Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34988836F15011EFA8BD11B3762E951A.roa
File: 34988836F15011EFA8BD11B3762E951A.roa (raw, json)
Hash identifier: jyo7+dvQ2Mr7I0lemlcqsHQlIhJIBnSkskkiaI5NKts=
Subject key identifier: 4A:EA:07:46:29:5B:2E:2B:94:F7:C3:2B:5A:FD:F8:82:D9:65:82:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015A2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34988836F15011EFA8BD11B3762E951A.roa
Signing time: Sat 22 Feb 2025 19:07:05 +0000
ROA not before: Sat 22 Feb 2025 19:07:02 +0000
ROA not after: Tue 17 Feb 2026 19:07:02 +0000
asID: 262191
IP address blocks: 154.197.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88618 (0x15a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 22 19:07:02 2025 GMT
Not After : Feb 17 19:07:02 2026 GMT
Subject: CN=67ba2059-c2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:3b:ed:e8:38:86:f4:e9:de:88:00:3e:97:
99:2c:22:6b:28:6c:55:c3:0e:cf:31:5f:97:34:1e:
a4:ed:69:08:5f:3c:62:d0:27:f1:34:05:16:21:ec:
e8:f2:46:e7:c9:11:ad:7c:b8:1f:e4:24:1f:16:34:
25:6e:f2:ba:cb:3b:30:bb:58:90:68:f5:8f:59:57:
df:be:f1:7b:73:44:4b:1f:a4:15:96:32:9e:cc:3a:
e1:cc:1a:0a:33:1e:53:86:65:6c:96:c6:76:3e:4a:
f6:24:60:b9:bc:b3:a8:1b:35:c1:66:78:12:21:9a:
26:58:16:10:1a:aa:fa:36:3c:fd:b7:7c:95:3c:56:
82:a8:2c:72:87:b3:24:d3:9c:70:41:6b:0d:cd:64:
98:1e:0b:fc:ba:3c:79:bb:bd:39:23:3b:63:36:07:
21:d1:49:0a:92:ec:62:69:9e:60:9f:24:8b:bc:e9:
ba:94:8a:e3:ba:25:cc:6e:22:bb:38:f9:83:e2:8d:
43:80:54:cd:5a:01:ec:3f:59:65:e5:13:4f:71:d2:
d4:fe:f1:e6:cd:68:d0:c3:69:d3:a3:00:5e:ef:fc:
ca:1d:f5:e3:dc:13:6f:98:35:d4:40:34:ce:c2:75:
51:ea:1c:43:d7:df:76:93:4d:f7:b6:2b:00:98:ab:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EA:07:46:29:5B:2E:2B:94:F7:C3:2B:5A:FD:F8:82:D9:65:82:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34988836F15011EFA8BD11B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:c9:f7:81:ec:9a:d5:d1:ac:cd:06:91:d3:b7:7d:bc:81:3c:
7b:a1:3e:55:23:c2:77:87:6e:48:b3:0c:5a:36:6f:c4:25:55:
06:a8:d4:9c:41:a5:29:8c:08:a0:77:2b:17:68:ff:cf:8f:71:
ba:8c:ff:fb:4b:d1:a7:f7:7f:45:ab:7f:a1:a4:4c:5f:f9:b4:
a7:5d:0e:ea:8a:a1:8d:1e:01:00:ff:97:93:07:ec:10:2c:66:
5d:53:e9:d7:d2:6f:21:4b:c1:d6:67:c5:1a:a4:e5:c6:a5:3e:
fc:b6:4a:2a:47:d7:c0:a0:29:ae:91:29:e9:45:f2:05:be:89:
24:c1:c9:da:d2:24:20:2f:76:08:ac:62:02:d8:f0:27:9c:fb:
c4:bc:9a:f0:a5:a4:6b:cd:a0:38:15:17:98:5a:d1:1c:4c:7b:
26:c0:bd:03:42:96:2d:c6:3a:11:12:9a:92:ac:15:ff:56:f0:
3f:95:fc:3d:fa:45:8c:11:2a:4e:9c:1a:af:58:07:bd:bf:86:
ed:c0:32:12:b1:a5:86:1e:0c:c0:ac:0e:d4:ef:f1:91:45:97:
0d:c0:8b:87:d6:87:47:07:3e:d4:b5:9e:4d:6e:cc:26:75:48:
06:a5:0f:9a:43:98:a8:83:3f:ee:e5:5c:0d:e7:7c:49:32:a4:
b3:7b:6d:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVoqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjIyMTkwNzAyWhcNMjYwMjE3MTkwNzAyWjAYMRYw
FAYDVQQDEw02N2JhMjA1OS1jMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2W877eg4hvTp3ogAPpeZLCJrKGxVww7PMV+XNB6k7WkIXzxi0CfxNAUW
Iezo8kbnyRGtfLgf5CQfFjQlbvK6yzswu1iQaPWPWVffvvF7c0RLH6QVljKezDrh
zBoKMx5ThmVslsZ2Pkr2JGC5vLOoGzXBZngSIZomWBYQGqr6Njz9t3yVPFaCqCxy
h7Mk05xwQWsNzWSYHgv8ujx5u705IztjNgch0UkKkuxiaZ5gnySLvOm6lIrjuiXM
biK7OPmD4o1DgFTNWgHsP1ll5RNPcdLU/vHmzWjQw2nTowBe7/zKHfXj3BNvmDXU
QDTOwnVR6hxD1992k033tisAmKu9UwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFErq
B0YpWy4rlPfDK1r9+ILZZYKJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDk4ODgzNkYxNTAxMUVGQThCRDExQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsUiMA0GCSqGSIb3DQEB
CwUAA4IBAQBvyfeB7JrV0azNBpHTt328gTx7oT5VI8J3h25IswxaNm/EJVUGqNSc
QaUpjAigdysXaP/Pj3G6jP/7S9Gn939Fq3+hpExf+bSnXQ7qiqGNHgEA/5eTB+wQ
LGZdU+nX0m8hS8HWZ8UapOXGpT78tkoqR9fAoCmukSnpRfIFvokkwcna0iQgL3YI
rGIC2PAnnPvEvJrwpaRrzaA4FReYWtEcTHsmwL0DQpYtxjoREpqSrBX/VvA/lfw9
+kWMESpOnBqvWAe9v4btwDISsaWGHgzArA7U7/GRRZcNwIuH1odHBz7UtZ5Nbswm
dUgGpQ+aQ5iogz/u5VwN53xJMqSze20u
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:18:37 2025 by rpki-client