Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C067E86E31811EFBCE9CB87762E951A.roa
File: 1C067E86E31811EFBCE9CB87762E951A.roa (raw, json)
Hash identifier: OPREGQID0Os2AOVj+UNvyf2WJ9JfJcV3N36pMxlDUho=
Subject key identifier: AF:30:A2:5F:65:B1:14:1A:73:F7:4B:FD:13:51:62:DF:83:35:CA:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015133
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C067E86E31811EFBCE9CB87762E951A.roa
Signing time: Tue 04 Feb 2025 16:50:16 +0000
ROA not before: Tue 04 Feb 2025 16:50:12 +0000
ROA not after: Wed 30 Apr 2025 16:50:12 +0000
asID: 18229
IP address blocks: 154.210.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86323 (0x15133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 16:50:12 2025 GMT
Not After : Apr 30 16:50:12 2025 GMT
Subject: CN=67a24548-28c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:bc:10:d5:86:c9:ff:ff:42:e7:a8:9e:a9:
6d:92:ae:3f:d5:62:65:73:4a:21:52:42:f5:12:51:
be:69:a8:ea:17:7d:f3:3d:13:8e:19:e1:92:73:f5:
66:28:4d:93:a1:f6:f0:d5:35:ca:ab:a9:a2:ec:07:
c9:d9:e9:04:db:92:95:d9:2d:a9:b2:7c:f4:f9:d7:
68:b4:33:4f:51:6a:66:0e:fc:df:f9:f9:1d:60:af:
19:db:38:f7:25:e5:8f:3d:2f:e4:03:c0:7c:d7:fe:
1c:f1:0f:2b:eb:48:01:86:df:75:d6:6a:60:2f:21:
2f:86:35:a4:fe:ab:1e:94:a1:c9:13:59:2d:b8:51:
89:b0:83:29:6e:76:5f:e3:fc:77:e0:f6:6e:79:ea:
9e:28:21:da:cc:48:5f:cf:f8:23:b5:68:fe:9e:9e:
4f:d0:5b:06:65:8c:72:88:63:39:98:62:96:cd:20:
ba:a8:70:d6:9d:00:ed:57:c5:0d:11:9c:54:f2:e6:
04:9f:ab:0e:af:f8:97:f5:0a:2b:33:73:8c:3b:82:
e1:1a:dd:4e:5b:17:ec:cc:93:45:be:4b:d8:e8:c9:
f2:b3:90:f6:d7:6d:b7:d2:b5:3f:5c:16:5a:d0:17:
0b:bd:23:e5:42:cc:8b:6a:05:89:78:1a:db:36:96:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:A2:5F:65:B1:14:1A:73:F7:4B:FD:13:51:62:DF:83:35:CA:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C067E86E31811EFBCE9CB87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:2e:d3:12:46:84:48:f5:29:86:05:50:f4:1a:c1:7f:f3:cc:
94:13:30:86:20:c0:76:b5:cd:d3:bf:c6:ea:72:50:66:92:d8:
34:1c:df:03:cb:3c:41:6d:cb:ba:b4:39:a2:4c:ac:1d:12:a1:
90:c6:c5:43:a0:0e:d7:35:76:c2:64:ea:3d:2d:1c:96:1c:84:
1b:ec:ee:cb:27:23:fd:b6:f2:66:94:38:fe:a8:08:e4:d6:23:
cd:88:bf:c7:a4:9a:b1:48:4d:7f:ae:bd:ef:78:f4:33:2c:67:
9d:77:e9:ae:39:61:7c:1b:4f:b0:a2:19:d5:29:81:b4:33:d7:
c0:01:b4:a3:e7:af:d5:54:da:9b:0e:45:19:43:33:6f:10:41:
a8:5f:ad:41:dc:bc:41:b0:71:63:fb:95:c6:3f:cf:0b:60:25:
5b:70:49:a7:f7:b3:15:1c:aa:6b:ce:25:63:be:84:94:f7:f9:
8b:82:a1:82:a7:cf:70:7a:7d:70:32:74:08:24:06:43:bc:19:
60:0e:b9:be:28:59:60:8b:ec:c0:2d:a2:3d:25:5b:be:c6:e0:
c6:38:e4:56:e2:83:2f:c0:91:a8:7e:a0:d9:62:e3:c1:80:8d:
0a:99:94:b3:11:f1:99:5f:c6:32:a9:c5:b0:0e:31:38:57:7a:
97:a2:fc:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVEzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MTY1MDEyWhcNMjUwNDMwMTY1MDEyWjAYMRYw
FAYDVQQDEw02N2EyNDU0OC0yOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuPq8ENWGyf//Queonqltkq4/1WJlc0ohUkL1ElG+aajqF33zPROOGeGS
c/VmKE2Tofbw1TXKq6mi7AfJ2ekE25KV2S2psnz0+ddotDNPUWpmDvzf+fkdYK8Z
2zj3JeWPPS/kA8B81/4c8Q8r60gBht911mpgLyEvhjWk/qselKHJE1ktuFGJsIMp
bnZf4/x34PZueeqeKCHazEhfz/gjtWj+np5P0FsGZYxyiGM5mGKWzSC6qHDWnQDt
V8UNEZxU8uYEn6sOr/iX9QorM3OMO4LhGt1OWxfszJNFvkvY6Mnys5D212230rU/
XBZa0BcLvSPlQsyLagWJeBrbNpY7UwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK8w
ol9lsRQac/dL/RNRYt+DNcpQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQzA2N0U4NkUzMTgxMUVGQkNFOUNCODc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKmMA0GCSqGSIb3DQEB
CwUAA4IBAQDFLtMSRoRI9SmGBVD0GsF/88yUEzCGIMB2tc3Tv8bqclBmktg0HN8D
yzxBbcu6tDmiTKwdEqGQxsVDoA7XNXbCZOo9LRyWHIQb7O7LJyP9tvJmlDj+qAjk
1iPNiL/HpJqxSE1/rr3vePQzLGedd+muOWF8G0+wohnVKYG0M9fAAbSj56/VVNqb
DkUZQzNvEEGoX61B3LxBsHFj+5XGP88LYCVbcEmn97MVHKprziVjvoSU9/mLgqGC
p89wen1wMnQIJAZDvBlgDrm+KFlgi+zALaI9JVu+xuDGOORW4oMvwJGofqDZYuPB
gI0KmZSzEfGZX8YyqcWwDjE4V3qXovyC
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:11:20 2025 by rpki-client