Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCC6E34C35511EFB5FCFEB9762E951A.roa
File: 4FCC6E34C35511EFB5FCFEB9762E951A.roa (raw, json)
Hash identifier: e80zn663dcEuJH5R1TTGBWoDyMAi8GRYj3xWCBxyKC0=
Subject key identifier: 9E:47:82:BF:28:A7:3D:E4:A9:F1:59:C3:91:96:F1:C2:94:4A:F6:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCC6E34C35511EFB5FCFEB9762E951A.roa
Signing time: Thu 26 Dec 2024 06:47:45 +0000
ROA not before: Thu 26 Dec 2024 06:47:41 +0000
ROA not after: Sun 12 Dec 2027 06:47:41 +0000
asID: 17561
IP address blocks: 154.88.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75223 (0x125d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:47:41 2024 GMT
Not After : Dec 12 06:47:41 2027 GMT
Subject: CN=676cfc11-ada4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:b7:18:eb:4a:1d:df:c0:43:3f:2b:fb:e1:
95:81:89:79:2b:e0:1c:c9:a8:9a:1c:45:ee:f9:ba:
e2:a8:f6:28:ed:99:fc:91:15:be:2d:ae:87:e3:6a:
be:c9:f1:2a:ee:1c:d2:70:47:9c:34:f6:25:ce:cf:
4c:aa:20:cf:26:4b:bf:18:3a:30:81:df:77:6f:66:
29:dc:38:c2:dd:a8:ee:ef:80:11:40:b5:fb:be:55:
1b:fe:74:c5:8e:3f:22:46:d7:c9:18:bc:2f:9c:bf:
66:97:49:e3:73:40:29:a9:11:8a:e1:30:f7:99:c0:
52:ba:30:8d:f0:5e:ea:06:cb:19:75:5a:1b:97:fa:
13:95:7d:87:f3:6d:97:9e:53:04:03:75:99:df:ca:
5a:75:bf:74:3c:02:58:c8:b1:a5:0d:80:3c:0a:2e:
23:0d:e3:b8:39:4a:e6:7e:09:15:13:62:b9:8a:e6:
9f:d0:a5:f3:49:01:d1:d4:04:43:e3:d8:fd:78:46:
19:ef:a4:1e:1b:9e:a0:f0:0f:bf:4a:61:54:c9:9a:
62:02:d6:f3:f1:0a:2f:f3:b6:cd:e7:c0:44:91:84:
66:1f:8e:cb:78:62:45:36:50:01:fb:e7:54:5a:46:
0d:c6:c9:e6:14:b8:53:d9:83:9d:1f:7a:c4:5e:59:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:82:BF:28:A7:3D:E4:A9:F1:59:C3:91:96:F1:C2:94:4A:F6:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCC6E34C35511EFB5FCFEB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.47.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a4:fe:cb:b3:7b:56:6e:90:b6:7d:c0:81:46:d3:df:3b:60:
f0:b2:c5:70:7d:be:6c:b9:ca:da:77:5a:4a:9a:d1:ff:04:a1:
7c:29:40:43:60:d4:46:b0:32:4a:c3:ac:91:92:da:13:ef:30:
15:00:55:1b:3d:f7:e6:ca:c3:a2:77:86:5f:c4:53:dd:f9:77:
5c:1e:08:cc:58:ce:64:7c:fc:e7:a3:5a:fc:d0:2e:91:ac:20:
97:81:32:4f:20:a0:d2:9c:39:8f:59:2f:99:f7:74:30:72:28:
45:f4:3f:09:c7:e1:09:3f:f8:bf:a1:a2:03:fd:ca:00:27:98:
a6:c6:63:05:28:4d:12:ce:bd:ab:82:7b:ee:23:b3:1a:61:a7:
4d:65:23:6d:ac:ec:8c:58:51:c5:96:a1:18:75:72:6a:e3:94:
8f:1d:a2:06:12:97:21:3f:fc:07:49:4f:72:25:60:0a:09:7a:
ae:82:30:c6:17:25:c6:16:8a:2e:0e:c5:e6:cb:b4:03:67:71:
fa:6f:94:20:75:60:1b:41:bb:4f:65:1e:44:11:5e:49:ab:a1:
f0:1f:4b:0c:6a:cf:75:c3:e8:ad:bf:9e:61:b8:31:44:97:f8:
b3:da:43:73:0e:59:b0:73:2b:a3:f5:31:e8:fb:db:37:06:18:
45:fb:08:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASXXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDY0NzQxWhcNMjcxMjEyMDY0NzQxWjAYMRYw
FAYDVQQDEw02NzZjZmMxMS1hZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyZO3GOtKHd/AQz8r++GVgYl5K+AcyaiaHEXu+briqPYo7Zn8kRW+La6H
42q+yfEq7hzScEecNPYlzs9MqiDPJku/GDowgd93b2Yp3DjC3aju74ARQLX7vlUb
/nTFjj8iRtfJGLwvnL9ml0njc0ApqRGK4TD3mcBSujCN8F7qBssZdVobl/oTlX2H
822XnlMEA3WZ38padb90PAJYyLGlDYA8Ci4jDeO4OUrmfgkVE2K5iuaf0KXzSQHR
1ARD49j9eEYZ76QeG56g8A+/SmFUyZpiAtbz8Qov87bN58BEkYRmH47LeGJFNlAB
++dUWkYNxsnmFLhT2YOdH3rEXlnLiwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ5H
gr8opz3kqfFZw5GW8cKUSvbGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RkNDNkUzNEMzNTUxMUVGQjVGQ0ZFQjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgvMA0GCSqGSIb3DQEB
CwUAA4IBAQAVpP7Ls3tWbpC2fcCBRtPfO2DwssVwfb5sucrad1pKmtH/BKF8KUBD
YNRGsDJKw6yRktoT7zAVAFUbPffmysOid4ZfxFPd+XdcHgjMWM5kfPzno1r80C6R
rCCXgTJPIKDSnDmPWS+Z93QwcihF9D8Jx+EJP/i/oaID/coAJ5imxmMFKE0Szr2r
gnvuI7MaYadNZSNtrOyMWFHFlqEYdXJq45SPHaIGEpchP/wHSU9yJWAKCXqugjDG
FyXGFoouDsXmy7QDZ3H6b5QgdWAbQbtPZR5EEV5Jq6HwH0sMas91w+itv55huDFE
l/iz2kNzDlmwcyuj9THo+9s3BhhF+wgb
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:48 2025 by rpki-client