Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A03EDB0F47411EF836F0AB3762E951A.roa
File: 4A03EDB0F47411EF836F0AB3762E951A.roa (raw, json)
Hash identifier: 5JSwLjaePupVYneyw/mF4J5kwpAXXRLMLH7CDoS17kw=
Subject key identifier: A9:53:13:40:53:B5:BD:74:7E:4E:AF:DD:3C:E8:2A:72:1D:2A:5F:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016578
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A03EDB0F47411EF836F0AB3762E951A.roa
Signing time: Wed 26 Feb 2025 19:02:57 +0000
ROA not before: Wed 26 Feb 2025 19:02:53 +0000
ROA not after: Sat 19 Feb 2028 19:02:53 +0000
asID: 17561
IP address blocks: 154.218.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91512 (0x16578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:02:53 2025 GMT
Not After : Feb 19 19:02:53 2028 GMT
Subject: CN=67bf6561-5263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:96:1a:2e:1f:03:d8:1b:b9:f9:04:14:01:
50:d7:00:66:17:f1:d3:32:4e:46:7f:89:6e:44:58:
e5:72:eb:2e:82:e1:9a:f6:42:3c:dc:8f:38:f2:3b:
86:aa:0c:9b:51:97:df:56:c6:7b:08:ac:cf:88:67:
e6:da:fb:06:56:19:58:76:7e:95:af:f6:69:2f:26:
fe:7a:06:2c:55:31:55:d1:7e:5f:61:c6:0e:be:e5:
43:b7:89:07:64:80:59:75:fd:e2:61:68:60:8d:18:
fc:69:b4:3d:78:f9:14:dd:fc:4d:e9:5a:26:e9:76:
58:d7:ad:1b:79:87:42:00:94:4a:ee:a6:bf:4f:08:
cf:93:bb:84:2c:6c:9f:e7:29:94:4f:b0:f4:53:32:
0c:cf:d9:a8:05:62:61:7c:42:ca:b3:ce:96:82:5a:
0e:66:ca:c4:5b:9d:30:10:1b:cf:15:96:22:2b:0c:
81:d7:55:b9:d6:05:59:44:04:d8:b1:fa:e5:b0:e2:
15:25:fa:85:b4:78:40:44:08:d0:aa:0f:80:87:42:
50:f5:93:ab:67:b3:db:e6:53:76:48:ae:ee:2b:16:
4d:c6:44:df:f4:d0:f0:82:09:97:25:aa:79:4f:2d:
15:52:d9:d2:01:af:b3:0a:ce:a0:a7:8a:df:1c:6e:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:53:13:40:53:B5:BD:74:7E:4E:AF:DD:3C:E8:2A:72:1D:2A:5F:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A03EDB0F47411EF836F0AB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.35.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ec:4d:4c:cb:1b:6c:7e:b1:cc:e5:cf:ab:f3:82:e6:70:06:
61:99:2b:0d:df:1f:80:03:6a:8b:3c:3b:dc:fd:f4:c7:01:78:
e6:78:eb:f6:6e:6a:b1:6c:b6:86:a7:04:6a:3a:72:2b:16:a4:
65:2d:5c:6f:92:05:d2:bd:19:3b:13:66:ee:d8:05:03:61:92:
8c:c0:59:90:f4:85:74:0d:d4:d8:11:b6:84:b3:96:8e:1c:ac:
7f:06:cb:ee:e9:0d:90:de:1a:58:cf:d3:34:e2:f4:0b:73:0b:
b1:72:d1:fb:73:55:5d:b6:b3:a5:65:3e:60:93:31:ad:e7:01:
75:30:e7:a4:dc:50:eb:de:21:76:a8:0e:2c:cd:83:18:3f:2c:
d4:44:70:a5:45:4d:0c:9d:a6:de:cf:ef:e7:a2:4f:63:9a:e8:
e9:e6:22:57:bc:cc:32:2b:69:4d:51:1c:d4:4d:32:eb:33:4f:
65:df:3d:56:c1:39:db:23:4f:03:50:3b:19:1e:1c:a9:f4:8f:
e8:af:e6:d1:55:a5:91:87:9a:78:45:b1:e1:10:24:48:e1:3f:
99:24:43:91:0f:d6:88:3b:d3:fc:90:6d:2b:f6:8d:6b:6a:c4:
30:2f:a7:25:56:7d:dd:71:ec:03:f9:ff:c0:d8:8a:54:c7:6f:
2e:39:51:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWV4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTkwMjUzWhcNMjgwMjE5MTkwMjUzWjAYMRYw
FAYDVQQDEw02N2JmNjU2MS01MjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzuOWGi4fA9gbufkEFAFQ1wBmF/HTMk5Gf4luRFjlcusuguGa9kI83I84
8juGqgybUZffVsZ7CKzPiGfm2vsGVhlYdn6Vr/ZpLyb+egYsVTFV0X5fYcYOvuVD
t4kHZIBZdf3iYWhgjRj8abQ9ePkU3fxN6Vom6XZY160beYdCAJRK7qa/TwjPk7uE
LGyf5ymUT7D0UzIMz9moBWJhfELKs86WgloOZsrEW50wEBvPFZYiKwyB11W51gVZ
RATYsfrlsOIVJfqFtHhARAjQqg+Ah0JQ9ZOrZ7Pb5lN2SK7uKxZNxkTf9NDwggmX
Jap5Ty0VUtnSAa+zCs6gp4rfHG5fRQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKlT
E0BTtb10fk6v3TzoKnIdKl8QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QTAzRURCMEY0NzQxMUVGODM2RjBBQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtojMA0GCSqGSIb3DQEB
CwUAA4IBAQC97E1MyxtsfrHM5c+r84LmcAZhmSsN3x+AA2qLPDvc/fTHAXjmeOv2
bmqxbLaGpwRqOnIrFqRlLVxvkgXSvRk7E2bu2AUDYZKMwFmQ9IV0DdTYEbaEs5aO
HKx/Bsvu6Q2Q3hpYz9M04vQLcwuxctH7c1VdtrOlZT5gkzGt5wF1MOek3FDr3iF2
qA4szYMYPyzURHClRU0Mnabez+/nok9jmujp5iJXvMwyK2lNURzUTTLrM09l3z1W
wTnbI08DUDsZHhyp9I/or+bRVaWRh5p4RbHhECRI4T+ZJEORD9aIO9P8kG0r9o1r
asQwL6clVn3dcewD+f/A2IpUx28uOVFE
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:11 2025 by rpki-client