Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F499072C92D11EFA592075A762E951A.roa
File: 3F499072C92D11EFA592075A762E951A.roa (raw, json)
Hash identifier: /Qdkyty1boyZUhrxg4UqTMkoCyNuIlzZdgfuxh1PX+g=
Subject key identifier: 71:E1:84:24:D6:CC:11:14:89:E1:BE:1B:BC:4B:4A:F1:6A:09:8B:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01338D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F499072C92D11EFA592075A762E951A.roa
Signing time: Thu 02 Jan 2025 17:16:04 +0000
ROA not before: Thu 02 Jan 2025 17:16:01 +0000
ROA not after: Mon 13 Dec 2027 17:16:01 +0000
asID: 17561
IP address blocks: 154.222.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78733 (0x1338d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:16:01 2025 GMT
Not After : Dec 13 17:16:01 2027 GMT
Subject: CN=6776c9d4-08c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:3f:c3:97:01:7b:00:ff:1e:14:c4:df:8f:
88:09:61:38:4c:ef:9d:6d:0b:3f:b9:6d:18:5a:44:
f0:d8:da:de:b3:db:ec:76:b6:ec:67:63:65:4f:12:
42:3b:ed:71:be:91:c6:b2:2f:f1:2a:52:b4:da:98:
fc:52:de:d4:2a:33:3f:3e:8d:b6:3c:27:6d:f5:cf:
e1:bc:a8:dc:ca:d2:82:98:63:b0:94:58:bb:19:33:
e4:53:d2:6a:14:91:bf:0c:2d:98:eb:ab:27:fe:b2:
e5:da:06:7b:bf:e9:87:59:a9:9a:28:5e:38:75:46:
81:fb:ee:00:f9:9e:f2:a7:ed:99:9f:64:c2:ed:46:
ac:ba:0f:1f:08:19:56:84:5f:b2:c1:db:33:e0:fd:
a2:01:f8:eb:2d:9b:4e:b2:06:0d:83:78:2a:66:3b:
4f:2d:5c:82:f0:95:e1:d3:b0:ea:30:1b:2e:0d:27:
ee:ce:4f:b2:83:6c:08:49:d5:ee:b7:2b:aa:dc:d7:
ee:3f:49:49:e1:aa:09:90:d7:92:06:ec:b7:3f:ac:
d1:39:84:d1:2c:70:44:64:fb:5a:b6:ff:e2:0c:d5:
0b:a4:ef:ec:f5:55:4c:69:25:14:69:a2:dd:d3:cd:
57:bd:d2:69:04:b8:fe:56:57:70:6a:5e:72:17:ef:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:84:24:D6:CC:11:14:89:E1:BE:1B:BC:4B:4A:F1:6A:09:8B:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F499072C92D11EFA592075A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:39:4a:da:f1:64:06:3e:d6:60:f8:ee:1f:12:a2:a5:e4:c2:
55:03:d3:f1:61:a0:05:b2:eb:81:3c:00:1f:5d:86:da:47:1a:
ff:fa:d4:02:0f:47:92:5e:a5:ec:5d:18:80:a7:70:27:4e:84:
60:87:ac:05:70:6b:79:bd:9f:de:7d:4c:2d:b1:f2:83:47:01:
5b:7e:03:e0:0f:20:f0:8e:9a:a6:c9:31:db:ff:9d:0c:0c:21:
0c:05:1f:2d:46:87:fa:bf:49:00:c4:bb:9f:a7:44:18:fb:06:
9c:dd:75:3f:5d:c3:3e:d1:70:bb:f3:f6:7a:b2:e1:e7:56:4a:
a6:b7:4d:61:a9:a8:83:8b:c3:ff:98:64:46:a4:e2:26:b1:45:
46:c3:7c:74:2b:cd:70:67:f0:ac:64:e0:dc:25:47:45:2f:d3:
6f:2f:86:71:01:a7:e8:a1:8e:92:a0:37:73:0e:90:60:99:15:
40:ac:08:5c:c6:4a:21:1b:a7:bd:04:c3:e8:92:76:95:31:16:
f6:2c:f4:81:ed:55:89:9a:af:3c:ae:8d:ed:52:83:44:05:66:
ab:f1:85:2e:85:9d:ba:98:ee:cb:ae:25:b7:93:6b:fd:d1:e9:
ee:d8:c0:b1:42:99:53:00:53:56:fc:a6:da:79:24:08:69:0a:
38:b8:79:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATONMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTcxNjAxWhcNMjcxMjEzMTcxNjAxWjAYMRYw
FAYDVQQDEw02Nzc2YzlkNC0wOGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzwE/w5cBewD/HhTE34+ICWE4TO+dbQs/uW0YWkTw2Nres9vsdrbsZ2Nl
TxJCO+1xvpHGsi/xKlK02pj8Ut7UKjM/Po22PCdt9c/hvKjcytKCmGOwlFi7GTPk
U9JqFJG/DC2Y66sn/rLl2gZ7v+mHWamaKF44dUaB++4A+Z7yp+2Zn2TC7Uasug8f
CBlWhF+ywdsz4P2iAfjrLZtOsgYNg3gqZjtPLVyC8JXh07DqMBsuDSfuzk+yg2wI
SdXutyuq3NfuP0lJ4aoJkNeSBuy3P6zROYTRLHBEZPtatv/iDNULpO/s9VVMaSUU
aaLd081XvdJpBLj+Vldwal5yF++EHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHHh
hCTWzBEUieG+G7xLSvFqCYuAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRjQ5OTA3MkM5MkQxMUVGQTU5MjA3NUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6TMA0GCSqGSIb3DQEB
CwUAA4IBAQAdOUra8WQGPtZg+O4fEqKl5MJVA9PxYaAFsuuBPAAfXYbaRxr/+tQC
D0eSXqXsXRiAp3AnToRgh6wFcGt5vZ/efUwtsfKDRwFbfgPgDyDwjpqmyTHb/50M
DCEMBR8tRof6v0kAxLufp0QY+wac3XU/XcM+0XC78/Z6suHnVkqmt01hqaiDi8P/
mGRGpOImsUVGw3x0K81wZ/CsZODcJUdFL9NvL4ZxAafooY6SoDdzDpBgmRVArAhc
xkohG6e9BMPoknaVMRb2LPSB7VWJmq88ro3tUoNEBWar8YUuhZ26mO7LriW3k2v9
0enu2MCxQplTAFNW/KbaeSQIaQo4uHl0
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:35 2025 by rpki-client