Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14343D2CF35A11EF97DA9F9F762E951A.roa
File: 14343D2CF35A11EF97DA9F9F762E951A.roa (raw, json)
Hash identifier: rJK1pysT39/qfbBr9McoqXTxZ/L9aYCfd1Xf86JOaNE=
Subject key identifier: 35:83:A9:73:5F:77:D0:EB:63:79:CC:23:7C:0F:55:B1:57:D8:B5:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14343D2CF35A11EF97DA9F9F762E951A.roa
Signing time: Tue 25 Feb 2025 09:22:48 +0000
ROA not before: Tue 25 Feb 2025 09:22:45 +0000
ROA not after: Sat 19 Feb 2028 09:22:45 +0000
asID: 17561
IP address blocks: 154.83.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89594 (0x15dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:22:45 2025 GMT
Not After : Feb 19 09:22:45 2028 GMT
Subject: CN=67bd8be8-f817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:b0:1b:ea:f9:d0:1d:2c:da:3a:18:14:b1:
e8:be:89:fd:04:9d:06:51:7a:b1:80:b7:44:d8:f2:
5b:3e:ab:72:b8:e7:da:e0:ca:23:fc:ca:73:5b:0f:
81:79:21:60:77:12:0b:e5:ed:a9:1c:bc:33:15:15:
1c:a7:af:3f:96:51:35:80:e3:ab:4c:24:5c:a9:6e:
8b:f2:c8:a5:82:40:ae:cb:48:e5:85:ed:a4:b2:97:
ad:13:c1:9c:91:2b:d5:09:26:7d:f1:8e:44:bc:bf:
28:1d:e6:a0:70:01:ea:60:b5:ef:42:8d:91:e0:4b:
42:76:87:f3:68:f5:96:ed:3c:fe:9e:31:6b:24:a8:
8f:27:5f:c1:78:55:18:ed:e8:89:ca:37:1e:02:58:
c4:13:03:34:0e:27:7f:31:73:da:1d:a5:e8:d4:78:
d5:6b:cb:69:82:7b:1e:51:ab:0c:fb:90:22:a8:3a:
16:d8:b8:96:48:96:33:84:c1:b6:2b:b0:57:31:41:
a3:03:74:c6:24:73:0e:e3:be:9e:15:b2:86:b5:df:
2c:61:84:67:e2:2c:25:3e:17:16:e9:e3:82:9b:37:
7d:31:85:af:44:b1:c2:f4:45:31:7d:8a:cf:42:3d:
bd:12:6d:80:ae:47:0e:4e:31:3f:59:88:b2:29:da:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:83:A9:73:5F:77:D0:EB:63:79:CC:23:7C:0F:55:B1:57:D8:B5:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14343D2CF35A11EF97DA9F9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:83:fd:d4:85:c7:3b:99:4e:61:01:29:73:9b:55:7e:8b:bf:
10:45:a2:5e:93:81:9c:c5:1d:f9:6b:9d:89:20:de:4f:fa:2d:
57:32:e5:51:de:bd:07:a3:5a:87:02:0a:82:78:d3:6d:db:2a:
ba:94:ac:b9:bf:44:bb:b5:92:7a:4b:e5:b9:e3:1d:b0:67:21:
57:00:bc:52:9a:34:59:7b:f3:e1:ae:82:7c:2a:f3:fd:74:ae:
38:57:10:77:49:a2:fb:57:7e:94:e8:be:70:d6:d6:74:eb:d1:
34:fc:79:e8:27:ac:4c:0e:35:d8:80:45:e8:1c:7a:b7:a1:65:
08:12:ef:5b:c7:21:8a:de:49:00:9c:9c:6b:64:11:6f:70:ef:
70:b3:8d:3d:ea:f2:cf:ac:a9:5d:0e:5a:28:e7:49:2c:c7:7d:
cc:b8:ec:f5:f2:7c:9c:3c:b4:64:e3:29:7a:e2:d6:f7:03:66:
9d:4d:60:5f:d5:ef:6d:e1:49:8d:73:7a:56:2d:15:c5:8b:fe:
7a:6e:8f:d9:27:23:d1:83:7d:28:7e:42:6e:54:70:84:67:02:
8f:0f:f8:4c:6a:02:09:59:80:32:95:05:94:71:e3:6b:d8:82:
84:9e:60:2c:cb:49:8f:82:96:c8:85:2d:ea:99:8c:2e:f2:26:
8c:f0:06:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAV36MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MDkyMjQ1WhcNMjgwMjE5MDkyMjQ1WjAYMRYw
FAYDVQQDEw02N2JkOGJlOC1mODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAkpWwG+r50B0s2joYFLHovon9BJ0GUXqxgLdE2PJbPqtyuOfa4Moj/Mpz
Ww+BeSFgdxIL5e2pHLwzFRUcp68/llE1gOOrTCRcqW6L8silgkCuy0jlhe2kspet
E8GckSvVCSZ98Y5EvL8oHeagcAHqYLXvQo2R4EtCdofzaPWW7Tz+njFrJKiPJ1/B
eFUY7eiJyjceAljEEwM0Did/MXPaHaXo1HjVa8tpgnseUasM+5AiqDoW2LiWSJYz
hMG2K7BXMUGjA3TGJHMO476eFbKGtd8sYYRn4iwlPhcW6eOCmzd9MYWvRLHC9EUx
fYrPQj29Em2ArkcOTjE/WYiyKdqzxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDWD
qXNfd9DrY3nMI3wPVbFX2LWlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNDM0M0QyQ0YzNUExMUVGOTdEQTlGOUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMpMA0GCSqGSIb3DQEB
CwUAA4IBAQAug/3Uhcc7mU5hASlzm1V+i78QRaJek4GcxR35a52JIN5P+i1XMuVR
3r0Ho1qHAgqCeNNt2yq6lKy5v0S7tZJ6S+W54x2wZyFXALxSmjRZe/PhroJ8KvP9
dK44VxB3SaL7V36U6L5w1tZ069E0/HnoJ6xMDjXYgEXoHHq3oWUIEu9bxyGK3kkA
nJxrZBFvcO9ws4096vLPrKldDloo50ksx33MuOz18nycPLRk4yl64tb3A2adTWBf
1e9t4UmNc3pWLRXFi/56bo/ZJyPRg30ofkJuVHCEZwKPD/hMagIJWYAylQWUceNr
2IKEnmAsy0mPgpbIhS3qmYwu8iaM8AYE
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:16 2025 by rpki-client