Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C1C00BCC1CB11EFB5C4A664762E951A.roa
File: 1C1C00BCC1CB11EFB5C4A664762E951A.roa (raw, json)
Hash identifier: co5cQL6AZhLuRYx7/I7Q4yzCuCWeaDO6RwknDz6Idnk=
Subject key identifier: D3:A2:22:CA:03:92:19:D8:32:9D:23:61:86:37:A0:A1:6A:D8:21:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01225D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C1C00BCC1CB11EFB5C4A664762E951A.roa
Signing time: Tue 24 Dec 2024 07:45:57 +0000
ROA not before: Tue 24 Dec 2024 07:45:53 +0000
ROA not after: Wed 10 Dec 2025 07:45:53 +0000
asID: 984
IP address blocks: 154.193.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74333 (0x1225d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:45:53 2024 GMT
Not After : Dec 10 07:45:53 2025 GMT
Subject: CN=676a66b4-1ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:f2:c1:36:6e:bd:68:f5:3e:26:20:16:ed:
71:d5:47:b4:d4:a2:aa:2f:22:b7:e5:d8:99:27:bc:
80:ba:5d:00:fe:95:2b:fd:9f:c8:93:07:b4:2a:cc:
d9:b3:81:81:54:42:ca:27:2b:20:8b:23:ea:65:0f:
f5:f3:59:b9:1d:1a:99:f8:c8:0d:c9:0e:39:f8:df:
01:26:a7:24:55:94:84:a8:59:1c:ef:2d:21:7f:63:
07:49:69:4d:f8:67:16:e3:c5:cc:c6:1b:da:9e:67:
1b:e0:48:28:53:bd:46:fa:6b:3b:5d:a0:f5:f5:f8:
e7:9b:a3:d8:8e:9d:e2:2b:a6:cc:c5:63:17:fb:68:
ef:98:7f:d0:84:5a:b7:b8:fc:17:2b:b9:6b:8b:b2:
b9:71:f7:a8:02:b6:5c:8e:31:3b:28:a7:c0:ad:4d:
b8:fc:29:95:31:35:57:17:59:c9:9e:2f:23:0c:eb:
75:87:55:ef:df:6a:ec:cb:83:c2:ea:ef:02:8b:fb:
7f:d3:a9:c6:51:b7:11:80:db:76:a7:53:64:69:0f:
0f:58:6f:0b:06:24:d2:ca:51:e4:f0:99:f2:c1:4e:
7e:a9:5a:ea:5b:86:b6:22:26:12:17:fc:fa:00:8f:
2a:ba:a6:67:2b:e4:43:80:e9:5e:6f:eb:bc:ea:ea:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A2:22:CA:03:92:19:D8:32:9D:23:61:86:37:A0:A1:6A:D8:21:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C1C00BCC1CB11EFB5C4A664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ca:4c:ed:dd:e0:f9:17:3f:b8:4e:11:eb:fa:19:60:7f:84:
bd:f5:b8:35:fc:7f:97:c0:a1:62:42:c8:b4:37:69:56:87:9b:
61:4f:98:dd:64:0b:a9:20:7d:10:9f:c7:00:a6:cd:c0:d1:b9:
ec:87:fa:2a:25:66:2e:ca:4c:f9:fe:64:42:f8:84:c0:27:a1:
e0:0e:8e:90:92:0a:a4:38:c4:d6:dc:4a:45:b6:21:53:90:56:
6c:a8:b2:8e:10:4b:06:f5:fb:ab:93:ce:9b:a3:fd:7c:e3:05:
52:f8:ca:c0:c2:b3:1e:eb:32:6a:b0:ba:f4:16:d4:66:6d:05:
cc:53:7e:0a:c7:23:16:87:22:26:53:3d:13:a5:3d:82:7e:ad:
c0:8a:3e:6c:12:ce:32:0f:cb:7f:2e:a7:ed:d9:1f:f2:48:93:
55:4c:80:ee:f1:97:d1:2f:e1:16:45:58:ac:97:26:ba:7e:0f:
e5:e0:04:af:27:74:38:1a:36:88:7c:d6:b6:9c:5d:27:f2:fb:
b4:a2:af:2d:41:6e:aa:aa:cc:b4:03:9d:6f:a4:9d:85:ec:b7:
3d:e8:50:6e:ff:ab:06:16:53:9e:8c:70:a0:30:63:2f:20:c0:
3a:29:c6:7a:7c:9c:48:a2:87:d0:00:70:53:a4:7e:98:98:00:
5b:58:b6:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASJdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDc0NTUzWhcNMjUxMjEwMDc0NTUzWjAYMRYw
FAYDVQQDEw02NzZhNjZiNC0xY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw7LywTZuvWj1PiYgFu1x1Ue01KKqLyK35diZJ7yAul0A/pUr/Z/Ikwe0
KszZs4GBVELKJysgiyPqZQ/181m5HRqZ+MgNyQ45+N8BJqckVZSEqFkc7y0hf2MH
SWlN+GcW48XMxhvanmcb4EgoU71G+ms7XaD19fjnm6PYjp3iK6bMxWMX+2jvmH/Q
hFq3uPwXK7lri7K5cfeoArZcjjE7KKfArU24/CmVMTVXF1nJni8jDOt1h1Xv32rs
y4PC6u8Ci/t/06nGUbcRgNt2p1NkaQ8PWG8LBiTSylHk8JnywU5+qVrqW4a2IiYS
F/z6AI8quqZnK+RDgOleb+u86urRlQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNOi
IsoDkhnYMp0jYYY3oKFq2CEiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQzFDMDBCQ0MxQ0IxMUVGQjVDNEE2NjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHOMA0GCSqGSIb3DQEB
CwUAA4IBAQC2ykzt3eD5Fz+4ThHr+hlgf4S99bg1/H+XwKFiQsi0N2lWh5thT5jd
ZAupIH0Qn8cAps3A0bnsh/oqJWYuykz5/mRC+ITAJ6HgDo6QkgqkOMTW3EpFtiFT
kFZsqLKOEEsG9furk86bo/184wVS+MrAwrMe6zJqsLr0FtRmbQXMU34KxyMWhyIm
Uz0TpT2Cfq3Aij5sEs4yD8t/Lqft2R/ySJNVTIDu8ZfRL+EWRVislya6fg/l4ASv
J3Q4GjaIfNa2nF0n8vu0oq8tQW6qqsy0A51vpJ2F7Lc96FBu/6sGFlOejHCgMGMv
IMA6KcZ6fJxIoofQAHBTpH6YmABbWLbQ
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:52:21 2025 by rpki-client