Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C75442AF81911EF8198769D762E951A.roa
File: 3C75442AF81911EF8198769D762E951A.roa (raw, json)
Hash identifier: Ylls6wSGxozseCzjsY3Bpc4kN35HuECml4q1xQTn7jU=
Subject key identifier: CD:70:62:C2:C8:FC:B4:C2:6F:73:01:6B:2F:DB:77:94:25:00:72:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01700A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C75442AF81911EF8198769D762E951A.roa
Signing time: Mon 03 Mar 2025 10:21:14 +0000
ROA not before: Mon 03 Mar 2025 10:21:10 +0000
ROA not after: Wed 30 Apr 2025 10:21:10 +0000
asID: 140666
IP address blocks: 154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94218 (0x1700a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:21:10 2025 GMT
Not After : Apr 30 10:21:10 2025 GMT
Subject: CN=67c5829a-5fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f8:0c:56:52:a7:69:5a:d3:b3:c2:6b:8a:a7:
65:89:80:18:c3:46:97:7c:95:59:62:40:7c:1a:a8:
19:ad:23:59:29:46:80:21:98:ae:79:74:81:80:e8:
7c:a4:82:ff:94:32:47:51:02:5a:30:b5:87:45:38:
e7:c4:7e:ac:42:e9:8c:36:4c:3e:c2:74:56:6d:b8:
8a:33:10:9a:5e:ca:d5:b9:07:df:a3:d4:b1:d1:86:
1b:4d:6d:0a:37:7d:75:5c:cb:96:d7:0b:d1:e9:d6:
a6:df:e0:15:eb:c5:ec:79:86:dc:c8:15:2f:93:86:
ee:5a:36:c2:c3:29:85:ef:9c:38:b5:4f:40:1c:bc:
2b:df:72:5d:6d:8a:98:f2:95:3a:26:c1:3b:92:94:
58:f1:e8:e5:b6:5d:5e:77:62:cb:08:cc:4a:b4:6a:
26:d0:1f:16:b4:07:2a:e2:0c:13:cf:85:4a:66:4a:
a1:8d:52:f7:4c:d4:49:8a:36:f0:40:63:ba:a1:18:
19:73:34:af:60:0e:72:29:dc:77:bb:88:e0:ad:e0:
b2:9c:ac:00:7a:11:56:3f:71:45:2b:76:32:66:c2:
ac:18:8a:d1:d7:21:93:14:11:4a:01:76:68:70:3b:
70:63:6e:8f:d4:c6:4c:14:29:e2:73:f4:58:ae:20:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:62:C2:C8:FC:B4:C2:6F:73:01:6B:2F:DB:77:94:25:00:72:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C75442AF81911EF8198769D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
03:aa:95:8b:b8:ec:21:6d:22:e8:9b:af:22:fd:e1:ac:cd:6c:
7f:fe:0c:8c:0e:67:4c:fc:aa:c9:02:a8:27:66:e8:5a:da:a9:
db:01:99:1f:9c:b5:36:22:64:10:7c:85:6b:64:ca:b5:e5:11:
ba:4d:e1:35:a0:fa:09:9e:13:23:92:20:8e:b5:1e:1b:33:86:
a0:75:1b:d4:3e:42:5b:e5:5c:23:cb:ab:ef:92:b7:a4:8d:a8:
17:dd:dd:ac:72:36:a4:48:50:04:76:4c:ae:af:d1:07:ad:59:
00:d4:56:8a:95:6f:b3:13:ba:e2:41:76:8c:b4:a3:ce:2c:68:
bb:ee:13:29:9b:14:6c:8c:1e:1d:4b:15:af:af:c3:4c:5c:06:
55:d5:aa:11:bf:c1:20:93:20:70:e0:66:a4:b5:29:63:ed:0a:
c3:ea:39:9f:0c:84:6d:bb:56:f6:21:cb:b2:bc:05:eb:f6:9c:
8e:d1:8c:d3:34:ed:8c:7b:06:b6:48:05:67:92:e1:73:39:51:
44:73:99:34:9b:fd:e4:21:4b:ff:44:c0:a3:9a:b8:e0:30:cb:
06:d3:64:b8:81:1f:44:66:39:5f:cd:b9:2f:fa:41:0c:85:c8:
e0:02:49:8e:e1:7a:a0:98:ee:8e:09:75:da:cf:50:ed:2a:64:
e1:39:f1:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXAKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTAyMTEwWhcNMjUwNDMwMTAyMTEwWjAYMRYw
FAYDVQQDEw02N2M1ODI5YS01ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7vgMVlKnaVrTs8JriqdliYAYw0aXfJVZYkB8GqgZrSNZKUaAIZiueXSB
gOh8pIL/lDJHUQJaMLWHRTjnxH6sQumMNkw+wnRWbbiKMxCaXsrVuQffo9Sx0YYb
TW0KN311XMuW1wvR6dam3+AV68XseYbcyBUvk4buWjbCwymF75w4tU9AHLwr33Jd
bYqY8pU6JsE7kpRY8ejltl1ed2LLCMxKtGom0B8WtAcq4gwTz4VKZkqhjVL3TNRJ
ijbwQGO6oRgZczSvYA5yKdx3u4jgreCynKwAehFWP3FFK3YyZsKsGIrR1yGTFBFK
AXZocDtwY26P1MZMFCnic/RYriCRSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM1w
YsLI/LTCb3MBay/bd5QlAHKoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQzc1NDQyQUY4MTkxMUVGODE5ODc2OUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5EMA0GCSqGSIb3DQEB
CwUAA4IBAQADqpWLuOwhbSLom68i/eGszWx//gyMDmdM/KrJAqgnZuha2qnbAZkf
nLU2ImQQfIVrZMq15RG6TeE1oPoJnhMjkiCOtR4bM4agdRvUPkJb5Vwjy6vvkrek
jagX3d2scjakSFAEdkyur9EHrVkA1FaKlW+zE7riQXaMtKPOLGi77hMpmxRsjB4d
SxWvr8NMXAZV1aoRv8EgkyBw4GaktSlj7QrD6jmfDIRtu1b2IcuyvAXr9pyO0YzT
NO2Mewa2SAVnkuFzOVFEc5k0m/3kIUv/RMCjmrjgMMsG02S4gR9EZjlfzbkv+kEM
hcjgAkmO4XqgmO6OCXXaz1DtKmThOfF5
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:18 2025 by rpki-client