IO23BJtMgIZls7/Qj5cik7Qb2xW2c
RDjGDOmqPjbU4ydMGRNzRTgeyHXyMtdWZu+vHZ3f8ktBtSaqDzuEkA8nbn4ntOWk
fnyDfhmNT/sZZqsFwFEsFKauFYFZ3AK8AT6JikEv6OOIExWj6lfMD20OOR3KECOk
L8s4zxmw70iCGjzlJLNVfBZ2zV8lGeawGkDcsl1vwJlzWNwCohLTlv6fotk/g9hl
/0C5nTunnNZrIeOP5zczzfMDejj9apNbegw4952S9E9eRiN1SsVfsu/b47LnbRMH
6o/lh0Yret/jmciFezBZqjR6biMTiQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAIn
phC00R5UMg6TraazdRkUmO88MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRkY0NzkxQ0Y0QkMxMUVGQUM2RTZBQjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmshQMA0GCSqGSIb3DQEB
CwUAA4IBAQBNzx6PxlOY6QXiAieLvf62Y4vZEfPeO8EDpuQJYm/ZP/EwqWZz2Y/K
KBv2kC946XChXb2LXUBc8w5Rh5NnjO2Hd9iJHZRZNxT4ugyn/w7H87vzPA3iCSKw
t+5Fvh2QzeboHL9siZP4aUqg9iHGbZXFwG4KoeDv6B/ON6yblnaTDQ8OP1bq7GGi
oBpw1WrzRT/A9CessWvqqZbBB3vgRXK/RljAhljuQAgoPMD4p68fJKprGLkRt8um
BhOVUL8MdfhjsoYvmUDCrSjgVvDSdFlUnRz2Gsnr/+QYCFmwGEk9YDAjqQLuCRcs
39DR5kGitzLSET37YzxoaG4o71d6t3aK
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:40 2025 by rpki-client