Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4543F172F3DD11EFA2F24C8C762E951A.roa
File: 4543F172F3DD11EFA2F24C8C762E951A.roa (raw, json)
Hash identifier: X5zaTXjus7CK7miX+jiTd1LNyE6F0O26w3TfDyQ2bLs=
Subject key identifier: 81:A1:27:7C:96:FF:B2:FC:3F:05:12:FC:E2:82:AA:5D:7C:D5:AF:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016055
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4543F172F3DD11EFA2F24C8C762E951A.roa
Signing time: Wed 26 Feb 2025 01:01:55 +0000
ROA not before: Wed 26 Feb 2025 01:01:51 +0000
ROA not after: Thu 19 Feb 2026 01:01:51 +0000
asID: 984
IP address blocks: 154.92.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90197 (0x16055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:01:51 2025 GMT
Not After : Feb 19 01:01:51 2026 GMT
Subject: CN=67be6803-f662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:68:73:80:4e:c7:dd:79:8c:d4:17:32:20:
a3:7f:5f:1f:ec:e1:4a:42:20:79:3b:32:d3:ff:ad:
62:42:09:fc:5c:69:f7:2e:e5:50:5b:fe:2c:fb:f7:
ee:8e:63:52:8f:b0:4f:6b:b4:ff:7d:ff:23:81:15:
b8:5a:42:a2:b9:ca:e5:ff:d9:fc:d8:c0:63:cc:17:
2a:1d:a4:d5:da:5d:f9:00:a6:51:3f:5f:07:3a:ff:
94:33:cf:37:cf:ac:ce:d2:19:6e:e7:26:44:8b:bd:
cb:51:72:61:38:0a:2d:ce:28:8f:59:bb:15:df:a8:
9e:90:87:c8:42:5e:68:3d:07:12:61:da:f6:33:ee:
f2:08:9e:ff:4d:ee:af:4c:87:f3:0f:e3:9c:53:cd:
d8:ac:54:80:33:14:a5:f9:cd:01:6f:e3:ee:5e:04:
d6:7d:a1:68:d7:90:87:7f:fa:8d:1f:46:11:55:97:
ac:f2:ee:88:84:90:c6:84:fb:e2:25:8e:74:9c:54:
06:92:7a:25:af:52:41:6a:34:76:76:bb:5c:1b:8d:
46:b7:f9:82:24:24:16:46:72:0f:e8:13:e7:db:67:
90:b5:d4:de:62:07:f3:27:86:1b:b0:73:bf:67:b4:
86:6b:ab:4a:3b:69:b6:b3:fa:9e:5b:5f:79:5e:64:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A1:27:7C:96:FF:B2:FC:3F:05:12:FC:E2:82:AA:5D:7C:D5:AF:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4543F172F3DD11EFA2F24C8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:87:bd:b3:18:42:3e:a4:96:5d:b0:66:25:df:ac:fc:01:8a:
fd:cc:a6:6b:af:18:f1:06:23:0b:6e:21:d2:0c:ff:e8:d2:cc:
63:6d:06:05:8d:7e:a0:c1:67:78:36:72:1a:82:93:65:8d:ba:
58:21:9f:b8:0c:26:cc:c0:23:e9:e4:11:eb:51:de:d3:a0:29:
4f:46:84:39:04:90:0e:14:b0:95:ca:f6:89:90:46:7d:a8:33:
26:c2:b3:22:41:38:ff:f0:77:97:ee:5a:da:6c:c0:cf:20:9e:
b4:28:53:0f:01:5c:64:e2:7d:bf:3e:11:20:c8:1b:28:7b:54:
fd:d8:4d:a4:4c:2a:f6:15:58:51:eb:55:0c:0a:da:5b:52:91:
75:e7:0c:58:d9:f8:6f:f9:2c:2a:b6:0a:e0:bc:df:74:8b:0a:
96:73:bf:62:e9:8a:91:01:77:72:e6:31:b2:d1:85:63:8d:10:
d5:ea:20:d8:d6:65:24:1b:78:c9:da:43:55:c0:de:80:19:d3:
af:7d:bb:60:76:3b:bb:96:80:ae:65:ae:c3:c6:b0:7c:17:fd:
0b:7c:c6:82:9b:04:25:33:29:4b:24:ed:5f:11:d6:9a:93:a4:
bf:48:2b:a7:fb:0f:40:4d:24:76:96:19:f6:df:1c:2f:bb:0f:
d0:ff:04:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWBVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDEwMTUxWhcNMjYwMjE5MDEwMTUxWjAYMRYw
FAYDVQQDEw02N2JlNjgwMy1mNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzRloc4BOx915jNQXMiCjf18f7OFKQiB5OzLT/61iQgn8XGn3LuVQW/4s
+/fujmNSj7BPa7T/ff8jgRW4WkKiucrl/9n82MBjzBcqHaTV2l35AKZRP18HOv+U
M883z6zO0hlu5yZEi73LUXJhOAotziiPWbsV36iekIfIQl5oPQcSYdr2M+7yCJ7/
Te6vTIfzD+OcU83YrFSAMxSl+c0Bb+PuXgTWfaFo15CHf/qNH0YRVZes8u6IhJDG
hPviJY50nFQGknolr1JBajR2drtcG41Gt/mCJCQWRnIP6BPn22eQtdTeYgfzJ4Yb
sHO/Z7SGa6tKO2m2s/qeW195XmQJhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIGh
J3yW/7L8PwUS/OKCql181a++MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NTQzRjE3MkYzREQxMUVGQTJGMjRDOEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlzoMA0GCSqGSIb3DQEB
CwUAA4IBAQBMh72zGEI+pJZdsGYl36z8AYr9zKZrrxjxBiMLbiHSDP/o0sxjbQYF
jX6gwWd4NnIagpNljbpYIZ+4DCbMwCPp5BHrUd7ToClPRoQ5BJAOFLCVyvaJkEZ9
qDMmwrMiQTj/8HeX7lrabMDPIJ60KFMPAVxk4n2/PhEgyBsoe1T92E2kTCr2FVhR
61UMCtpbUpF15wxY2fhv+SwqtgrgvN90iwqWc79i6YqRAXdy5jGy0YVjjRDV6iDY
1mUkG3jJ2kNVwN6AGdOvfbtgdju7loCuZa7DxrB8F/0LfMaCmwQlMylLJO1fEdaa
k6S/SCun+w9ATSR2lhn23xwvuw/Q/wST
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:48 2025 by rpki-client