Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFA0CC4C1B911EFBEBDB774762E951A.roa
File: 4FFA0CC4C1B911EFBEBDB774762E951A.roa (raw, json)
Hash identifier: HzztoVWBBnugQY+cpm1fnOSbvbO5HDRFNiXhXAK7KfE=
Subject key identifier: 2C:FC:F5:22:7A:5F:FB:8E:5A:48:AD:B8:12:1D:5B:37:E8:1F:BE:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFA0CC4C1B911EFBEBDB774762E951A.roa
Signing time: Tue 24 Dec 2024 05:38:33 +0000
ROA not before: Tue 24 Dec 2024 05:38:29 +0000
ROA not after: Wed 10 Dec 2025 05:38:29 +0000
asID: 984
IP address blocks: 154.193.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74199 (0x121d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:38:29 2024 GMT
Not After : Dec 10 05:38:29 2025 GMT
Subject: CN=676a48d9-b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:90:39:54:b1:10:0a:d9:b6:be:50:8b:05:
3d:e0:7f:e2:8d:6f:5e:f1:35:4f:e8:14:75:f3:a5:
4a:58:b4:fe:4c:33:f2:11:67:02:ca:8a:9c:33:21:
76:26:c6:f2:85:95:52:89:4c:13:cd:8d:9b:54:a0:
c6:94:fd:83:df:71:38:15:85:06:a6:41:00:9a:3a:
b9:8c:05:19:d9:da:c6:91:84:27:d7:1b:8a:9e:24:
1f:c4:35:94:90:1e:68:b5:d0:44:df:30:31:bf:d3:
c8:fe:c0:d7:06:66:25:6c:b3:e3:a7:36:71:26:3d:
0a:fc:3e:99:55:44:14:2a:c1:b8:5b:8b:a4:86:4e:
87:f4:ab:7d:75:85:00:02:eb:d6:92:5f:0f:2a:1f:
74:30:53:48:1a:0c:0c:3c:d2:69:17:0a:b4:b4:38:
a3:9f:aa:c6:00:0f:c1:48:d2:58:21:e9:be:02:c1:
3e:c4:5f:0b:20:a7:58:5a:51:18:42:3b:00:0f:6d:
b1:09:00:9a:69:a2:6a:d2:e6:11:9f:45:fd:6f:c6:
51:ed:13:96:18:19:2f:f0:91:43:d8:aa:2f:ec:6d:
28:5d:60:8e:63:1d:25:f6:83:36:e6:e5:7f:49:fd:
55:3c:ba:cf:7c:3e:38:3a:ba:c5:b8:f1:5e:ed:53:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FC:F5:22:7A:5F:FB:8E:5A:48:AD:B8:12:1D:5B:37:E8:1F:BE:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFA0CC4C1B911EFBEBDB774762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.165.0/24
Signature Algorithm: sha256WithRSAEncryption
84:53:31:21:35:4c:98:b2:9c:46:5c:f3:b0:86:e6:fb:7f:ab:
25:0d:7b:96:fd:c5:4e:54:f5:96:e8:c7:49:c2:97:ea:d6:bf:
a6:bd:03:eb:ce:af:12:64:9b:c2:3b:c8:59:45:7a:10:d4:20:
06:a7:53:8d:8d:7e:cf:ae:f2:c6:03:99:dc:de:c0:46:2e:7b:
07:1d:49:c1:35:31:22:15:8f:f6:24:28:e8:7c:58:7c:e5:7d:
7e:ca:24:73:d2:d3:c3:50:22:24:c8:5d:42:df:d8:92:98:f2:
a0:76:a5:62:9a:40:67:39:36:4a:68:1f:e0:22:d4:bb:a2:af:
34:23:c7:b1:23:d0:fa:4f:e3:56:f5:df:e9:76:01:bd:f4:85:
7d:76:6a:98:92:d2:be:56:a6:28:2a:24:ab:9c:9e:bd:7a:af:
ba:6f:f7:f9:a5:88:0a:c5:50:da:78:5e:84:b1:98:e1:81:13:
7d:e3:dd:7e:cc:e6:19:d8:1b:5e:b9:ff:b3:55:cd:43:42:8b:
eb:81:32:c0:04:2d:16:b5:cc:c5:57:72:3b:7c:12:c6:e8:65:
e1:b1:52:e9:a3:d9:0f:74:d4:9f:f8:6d:eb:f1:97:6e:48:f2:
05:c2:de:ad:d9:7a:bb:05:06:9e:17:64:7b:aa:2d:74:dc:4e:
56:ec:50:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASHXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDUzODI5WhcNMjUxMjEwMDUzODI5WjAYMRYw
FAYDVQQDEw02NzZhNDhkOS1iOTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAytKQOVSxEArZtr5QiwU94H/ijW9e8TVP6BR186VKWLT+TDPyEWcCyoqc
MyF2JsbyhZVSiUwTzY2bVKDGlP2D33E4FYUGpkEAmjq5jAUZ2drGkYQn1xuKniQf
xDWUkB5otdBE3zAxv9PI/sDXBmYlbLPjpzZxJj0K/D6ZVUQUKsG4W4ukhk6H9Kt9
dYUAAuvWkl8PKh90MFNIGgwMPNJpFwq0tDijn6rGAA/BSNJYIem+AsE+xF8LIKdY
WlEYQjsAD22xCQCaaaJq0uYRn0X9b8ZR7ROWGBkv8JFD2Kov7G0oXWCOYx0l9oM2
5uV/Sf1VPLrPfD44OrrFuPFe7VOQKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCz8
9SJ6X/uOWkituBIdWzfoH76UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RkZBMENDNEMxQjkxMUVGQkVCREI3NzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGlMA0GCSqGSIb3DQEB
CwUAA4IBAQCEUzEhNUyYspxGXPOwhub7f6slDXuW/cVOVPWW6MdJwpfq1r+mvQPr
zq8SZJvCO8hZRXoQ1CAGp1ONjX7PrvLGA5nc3sBGLnsHHUnBNTEiFY/2JCjofFh8
5X1+yiRz0tPDUCIkyF1C39iSmPKgdqVimkBnOTZKaB/gItS7oq80I8exI9D6T+NW
9d/pdgG99IV9dmqYktK+VqYoKiSrnJ69eq+6b/f5pYgKxVDaeF6EsZjhgRN9491+
zOYZ2Bteuf+zVc1DQovrgTLABC0WtczFV3I7fBLG6GXhsVLpo9kPdNSf+G3r8Zdu
SPIFwt6t2Xq7BQaeF2R7qi103E5W7FBz
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:59 2025 by rpki-client