Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69CD2EB8DFED11EF8E033DB3762E951A.roa
File: 69CD2EB8DFED11EF8E033DB3762E951A.roa (raw, json)
Hash identifier: Yg2LC69uIopbbpxOeSCi5qOnejdDK/tfFxUtu7JSlYA=
Subject key identifier: C3:18:B4:0E:88:9F:AE:27:54:16:5B:94:96:38:3D:9E:96:25:F4:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69CD2EB8DFED11EF8E033DB3762E951A.roa
Signing time: Fri 31 Jan 2025 16:07:05 +0000
ROA not before: Fri 31 Jan 2025 16:07:01 +0000
ROA not after: Sat 03 Jan 2026 16:07:01 +0000
asID: 40065
IP address blocks: 154.88.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85511 (0x14e07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 16:07:01 2025 GMT
Not After : Jan 3 16:07:01 2026 GMT
Subject: CN=679cf529-8f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:5e:f2:12:13:82:54:5b:70:33:bc:de:74:
70:e9:24:56:61:7f:ad:a0:55:a9:fc:80:48:f9:7f:
9a:6a:5d:94:bf:d6:d6:72:f4:87:12:37:b2:c2:62:
a7:55:68:07:0b:12:2b:8d:f6:7e:22:52:a4:20:91:
14:67:aa:e4:66:12:a3:fc:91:52:08:65:5a:7e:40:
be:cd:68:54:aa:6d:77:fa:80:9b:fd:24:00:81:07:
72:47:cb:cf:fc:d9:cc:cc:7b:d6:36:90:73:00:10:
e2:2e:22:82:2c:a9:d7:f1:c0:69:a1:5d:65:78:66:
d8:8f:ca:c2:e9:e5:a1:06:a6:34:cc:61:7b:ad:3a:
5c:7f:f7:09:eb:65:89:8d:d4:33:b4:cb:a5:39:f8:
52:a4:20:8a:06:e2:b4:b3:ca:1d:2c:4c:c2:d1:06:
25:28:39:1f:75:96:d1:9f:24:e9:1b:d9:bf:a2:b3:
4f:ce:e8:65:1f:0e:eb:8c:a3:b1:a3:e5:af:f5:72:
7c:ef:c3:2f:97:cb:84:74:7d:88:83:a3:55:14:ba:
80:34:67:b0:9d:80:11:43:2f:a1:56:48:ab:ea:b8:
d9:2e:c6:1d:d0:d5:2d:0f:26:2c:0f:c3:c4:43:cc:
b2:02:dd:1c:0c:d5:80:e0:02:36:00:4d:5b:a0:42:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:18:B4:0E:88:9F:AE:27:54:16:5B:94:96:38:3D:9E:96:25:F4:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69CD2EB8DFED11EF8E033DB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.20.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:aa:a3:43:01:5a:36:b0:58:87:da:fb:5a:5f:92:04:ca:ff:
bd:18:3c:8a:f4:d6:e7:1e:ba:11:70:0e:27:30:fa:21:b2:77:
c2:33:e1:ba:b8:d3:bc:2b:11:1c:51:f9:59:cb:f2:56:86:9b:
9e:89:8f:3e:d0:bc:8f:42:66:41:91:a7:45:28:5f:c1:3b:2b:
7b:46:5e:06:66:06:0d:7a:3d:4d:1d:18:17:33:bf:7f:44:0b:
95:ce:ed:a4:d8:34:71:f0:e9:24:46:33:0c:11:b6:59:8d:a0:
74:d3:2e:3d:43:9a:c7:b2:1a:2e:3e:01:30:37:13:87:99:dc:
49:f9:20:ce:f4:02:49:ba:50:f3:ad:03:30:09:d0:d1:ca:a0:
e3:5a:84:22:eb:72:d0:83:d7:56:e7:f9:e1:2a:b6:ab:27:7f:
76:db:e6:33:77:60:8f:43:c9:0f:0c:7f:42:77:38:bf:72:e4:
b7:b4:c7:9c:65:f1:df:31:91:eb:59:68:65:10:03:6d:e8:ca:
17:44:4b:20:27:19:59:45:bc:6f:e7:e8:43:48:62:54:cb:12:
69:7d:0d:a7:2f:4d:6a:16:2a:f6:24:d8:be:9c:48:c4:d6:0a:
6b:8e:31:a1:88:5f:69:4b:19:af:09:62:7e:9b:da:b7:21:ee:
f9:28:c1:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU4HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTYwNzAxWhcNMjYwMTAzMTYwNzAxWjAYMRYw
FAYDVQQDEw02NzljZjUyOS04ZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuzpe8hITglRbcDO83nRw6SRWYX+toFWp/IBI+X+aal2Uv9bWcvSHEjey
wmKnVWgHCxIrjfZ+IlKkIJEUZ6rkZhKj/JFSCGVafkC+zWhUqm13+oCb/SQAgQdy
R8vP/NnMzHvWNpBzABDiLiKCLKnX8cBpoV1leGbYj8rC6eWhBqY0zGF7rTpcf/cJ
62WJjdQztMulOfhSpCCKBuK0s8odLEzC0QYlKDkfdZbRnyTpG9m/orNPzuhlHw7r
jKOxo+Wv9XJ878Mvl8uEdH2Ig6NVFLqANGewnYARQy+hVkir6rjZLsYd0NUtDyYs
D8PEQ8yyAt0cDNWA4AI2AE1boELNlQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMMY
tA6In64nVBZblJY4PZ6WJfR7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUNEMkVCOERGRUQxMUVGOEUwMzNEQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlgUMA0GCSqGSIb3DQEB
CwUAA4IBAQA6qqNDAVo2sFiH2vtaX5IEyv+9GDyK9NbnHroRcA4nMPohsnfCM+G6
uNO8KxEcUflZy/JWhpueiY8+0LyPQmZBkadFKF/BOyt7Rl4GZgYNej1NHRgXM79/
RAuVzu2k2DRx8OkkRjMMEbZZjaB00y49Q5rHshouPgEwNxOHmdxJ+SDO9AJJulDz
rQMwCdDRyqDjWoQi63LQg9dW5/nhKrarJ3922+Yzd2CPQ8kPDH9Cdzi/cuS3tMec
ZfHfMZHrWWhlEANt6MoXREsgJxlZRbxv5+hDSGJUyxJpfQ2nL01qFir2JNi+nEjE
1gprjjGhiF9pSxmvCWJ+m9q3Ie75KMF0
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:38 2025 by rpki-client