Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EFDDDC2F68811EF839F697D762E951A.roa
File: 1EFDDDC2F68811EF839F697D762E951A.roa (raw, json)
Hash identifier: LLU23Jg2JaJtqx6oxtLYW3PY7J8tsgtuPMZDyQ5zcyQ=
Subject key identifier: 2D:CC:46:DF:7F:BF:BB:06:65:5C:74:89:7B:DB:19:FD:B2:13:48:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EFDDDC2F68811EF839F697D762E951A.roa
Signing time: Sat 01 Mar 2025 10:29:57 +0000
ROA not before: Sat 01 Mar 2025 10:29:53 +0000
ROA not after: Sat 05 Apr 2025 10:29:53 +0000
asID: 203020
IP address blocks: 154.208.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 10:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93650 (0x16dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 10:29:53 2025 GMT
Not After : Apr 5 10:29:53 2025 GMT
Subject: CN=67c2e1a5-36cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:72:37:a6:8b:0d:41:1c:4c:a0:9e:02:9d:
1f:a3:72:f0:e5:bc:00:1e:22:3c:bb:ee:4c:3f:bb:
19:53:a4:f4:5d:93:98:62:64:a4:46:99:09:66:3a:
dd:c9:05:d5:22:5f:81:fa:00:63:47:c8:5e:ad:da:
ed:86:cd:79:bb:37:cf:2e:ee:9b:d7:e8:11:04:95:
ad:ab:68:4d:b4:62:fe:bc:af:25:da:e6:df:4e:af:
f2:3e:8b:25:10:82:9d:fe:7e:98:56:97:73:8f:a7:
f9:36:f5:cb:97:14:66:b0:38:bd:20:e5:b1:c3:cb:
60:0f:e6:0f:23:e6:a3:ae:6b:e2:19:96:8a:9a:ee:
42:a0:42:e5:1e:2e:a6:c2:0b:fd:8a:46:28:02:6c:
bc:03:72:c6:04:38:6e:b0:e1:95:e6:04:d1:ed:ef:
d7:4d:46:8d:8e:12:82:d2:70:ee:27:e4:ef:c5:0f:
a7:be:4d:9d:32:0f:e5:a2:9d:f8:34:08:98:c8:56:
33:10:56:81:4d:3d:a5:4b:f8:f1:9e:fc:f3:c4:a2:
02:80:0f:52:9d:58:8f:48:6a:96:20:91:a2:ee:59:
47:e2:ea:f3:65:bd:9f:6e:a1:fd:c2:76:1d:45:cf:
e1:da:bd:14:37:ac:ed:96:7e:e7:bd:ca:47:8a:87:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CC:46:DF:7F:BF:BB:06:65:5C:74:89:7B:DB:19:FD:B2:13:48:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EFDDDC2F68811EF839F697D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.175.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fb:a3:a5:e1:c0:c9:f1:1c:d9:8d:8c:cc:6e:0c:e6:6d:21:
be:ac:cd:7a:64:92:60:be:65:dd:b8:91:6f:96:fd:7c:16:d4:
a1:28:65:1d:ee:60:bb:7f:a8:b7:a7:9b:e4:74:f3:cb:22:6b:
ba:2d:fb:d9:44:c5:2c:15:e0:6b:e0:c9:c8:de:53:01:25:25:
7c:03:ff:f0:35:25:62:db:49:60:78:b1:b4:f5:c1:87:68:34:
6a:96:50:46:ff:f4:91:aa:d2:0f:cb:c1:8d:a2:27:b0:cf:1f:
e0:2e:f0:f3:7c:b1:b4:b2:1e:ea:90:0e:b3:7d:ca:6b:ee:13:
2c:c2:d1:be:7e:d0:c8:9f:e6:e4:63:66:9a:c2:01:23:81:11:
65:33:5b:13:6a:c5:db:71:57:62:0c:1d:0e:c8:ca:c7:5e:19:
c3:e9:ab:15:63:da:00:16:97:92:ca:97:09:f0:1e:2e:df:65:
42:ff:bb:a5:a8:36:2b:61:a6:1e:dc:87:a4:c9:bd:ea:8c:64:
78:55:4d:69:2d:b2:9c:dd:98:b9:86:d2:44:ca:25:ae:53:87:
02:5d:72:18:21:d5:c6:5e:03:6a:26:e1:23:42:2f:5b:90:ec:
74:fe:93:bc:c0:3c:29:3b:bf:9b:3e:9e:ef:17:a0:ac:c1:07:
c4:68:c4:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW3SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTAyOTUzWhcNMjUwNDA1MTAyOTUzWjAYMRYw
FAYDVQQDEw02N2MyZTFhNS0zNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnbFyN6aLDUEcTKCeAp0fo3Lw5bwAHiI8u+5MP7sZU6T0XZOYYmSkRpkJ
ZjrdyQXVIl+B+gBjR8herdrths15uzfPLu6b1+gRBJWtq2hNtGL+vK8l2ubfTq/y
PoslEIKd/n6YVpdzj6f5NvXLlxRmsDi9IOWxw8tgD+YPI+ajrmviGZaKmu5CoELl
Hi6mwgv9ikYoAmy8A3LGBDhusOGV5gTR7e/XTUaNjhKC0nDuJ+TvxQ+nvk2dMg/l
op34NAiYyFYzEFaBTT2lS/jxnvzzxKICgA9SnViPSGqWIJGi7llH4urzZb2fbqH9
wnYdRc/h2r0UN6ztln7nvcpHioe2owIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC3M
Rt9/v7sGZVx0iXvbGf2yE0gkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRUZERERDMkY2ODgxMUVGODM5RjY5N0Q3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtCvMA0GCSqGSIb3DQEB
CwUAA4IBAQBl+6Ol4cDJ8RzZjYzMbgzmbSG+rM16ZJJgvmXduJFvlv18FtShKGUd
7mC7f6i3p5vkdPPLImu6LfvZRMUsFeBr4MnI3lMBJSV8A//wNSVi20lgeLG09cGH
aDRqllBG//SRqtIPy8GNoiewzx/gLvDzfLG0sh7qkA6zfcpr7hMswtG+ftDIn+bk
Y2aawgEjgRFlM1sTasXbcVdiDB0OyMrHXhnD6asVY9oAFpeSypcJ8B4u32VC/7ul
qDYrYaYe3Iekyb3qjGR4VU1pLbKc3Zi5htJEyiWuU4cCXXIYIdXGXgNqJuEjQi9b
kOx0/pO8wDwpO7+bPp7vF6CswQfEaMRc
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:14 2025 by rpki-client