Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C60328F47911EFBBFA3256762E951A.roa
File: 22C60328F47911EFBBFA3256762E951A.roa (raw, json)
Hash identifier: WlPLWGVgzyT/+1E6lwEwMX3YY8bJpe9qimt+Lhg11Uc=
Subject key identifier: D3:9D:B8:27:A7:B4:8C:A0:4C:1A:8B:F6:54:0E:9F:FB:9D:71:FA:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C60328F47911EFBBFA3256762E951A.roa
Signing time: Wed 26 Feb 2025 19:37:38 +0000
ROA not before: Wed 26 Feb 2025 19:37:35 +0000
ROA not after: Sat 19 Feb 2028 19:37:35 +0000
asID: 17561
IP address blocks: 154.94.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91569 (0x165b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:37:35 2025 GMT
Not After : Feb 19 19:37:35 2028 GMT
Subject: CN=67bf6d82-1d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:f9:12:83:84:e3:bd:e9:4f:5c:b7:9f:87:
80:1a:f6:56:b5:5a:e5:05:2c:1e:c5:91:f7:23:b6:
56:5c:48:98:15:f9:00:68:9f:05:bb:e9:6d:df:2a:
e4:3c:b7:95:cf:31:dc:cd:92:3f:ba:c0:00:e5:d7:
d5:bb:3c:60:0c:e2:23:42:fc:4e:00:9c:0c:87:d4:
d2:d3:cd:75:46:a0:67:f9:e7:40:9a:c0:9e:74:41:
0f:d9:25:ad:58:0a:5c:fe:9b:74:ea:b4:0b:8f:34:
06:9a:a8:19:6f:f7:4d:5d:80:6b:17:b4:3b:cd:32:
70:e0:b4:3b:48:18:85:d9:92:a5:9c:bd:87:ac:97:
b4:37:60:98:d4:6c:8b:a7:d2:7d:cc:51:b5:e8:0b:
e5:be:1f:93:ca:4a:36:04:e6:ab:cd:1f:4d:7b:e1:
69:71:f2:13:c5:04:e0:15:af:ac:41:da:15:f2:40:
51:53:b5:f8:18:8d:e5:66:8b:3c:7c:9e:ac:9a:ec:
61:e7:d1:ab:be:07:61:3f:76:0b:9c:a4:f1:6f:11:
7d:b8:7c:e4:4c:4d:06:d1:37:70:c1:45:6e:69:50:
5c:8c:58:95:51:b3:f3:a8:5b:8d:d7:5f:27:60:42:
38:29:a3:dd:18:07:93:9d:09:e6:20:1d:23:5c:62:
36:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9D:B8:27:A7:B4:8C:A0:4C:1A:8B:F6:54:0E:9F:FB:9D:71:FA:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22C60328F47911EFBBFA3256762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.2.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b6:20:39:a1:66:86:95:32:35:74:ed:aa:28:66:13:43:3e:
5c:bf:a8:66:98:7c:3d:66:4f:e4:32:cc:fe:25:b0:b8:25:a5:
c7:7e:da:68:64:4f:fb:e3:9a:e5:09:b8:21:2f:9e:6f:26:ac:
44:94:96:be:14:12:78:6e:73:57:8f:c3:47:75:99:aa:8b:67:
5a:aa:f1:75:2b:56:9b:47:9d:65:64:46:61:10:0b:90:e8:9b:
21:e9:b8:74:4c:8d:fd:2f:6e:f8:38:aa:2b:fb:f0:74:c7:96:
52:93:a1:5c:23:b3:07:9d:63:f7:1e:79:82:ba:6b:6b:08:d3:
e1:7d:b7:ab:1c:22:f1:d8:9b:ed:38:f0:ff:27:2f:2a:89:54:
5e:1a:07:66:9d:5b:e8:18:b9:13:be:bc:39:a1:13:7a:ec:14:
bd:b8:47:a3:b8:58:83:95:a3:a6:a5:26:05:20:08:bc:4c:5a:
1d:3f:07:3e:6b:6e:44:9c:26:cf:ce:2c:c2:e8:93:0a:47:bd:
4d:c5:a2:d0:7f:82:61:f2:f9:c5:4a:7a:e1:6a:9a:8b:fb:6b:
d7:86:12:bc:9b:66:2d:dd:e9:79:4f:f4:b4:bc:4d:d0:64:f0:
b2:df:40:6c:e6:3e:f2:7d:4a:e3:d0:f1:61:11:80:30:9a:bb:
58:8c:b2:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWWxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTkzNzM1WhcNMjgwMjE5MTkzNzM1WjAYMRYw
FAYDVQQDEw02N2JmNmQ4Mi0xZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5db5EoOE473pT1y3n4eAGvZWtVrlBSwexZH3I7ZWXEiYFfkAaJ8Fu+lt
3yrkPLeVzzHczZI/usAA5dfVuzxgDOIjQvxOAJwMh9TS0811RqBn+edAmsCedEEP
2SWtWApc/pt06rQLjzQGmqgZb/dNXYBrF7Q7zTJw4LQ7SBiF2ZKlnL2HrJe0N2CY
1GyLp9J9zFG16Avlvh+Tyko2BOarzR9Ne+FpcfITxQTgFa+sQdoV8kBRU7X4GI3l
Zos8fJ6smuxh59GrvgdhP3YLnKTxbxF9uHzkTE0G0TdwwUVuaVBcjFiVUbPzqFuN
118nYEI4KaPdGAeTnQnmIB0jXGI28QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNOd
uCentIygTBqL9lQOn/udcfpoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMkM2MDMyOEY0NzkxMUVGQkJGQTMyNTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4CMA0GCSqGSIb3DQEB
CwUAA4IBAQCStiA5oWaGlTI1dO2qKGYTQz5cv6hmmHw9Zk/kMsz+JbC4JaXHftpo
ZE/745rlCbghL55vJqxElJa+FBJ4bnNXj8NHdZmqi2daqvF1K1abR51lZEZhEAuQ
6Jsh6bh0TI39L274OKor+/B0x5ZSk6FcI7MHnWP3HnmCumtrCNPhfberHCLx2Jvt
OPD/Jy8qiVReGgdmnVvoGLkTvrw5oRN67BS9uEejuFiDlaOmpSYFIAi8TFodPwc+
a25EnCbPzizC6JMKR71NxaLQf4Jh8vnFSnrhapqL+2vXhhK8m2Yt3el5T/S0vE3Q
ZPCy30Bs5j7yfUrj0PFhEYAwmrtYjLIa
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:51 2025 by rpki-client