Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF1E9E4C90911EF93ACE675762E951A.roa
File: 1CF1E9E4C90911EF93ACE675762E951A.roa (raw, json)
Hash identifier: HgypFBlegwEjNnEB8xZhuzlWCqatpso9IQ6lEBQwJOE=
Subject key identifier: 55:39:D6:17:C6:33:CD:28:B8:DD:30:F2:E8:B6:C8:FD:07:61:A2:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013283
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF1E9E4C90911EF93ACE675762E951A.roa
Signing time: Thu 02 Jan 2025 12:57:25 +0000
ROA not before: Thu 02 Jan 2025 12:57:21 +0000
ROA not after: Mon 13 Dec 2027 12:57:21 +0000
asID: 17561
IP address blocks: 154.221.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78467 (0x13283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 12:57:21 2025 GMT
Not After : Dec 13 12:57:21 2027 GMT
Subject: CN=67768d35-fe15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:58:27:38:c8:b8:92:70:88:75:d9:5f:10:
bd:d7:71:41:19:84:62:2d:4c:5d:02:e9:57:3e:59:
fd:ae:8f:36:36:a1:b2:4c:1a:05:ff:55:75:6b:5a:
47:44:c8:66:b5:20:d4:35:1d:19:09:cb:6d:39:f2:
ce:e2:62:90:68:ac:8e:15:30:02:03:9a:6a:30:4e:
4c:73:cf:07:20:36:cf:72:52:81:b9:d1:e0:a7:fc:
66:25:fb:18:22:0f:f5:6c:b8:fa:ff:cc:d6:c9:02:
7b:dd:ee:56:c5:2a:45:95:41:44:08:98:ca:80:00:
40:fe:82:d0:d3:45:62:e2:e3:ad:b1:20:93:d6:e3:
bb:57:55:0f:be:45:63:3c:2a:eb:16:60:ee:db:db:
95:42:c5:3f:fe:68:9e:c6:7b:c0:05:e6:90:0c:82:
b0:f5:a4:bf:71:5a:83:7f:ef:96:09:4d:c2:69:69:
c8:02:af:d7:1c:46:f7:76:d0:13:b4:92:14:1c:7e:
38:5f:63:71:88:d5:8c:7a:4f:1f:66:8a:68:18:38:
49:fd:c2:ba:03:50:4b:21:e7:db:51:df:43:f4:e5:
d8:6b:e6:8d:54:fe:be:4d:b4:d2:c3:b4:a5:f2:19:
fe:f2:0c:23:66:d7:31:01:3b:b3:31:12:b4:13:f1:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:D6:17:C6:33:CD:28:B8:DD:30:F2:E8:B6:C8:FD:07:61:A2:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CF1E9E4C90911EF93ACE675762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:29:78:e5:80:3f:33:2f:b6:9e:57:44:a9:56:21:db:4c:dc:
0a:f5:2f:37:cc:24:ad:e1:cf:69:66:1e:0a:67:0f:f2:89:24:
c4:c6:03:95:ae:f4:4b:90:df:64:b6:94:3c:89:bf:6b:9a:bf:
3c:9e:6d:13:c0:60:6a:1e:3c:e3:9f:3b:bf:88:75:04:5d:b7:
aa:2c:54:aa:31:e9:12:1f:fd:e1:48:20:1c:00:49:f6:bd:b8:
55:e0:89:32:db:6b:ef:dd:98:d5:5b:67:bb:a9:0b:65:ff:08:
b7:ab:f3:3a:4f:3b:ea:91:2d:40:29:72:df:c9:97:72:ac:11:
76:ae:ff:2c:af:8f:d4:88:18:80:0e:b5:b0:81:79:9e:33:8b:
54:87:e8:1c:14:80:b9:24:01:55:95:4e:57:9d:7a:19:49:76:
96:3d:02:c8:c2:00:43:61:64:80:a6:45:40:35:f7:6a:01:6d:
4f:6f:63:7f:3d:19:11:ec:29:d7:e2:41:1a:36:d2:8a:02:90:
98:6d:25:bf:8b:35:5c:68:b8:c9:62:8f:85:53:4f:7f:1b:ac:
3e:32:5e:cf:b0:2c:02:e0:6e:56:f2:d5:22:e0:34:46:35:c9:
79:34:af:d5:cd:6d:83:12:93:13:a9:1e:ae:27:43:e3:08:0b:
b8:d4:72:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATKDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTI1NzIxWhcNMjcxMjEzMTI1NzIxWjAYMRYw
FAYDVQQDEw02Nzc2OGQzNS1mZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwL5YJzjIuJJwiHXZXxC913FBGYRiLUxdAulXPln9ro82NqGyTBoF/1V1
a1pHRMhmtSDUNR0ZCcttOfLO4mKQaKyOFTACA5pqME5Mc88HIDbPclKBudHgp/xm
JfsYIg/1bLj6/8zWyQJ73e5WxSpFlUFECJjKgABA/oLQ00Vi4uOtsSCT1uO7V1UP
vkVjPCrrFmDu29uVQsU//miexnvABeaQDIKw9aS/cVqDf++WCU3CaWnIAq/XHEb3
dtATtJIUHH44X2NxiNWMek8fZopoGDhJ/cK6A1BLIefbUd9D9OXYa+aNVP6+TbTS
w7Sl8hn+8gwjZtcxATuzMRK0E/FMSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFU5
1hfGM80ouN0w8ui2yP0HYaJVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQ0YxRTlFNEM5MDkxMUVGOTNBQ0U2NzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3OMA0GCSqGSIb3DQEB
CwUAA4IBAQAcKXjlgD8zL7aeV0SpViHbTNwK9S83zCSt4c9pZh4KZw/yiSTExgOV
rvRLkN9ktpQ8ib9rmr88nm0TwGBqHjzjnzu/iHUEXbeqLFSqMekSH/3hSCAcAEn2
vbhV4Iky22vv3ZjVW2e7qQtl/wi3q/M6TzvqkS1AKXLfyZdyrBF2rv8sr4/UiBiA
DrWwgXmeM4tUh+gcFIC5JAFVlU5XnXoZSXaWPQLIwgBDYWSApkVANfdqAW1Pb2N/
PRkR7CnX4kEaNtKKApCYbSW/izVcaLjJYo+FU09/G6w+Ml7PsCwC4G5W8tUi4DRG
Ncl5NK/VzW2DEpMTqR6uJ0PjCAu41HJD
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:49 2025 by rpki-client