Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E3A2FAAB6CD11EFADB658BB762E951A.roa
File: 4E3A2FAAB6CD11EFADB658BB762E951A.roa (raw, json)
Hash identifier: gq6tlXLEjqpHbeFtgYpwhvbrhthajpD54kXBBnh+qmA=
Subject key identifier: A5:5C:8F:1C:8D:00:4D:6D:B8:FE:89:65:8F:1B:56:D3:05:5B:A2:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011A32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E3A2FAAB6CD11EFADB658BB762E951A.roa
Signing time: Tue 10 Dec 2024 08:03:57 +0000
ROA not before: Tue 10 Dec 2024 08:03:53 +0000
ROA not after: Mon 15 Dec 2025 08:03:53 +0000
asID: 140224
IP address blocks: 154.205.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72242 (0x11a32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 10 08:03:53 2024 GMT
Not After : Dec 15 08:03:53 2025 GMT
Subject: CN=6757f5ed-150e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:58:c2:e3:f9:cf:d7:68:c4:77:73:7c:2c:
b4:ce:4e:98:be:f9:4e:09:7c:4a:99:7a:c6:cb:05:
ab:1a:d8:3a:bb:ca:b2:8d:88:e0:d3:91:ac:0c:af:
4d:ec:a2:f4:25:3c:0b:67:f2:6e:d6:c5:4f:e5:21:
0e:ab:a2:42:fc:dc:2a:a5:4f:43:5e:3d:fb:7f:c6:
ef:42:fe:7c:85:ab:ef:9d:f3:e0:f8:2d:6c:6d:3a:
18:da:2d:82:4b:5c:30:40:e3:74:d9:23:be:e0:b4:
1c:b8:c9:71:db:be:38:75:b8:85:4a:88:81:53:95:
1c:7f:75:3e:9b:13:af:41:25:37:21:66:81:2d:d7:
a2:a5:61:41:9b:d8:5f:a6:62:30:a6:34:49:a4:51:
0d:b8:9a:68:4c:1d:6a:6f:84:30:77:46:e7:d8:be:
8c:a1:db:1e:fb:30:4c:58:04:12:39:d1:5c:50:fe:
d0:89:a1:c8:b0:e3:81:a4:3c:e2:1a:35:ff:37:a4:
22:e5:9c:9e:4d:d1:7f:c2:b8:b3:b1:ce:4c:c7:e5:
9c:58:c0:10:42:8c:de:36:b9:46:67:e8:64:fd:ca:
2f:e7:6e:a4:25:20:4b:1e:99:97:07:33:12:e1:29:
85:a0:7f:00:a0:c9:60:52:f8:ec:da:5c:49:c4:eb:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5C:8F:1C:8D:00:4D:6D:B8:FE:89:65:8F:1B:56:D3:05:5B:A2:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E3A2FAAB6CD11EFADB658BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.192.0/19
Signature Algorithm: sha256WithRSAEncryption
c6:73:ed:69:1a:e7:56:58:ad:c2:27:6f:98:48:5d:36:08:b3:
65:d3:4e:14:2f:f5:45:97:0a:11:d1:58:18:0d:a0:11:3f:f5:
91:9b:6b:cb:3f:ae:1e:c5:e0:dd:8b:76:9d:49:11:af:e0:0f:
a6:08:b9:a6:80:5c:4c:63:07:94:74:16:34:12:a1:88:4c:07:
16:ee:17:3b:f7:35:34:7b:e0:51:12:d5:d2:9d:77:1d:01:94:
e7:43:a6:77:50:4f:e5:3a:c3:a2:0a:3c:47:ce:bb:09:bf:00:
0e:1a:93:17:f5:f6:e1:95:82:cc:52:f2:cc:ce:29:f6:23:ec:
90:7f:6e:3e:75:43:95:c9:d4:25:fc:0b:ac:52:09:fa:82:88:
3c:97:2f:a8:b4:45:a3:16:f3:8a:35:47:84:b5:21:6d:7e:30:
5a:61:3b:c9:cb:38:f1:1e:10:3a:4a:ad:c9:5f:d6:94:90:d3:
42:5c:82:b7:30:70:a0:9d:3a:25:ca:b5:17:87:7e:9d:57:eb:
a0:18:40:9a:b7:03:38:96:d8:1e:ff:c5:7a:72:ce:f1:84:ed:
61:c8:9e:e4:b7:31:9b:9d:58:c0:2d:72:13:e3:cb:ef:ef:87:
03:b6:dc:10:b7:1c:1d:5e:ea:e5:11:ac:dd:72:09:62:f7:8a:
d3:0c:8c:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARoyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjEwMDgwMzUzWhcNMjUxMjE1MDgwMzUzWjAYMRYw
FAYDVQQDEw02NzU3ZjVlZC0xNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyCBYwuP5z9doxHdzfCy0zk6YvvlOCXxKmXrGywWrGtg6u8qyjYjg05Gs
DK9N7KL0JTwLZ/Ju1sVP5SEOq6JC/NwqpU9DXj37f8bvQv58havvnfPg+C1sbToY
2i2CS1wwQON02SO+4LQcuMlx2744dbiFSoiBU5Ucf3U+mxOvQSU3IWaBLdeipWFB
m9hfpmIwpjRJpFENuJpoTB1qb4Qwd0bn2L6Modse+zBMWAQSOdFcUP7QiaHIsOOB
pDziGjX/N6Qi5ZyeTdF/wrizsc5Mx+WcWMAQQozeNrlGZ+hk/cov526kJSBLHpmX
BzMS4SmFoH8AoMlgUvjs2lxJxOvJ2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKVc
jxyNAE1tuP6JZY8bVtMFW6JCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RTNBMkZBQUI2Q0QxMUVGQURCNjU4QkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFms3AMA0GCSqGSIb3DQEB
CwUAA4IBAQDGc+1pGudWWK3CJ2+YSF02CLNl004UL/VFlwoR0VgYDaARP/WRm2vL
P64exeDdi3adSRGv4A+mCLmmgFxMYweUdBY0EqGITAcW7hc79zU0e+BREtXSnXcd
AZTnQ6Z3UE/lOsOiCjxHzrsJvwAOGpMX9fbhlYLMUvLMzin2I+yQf24+dUOVydQl
/AusUgn6gog8ly+otEWjFvOKNUeEtSFtfjBaYTvJyzjxHhA6Sq3JX9aUkNNCXIK3
MHCgnTolyrUXh36dV+ugGECatwM4ltge/8V6cs7xhO1hyJ7ktzGbnVjALXIT48vv
74cDttwQtxwdXurlEazdcgli94rTDIxf
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:10 2025 by rpki-client