Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35FA4346C0DF11EFBFCF3891762E951A.roa
File: 35FA4346C0DF11EFBFCF3891762E951A.roa (raw, json)
Hash identifier: 4zxa/5AwwdX/CWrtIJMc7dgSuVugDxIXe2etROvvarw=
Subject key identifier: CC:33:AF:2F:CB:D8:4C:A6:99:46:1E:DD:BD:76:0F:BE:4D:5C:77:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011ED4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35FA4346C0DF11EFBFCF3891762E951A.roa
Signing time: Mon 23 Dec 2024 03:37:19 +0000
ROA not before: Mon 23 Dec 2024 03:37:15 +0000
ROA not after: Wed 10 Dec 2025 03:37:15 +0000
asID: 984
IP address blocks: 154.89.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73428 (0x11ed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:37:15 2024 GMT
Not After : Dec 10 03:37:15 2025 GMT
Subject: CN=6768daef-6175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:ab:18:fe:f9:72:40:43:a3:40:9d:f0:93:
15:78:0c:92:7b:26:ad:4f:18:ba:fb:de:fa:ea:80:
89:64:ba:fc:be:3e:8e:9c:b6:a3:3f:b0:c7:b6:a8:
56:bc:3e:da:72:c1:70:a8:89:03:ca:6d:e3:99:3b:
5f:ee:05:f8:c4:1e:3f:f7:2a:76:0b:0c:1e:b2:db:
68:bf:84:70:c8:ae:f4:85:80:61:b2:fc:d0:bd:3b:
31:ed:39:bc:88:5f:49:a4:0a:55:8a:11:8e:b5:f8:
72:75:4b:bc:bf:e7:e8:e1:0c:d0:45:61:78:ee:d4:
35:d5:1c:8d:03:e6:e6:9d:f2:df:07:2d:e3:4b:11:
2f:65:b6:02:b4:da:9f:05:00:d8:e1:ce:15:fd:f2:
6e:06:d8:f2:59:86:a7:b2:b9:11:c2:7b:6e:99:33:
6d:cb:69:81:1c:da:cb:4a:9b:69:3a:87:b4:ee:1c:
8f:f5:ee:74:3e:ca:54:59:3c:ae:ca:5a:a3:6f:b0:
b9:44:99:1e:0a:90:2d:4c:38:5b:3d:b4:cf:3d:3a:
8b:39:eb:ae:1b:7d:af:a8:da:54:5b:ad:ff:c8:11:
27:33:a1:1f:ce:d3:a6:ac:a4:94:1f:ed:0b:02:57:
6a:2c:e2:ee:5e:b7:18:86:1f:f0:ba:1e:29:49:57:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:AF:2F:CB:D8:4C:A6:99:46:1E:DD:BD:76:0F:BE:4D:5C:77:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35FA4346C0DF11EFBFCF3891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.200.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:fd:9b:19:2d:3a:dc:05:c5:18:12:e0:02:bb:50:11:76:2e:
5f:43:d8:41:5c:a8:2b:29:cd:d9:4d:12:ad:36:eb:44:be:d1:
05:34:6c:94:25:08:6f:1e:3b:b8:26:9b:de:59:89:d2:b2:2f:
46:be:f5:bc:15:bc:4f:61:1d:06:c1:82:6f:46:6b:13:86:8d:
27:6b:84:d8:07:76:5a:d2:70:9d:6b:7e:7e:f7:33:a0:85:b3:
0a:92:20:5d:45:74:92:16:d0:f4:18:75:70:ed:71:5d:e9:ef:
6d:c1:0f:fe:74:78:4e:d6:75:44:b0:5c:79:ba:c1:60:25:45:
6b:d0:8b:89:cc:5f:3c:24:cf:28:49:85:e4:1a:98:c2:14:1b:
9e:81:18:5a:55:1e:c0:4d:fe:3d:77:41:7e:dc:28:8d:85:c2:
14:cb:d2:65:79:11:b3:aa:22:0a:11:4e:6f:5a:64:36:e1:d8:
f6:05:fe:49:06:03:a8:42:83:fe:60:60:a2:48:c8:92:5d:30:
54:e8:47:37:56:3a:1f:44:a2:79:4b:b1:38:2a:2b:bb:a0:4e:
f4:59:87:51:f7:5a:3a:e1:6b:3d:ea:48:a8:d0:43:cf:fa:7c:
05:0d:e8:ec:b8:94:be:32:71:cd:fb:ec:11:e2:fd:ec:74:89:
cf:b2:99:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR7UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDMzNzE1WhcNMjUxMjEwMDMzNzE1WjAYMRYw
FAYDVQQDEw02NzY4ZGFlZi02MTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAygOrGP75ckBDo0Cd8JMVeAySeyatTxi6+9766oCJZLr8vj6OnLajP7DH
tqhWvD7acsFwqIkDym3jmTtf7gX4xB4/9yp2Cwwesttov4RwyK70hYBhsvzQvTsx
7Tm8iF9JpApVihGOtfhydUu8v+fo4QzQRWF47tQ11RyNA+bmnfLfBy3jSxEvZbYC
tNqfBQDY4c4V/fJuBtjyWYansrkRwntumTNty2mBHNrLSptpOoe07hyP9e50PspU
WTyuylqjb7C5RJkeCpAtTDhbPbTPPTqLOeuuG32vqNpUW63/yBEnM6EfztOmrKSU
H+0LAldqLOLuXrcYhh/wuh4pSVfVNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMwz
ry/L2EymmUYe3b12D75NXHd8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNUZBNDM0NkMwREYxMUVGQkZDRjM4OTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnIMA0GCSqGSIb3DQEB
CwUAA4IBAQDU/ZsZLTrcBcUYEuACu1ARdi5fQ9hBXKgrKc3ZTRKtNutEvtEFNGyU
JQhvHju4JpveWYnSsi9GvvW8FbxPYR0GwYJvRmsTho0na4TYB3Za0nCda35+9zOg
hbMKkiBdRXSSFtD0GHVw7XFd6e9twQ/+dHhO1nVEsFx5usFgJUVr0IuJzF88JM8o
SYXkGpjCFBuegRhaVR7ATf49d0F+3CiNhcIUy9JleRGzqiIKEU5vWmQ24dj2Bf5J
BgOoQoP+YGCiSMiSXTBU6Ec3VjofRKJ5S7E4Kiu7oE70WYdR91o64Ws96kio0EPP
+nwFDejsuJS+MnHN++wR4v3sdInPspnF
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:34 2025 by rpki-client