Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4EDA10C93811EFA374649C762E951A.roa
File: 1F4EDA10C93811EFA374649C762E951A.roa (raw, json)
Hash identifier: dM+1Q9tIO3EIk8pYadAm90mENtuE/YEJLC9E2sRpKWo=
Subject key identifier: 4D:F8:7C:08:73:26:EE:B4:24:2B:8C:28:02:75:76:E1:1F:A7:8B:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4EDA10C93811EFA374649C762E951A.roa
Signing time: Thu 02 Jan 2025 18:33:55 +0000
ROA not before: Thu 02 Jan 2025 18:33:52 +0000
ROA not after: Sat 13 Dec 2025 18:33:52 +0000
asID: 984
IP address blocks: 154.223.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78819 (0x133e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:33:52 2025 GMT
Not After : Dec 13 18:33:52 2025 GMT
Subject: CN=6776dc13-432a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:41:2c:66:b5:46:1c:b9:65:cf:66:99:13:
40:0b:97:5c:f9:0b:94:a1:b8:bf:67:17:d0:91:09:
93:e3:4e:90:52:21:0c:6a:47:9f:41:ff:6f:e9:c6:
3c:15:1f:c4:9c:84:76:e7:92:02:b9:5f:7f:c7:0b:
89:e3:f3:ae:7e:0b:79:b9:f7:f7:59:2a:59:dd:22:
99:10:56:e0:06:18:72:76:a5:8e:a7:68:07:f7:a1:
c3:c2:23:35:8c:24:5e:46:4e:99:b6:99:5c:19:74:
91:b7:a2:0a:9b:a6:7e:90:46:55:6b:0b:6c:6c:1c:
92:df:58:a1:5c:e0:99:1c:f5:cc:82:98:b3:4e:f7:
cf:b4:b6:99:15:ee:0e:73:d2:8d:f1:7e:4e:e8:b7:
dc:01:ea:19:1b:fc:76:e2:5b:ba:98:ef:36:9f:c4:
21:7d:05:86:ca:c4:bd:ed:e1:5a:ff:b1:fa:53:dc:
98:b1:b7:21:76:0b:4e:5e:e4:1a:a8:81:32:ee:bb:
bf:8a:d5:50:ac:4c:c8:ca:78:c7:6f:ee:15:68:0a:
67:d2:b1:29:61:08:34:56:52:91:1d:01:8b:f2:13:
3c:e6:69:10:5d:4b:6d:e9:23:8d:39:4d:6f:86:31:
8f:3b:e2:20:96:51:e9:17:2a:20:d6:19:fc:d7:78:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:7C:08:73:26:EE:B4:24:2B:8C:28:02:75:76:E1:1F:A7:8B:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F4EDA10C93811EFA374649C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.92.0/24
Signature Algorithm: sha256WithRSAEncryption
87:94:62:ee:43:bf:c3:50:d0:91:90:9f:35:3c:c0:df:03:fb:
a0:51:53:c2:16:ef:d1:18:2d:a0:4f:d5:1f:ba:b5:c5:11:97:
eb:26:22:9a:97:e9:a9:5e:cc:25:32:b5:d2:30:60:89:d8:c4:
ca:0a:df:e2:ad:30:5e:77:b1:38:c5:c3:ad:fd:64:3a:97:57:
44:57:d7:51:80:c8:e7:e5:43:ed:6d:5b:ad:52:77:ba:6b:6c:
7c:a3:92:c1:85:45:1f:c0:b5:04:19:27:e4:47:2a:43:4e:87:
cb:f6:a2:ea:8e:25:f0:9e:cf:c0:f7:83:b8:92:f2:fa:2e:eb:
ae:0a:8b:b8:c6:ee:70:fb:6f:98:80:9a:ef:95:08:99:5d:96:
4f:1b:c9:fc:ef:ce:eb:c1:cd:28:52:f2:86:fe:c8:10:61:a9:
70:3d:0c:f5:11:2e:c1:db:bb:4d:5b:95:67:74:fe:cd:d8:32:
26:31:39:a9:06:57:dd:a7:ac:81:a9:aa:b2:3c:b9:14:34:ff:
7c:70:d2:c5:9c:21:22:ae:36:f2:90:23:85:9e:7d:56:be:4e:
94:c4:c0:9e:03:98:c2:64:02:f4:de:04:0e:8e:90:51:20:c4:
e4:f0:db:51:9e:c3:fd:f3:c5:28:ac:42:42:46:d3:4b:cd:4f:
94:e1:25:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATPjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTgzMzUyWhcNMjUxMjEzMTgzMzUyWjAYMRYw
FAYDVQQDEw02Nzc2ZGMxMy00MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5ONBLGa1Rhy5Zc9mmRNAC5dc+QuUobi/ZxfQkQmT406QUiEMakefQf9v
6cY8FR/EnIR255ICuV9/xwuJ4/Oufgt5uff3WSpZ3SKZEFbgBhhydqWOp2gH96HD
wiM1jCReRk6ZtplcGXSRt6IKm6Z+kEZVawtsbByS31ihXOCZHPXMgpizTvfPtLaZ
Fe4Oc9KN8X5O6LfcAeoZG/x24lu6mO82n8QhfQWGysS97eFa/7H6U9yYsbchdgtO
XuQaqIEy7ru/itVQrEzIynjHb+4VaApn0rEpYQg0VlKRHQGL8hM85mkQXUtt6SON
OU1vhjGPO+IgllHpFyog1hn813jcZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE34
fAhzJu60JCuMKAJ1duEfp4suMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRjRFREExMEM5MzgxMUVGQTM3NDY0OUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt9cMA0GCSqGSIb3DQEB
CwUAA4IBAQCHlGLuQ7/DUNCRkJ81PMDfA/ugUVPCFu/RGC2gT9UfurXFEZfrJiKa
l+mpXswlMrXSMGCJ2MTKCt/irTBed7E4xcOt/WQ6l1dEV9dRgMjn5UPtbVutUne6
a2x8o5LBhUUfwLUEGSfkRypDTofL9qLqjiXwns/A94O4kvL6LuuuCou4xu5w+2+Y
gJrvlQiZXZZPG8n8787rwc0oUvKG/sgQYalwPQz1ES7B27tNW5VndP7N2DImMTmp
Blfdp6yBqaqyPLkUNP98cNLFnCEirjbykCOFnn1Wvk6UxMCeA5jCZAL03gQOjpBR
IMTk8NtRnsP988UorEJCRtNLzU+U4SWW
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:48 2025 by rpki-client