Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66EBB324F44A11EFB55D5A90762E951A.roa
File: 66EBB324F44A11EFB55D5A90762E951A.roa (raw, json)
Hash identifier: gicFt/8usbLsISkx/FcUbPZWYg2QSFeiUAUWyg2drHg=
Subject key identifier: 9B:22:6A:D5:33:89:98:BD:32:57:33:AF:EC:2A:A4:F5:AB:85:B7:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016411
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66EBB324F44A11EFB55D5A90762E951A.roa
Signing time: Wed 26 Feb 2025 14:03:06 +0000
ROA not before: Wed 26 Feb 2025 14:03:02 +0000
ROA not after: Sat 19 Feb 2028 14:03:02 +0000
asID: 17561
IP address blocks: 154.82.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91153 (0x16411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:03:02 2025 GMT
Not After : Feb 19 14:03:02 2028 GMT
Subject: CN=67bf1f1a-3845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:29:0f:08:74:93:19:83:54:bf:7e:58:50:
03:bb:3d:ba:bc:42:27:e7:c4:98:9e:6e:b9:4c:c5:
4a:f3:58:d2:60:fa:b5:7b:cf:c6:4f:53:2c:ab:e7:
fb:fa:da:a4:47:ef:da:6c:93:c5:12:18:aa:66:2e:
85:00:b2:ed:30:e7:1a:e1:71:6d:4b:f0:61:ca:ab:
f4:82:cd:9a:7e:11:da:55:57:d1:31:d6:44:f3:ce:
7b:c7:1d:7b:7c:a4:38:f6:fb:67:71:78:dd:d2:34:
e6:92:08:f8:3d:16:a5:c9:ba:94:01:92:d0:2b:8b:
77:be:a5:a9:5c:47:20:5b:3b:fb:f5:24:71:11:e0:
ec:42:17:2c:9c:e2:d4:ce:7e:3a:10:ee:4a:ca:73:
de:c8:19:9b:e4:ff:f2:6d:62:2a:b9:27:96:db:b5:
a4:e0:c9:ee:25:54:f4:51:be:68:f7:bd:a1:22:08:
d3:11:da:80:19:a5:5f:32:bd:9a:a7:ca:67:c1:ed:
b0:12:27:91:7c:17:e4:9e:25:02:ba:5c:4f:8d:6f:
65:e4:e0:9f:75:97:07:b0:d1:7b:57:be:93:f6:1c:
18:0b:c0:73:ab:71:0d:62:ae:86:73:3d:c0:01:fb:
2f:de:c0:d3:e3:c2:87:39:e0:32:83:fe:47:59:2e:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:6A:D5:33:89:98:BD:32:57:33:AF:EC:2A:A4:F5:AB:85:B7:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66EBB324F44A11EFB55D5A90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.193.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3c:77:68:04:2f:30:3c:e7:cf:8c:91:b4:bc:59:30:db:75:
e5:29:f4:f1:34:ab:c9:d4:b4:ba:58:19:08:62:3d:93:ba:47:
4c:c8:e8:08:32:9d:ce:5f:03:1d:ff:3f:8d:c9:91:a0:06:02:
54:55:2c:f0:ce:18:77:e7:45:45:fc:23:fc:b7:76:b3:4d:4b:
3d:61:48:55:4f:d2:d4:31:e5:03:8d:7d:8e:22:54:7b:11:0d:
2d:3c:9e:df:c2:bd:e7:ac:23:33:91:66:cb:20:42:bc:70:e9:
5d:ec:f0:95:0a:bd:33:df:04:cc:c2:94:d4:e6:05:bc:c9:2a:
0b:8a:1b:88:a3:b8:78:8d:a8:2b:06:fa:0f:7e:77:72:d6:7c:
a2:a0:60:8f:f8:2c:6e:b6:cd:b4:35:e6:dc:78:e4:a3:97:a0:
f8:fc:c0:55:74:e6:3d:74:82:45:12:4a:ae:93:25:be:c3:d0:
6f:f3:98:b7:6d:88:11:43:38:2a:e3:30:eb:9c:04:21:af:e3:
81:ee:e2:dc:4a:9e:22:aa:97:c8:4a:aa:fa:c0:12:a3:bd:09:
86:ff:56:46:d5:2d:77:72:40:49:3a:af:ad:de:f7:74:4a:24:
ab:5c:96:e4:02:b6:f4:15:b6:76:fc:52:74:b2:c8:dd:2c:62:
89:ed:95:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWQRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTQwMzAyWhcNMjgwMjE5MTQwMzAyWjAYMRYw
FAYDVQQDEw02N2JmMWYxYS0zODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4GcpDwh0kxmDVL9+WFADuz26vEIn58SYnm65TMVK81jSYPq1e8/GT1Ms
q+f7+tqkR+/abJPFEhiqZi6FALLtMOca4XFtS/Bhyqv0gs2afhHaVVfRMdZE8857
xx17fKQ49vtncXjd0jTmkgj4PRalybqUAZLQK4t3vqWpXEcgWzv79SRxEeDsQhcs
nOLUzn46EO5KynPeyBmb5P/ybWIquSeW27Wk4MnuJVT0Ub5o972hIgjTEdqAGaVf
Mr2ap8pnwe2wEieRfBfkniUCulxPjW9l5OCfdZcHsNF7V76T9hwYC8Bzq3ENYq6G
cz3AAfsv3sDT48KHOeAyg/5HWS4pdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJsi
atUziZi9Mlczr+wqpPWrhbeKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NkVCQjMyNEY0NEExMUVGQjU1RDVBOTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLBMA0GCSqGSIb3DQEB
CwUAA4IBAQBlPHdoBC8wPOfPjJG0vFkw23XlKfTxNKvJ1LS6WBkIYj2TukdMyOgI
Mp3OXwMd/z+NyZGgBgJUVSzwzhh350VF/CP8t3azTUs9YUhVT9LUMeUDjX2OIlR7
EQ0tPJ7fwr3nrCMzkWbLIEK8cOld7PCVCr0z3wTMwpTU5gW8ySoLihuIo7h4jagr
BvoPfndy1nyioGCP+Cxuts20NebceOSjl6D4/MBVdOY9dIJFEkqukyW+w9Bv85i3
bYgRQzgq4zDrnAQhr+OB7uLcSp4iqpfISqr6wBKjvQmG/1ZG1S13ckBJOq+t3vd0
SiSrXJbkArb0FbZ2/FJ0ssjdLGKJ7ZU2
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:51 2025 by rpki-client