Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339C0BD8F3F311EF869C57B3762E951A.roa
File: 339C0BD8F3F311EF869C57B3762E951A.roa (raw, json)
Hash identifier: BWDfTNpkVY+GyFSMpK+ODCAmMZYMVwS0pL/CaKkuKrk=
Subject key identifier: 20:48:0C:8A:23:34:5E:EA:70:8A:DC:F1:81:F6:E7:5A:EA:EE:78:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339C0BD8F3F311EF869C57B3762E951A.roa
Signing time: Wed 26 Feb 2025 03:38:54 +0000
ROA not before: Wed 26 Feb 2025 03:38:50 +0000
ROA not after: Thu 19 Feb 2026 03:38:50 +0000
asID: 984
IP address blocks: 154.203.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90287 (0x160af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:38:50 2025 GMT
Not After : Feb 19 03:38:50 2026 GMT
Subject: CN=67be8cce-19ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:17:81:6d:52:8f:18:0b:07:01:45:77:47:
01:3d:60:4c:f5:73:71:16:be:33:00:1e:bc:c1:db:
5c:40:74:6c:4d:a5:6d:89:b5:0e:60:86:f5:9a:b4:
16:d1:84:64:5b:1f:8f:aa:4c:fb:6a:e5:0d:a8:a0:
94:d0:49:ad:76:81:65:41:be:c7:cf:34:29:6d:e7:
50:12:a7:c8:25:1d:e8:ca:ac:87:4c:0c:82:d2:15:
4f:ad:7d:15:ae:d2:ea:84:31:ff:f3:f2:5f:2e:e0:
b5:0b:a2:18:1d:06:2f:67:d4:ff:93:a1:c0:c4:fc:
fb:9b:47:b6:28:89:63:1a:3b:32:5f:74:1f:a5:3b:
53:f2:1e:c1:ad:d7:75:34:55:d2:2f:e7:29:88:ca:
a0:8a:0b:3b:51:b3:d1:1a:6d:11:77:0d:74:12:ac:
82:fe:d8:d0:b9:b7:14:3b:0a:93:76:6e:1d:60:15:
db:a6:f4:24:30:bc:59:c9:ec:4e:64:c0:f5:ad:72:
1b:95:c8:d1:86:80:76:40:10:e2:1a:84:a0:b8:29:
65:db:5b:d2:77:d4:7d:66:4f:38:e7:8c:37:1d:33:
b7:48:c5:15:da:69:eb:ad:af:59:0a:b8:ca:b4:05:
8d:a1:e2:16:80:d2:0f:17:f9:f5:e8:41:a8:cf:a2:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:0C:8A:23:34:5E:EA:70:8A:DC:F1:81:F6:E7:5A:EA:EE:78:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339C0BD8F3F311EF869C57B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:af:59:5f:b1:3c:4c:2d:84:cd:d5:7b:24:c5:ee:4e:ef:4b:
38:5e:e4:42:24:fe:2c:03:16:64:53:e6:e7:32:78:57:26:97:
56:87:d4:73:a9:00:a6:92:2e:67:a1:ae:e9:59:58:03:6b:61:
76:90:dc:3d:8c:26:55:11:3f:cd:a7:f1:8d:ea:38:7f:2c:db:
af:a9:f0:fa:f5:e9:a5:7f:49:ba:05:d3:b3:a4:e9:2c:3f:52:
4e:2a:b2:b0:6d:06:20:c2:6a:5b:c9:1e:9c:c0:ea:33:ed:de:
47:e6:00:72:f3:d8:9f:68:9f:c5:11:a4:b9:3f:34:95:42:21:
17:63:cb:18:1b:d0:07:a6:74:73:bf:94:92:16:d5:44:29:e6:
ed:c1:dd:1f:f5:52:78:75:8b:fc:4a:41:d8:f5:7c:1d:b0:32:
47:94:56:9d:ac:16:d4:da:25:dd:4d:ef:f2:fe:77:96:0d:7e:
c9:61:2a:f2:36:70:84:5e:e5:39:e9:77:66:2c:c4:bd:a7:d2:
0e:fe:0e:45:48:46:8b:e4:ef:8c:f0:d8:36:73:c5:36:17:18:
4a:2f:c3:b7:7c:f2:1b:54:04:c5:80:eb:c7:d0:32:38:f4:28:
69:4b:e1:3d:5d:e5:33:08:3b:30:c8:ca:21:00:3d:08:0b:2b:
df:dd:3d:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWCvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDMzODUwWhcNMjYwMjE5MDMzODUwWjAYMRYw
FAYDVQQDEw02N2JlOGNjZS0xOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1YYXgW1SjxgLBwFFd0cBPWBM9XNxFr4zAB68wdtcQHRsTaVtibUOYIb1
mrQW0YRkWx+Pqkz7auUNqKCU0EmtdoFlQb7HzzQpbedQEqfIJR3oyqyHTAyC0hVP
rX0VrtLqhDH/8/JfLuC1C6IYHQYvZ9T/k6HAxPz7m0e2KIljGjsyX3QfpTtT8h7B
rdd1NFXSL+cpiMqgigs7UbPRGm0Rdw10EqyC/tjQubcUOwqTdm4dYBXbpvQkMLxZ
yexOZMD1rXIblcjRhoB2QBDiGoSguCll21vSd9R9Zk8454w3HTO3SMUV2mnrra9Z
CrjKtAWNoeIWgNIPF/n16EGoz6JMBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCBI
DIojNF7qcIrc8YH251rq7ngGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMzlDMEJEOEYzRjMxMUVGODY5QzU3QjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmstvMA0GCSqGSIb3DQEB
CwUAA4IBAQA8r1lfsTxMLYTN1Xskxe5O70s4XuRCJP4sAxZkU+bnMnhXJpdWh9Rz
qQCmki5noa7pWVgDa2F2kNw9jCZVET/Np/GN6jh/LNuvqfD69emlf0m6BdOzpOks
P1JOKrKwbQYgwmpbyR6cwOoz7d5H5gBy89ifaJ/FEaS5PzSVQiEXY8sYG9AHpnRz
v5SSFtVEKebtwd0f9VJ4dYv8SkHY9XwdsDJHlFadrBbU2iXdTe/y/neWDX7JYSry
NnCEXuU56XdmLMS9p9IO/g5FSEaL5O+M8Ng2c8U2FxhKL8O3fPIbVATFgOvH0DI4
9ChpS+E9XeUzCDswyMohAD0ICyvf3T2s
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:16 2025 by rpki-client