Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED8D252F81811EF89E8BC98762E951A.roa
File: 6ED8D252F81811EF89E8BC98762E951A.roa (raw, json)
Hash identifier: Li/moSptOwrKLzXmTc5tBXLV4vOLpw2xFBrhG8HFU2U=
Subject key identifier: 35:AB:47:0E:08:5D:3A:50:6A:6D:63:75:65:71:D6:79:9B:FC:77:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017000
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED8D252F81811EF89E8BC98762E951A.roa
Signing time: Mon 03 Mar 2025 10:15:29 +0000
ROA not before: Mon 03 Mar 2025 10:15:26 +0000
ROA not after: Wed 30 Apr 2025 10:15:26 +0000
asID: 63139
IP address blocks: 154.94.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94208 (0x17000)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:15:26 2025 GMT
Not After : Apr 30 10:15:26 2025 GMT
Subject: CN=67c58141-2b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:11:38:38:84:4c:37:01:72:54:22:d9:f7:
41:4a:f1:e3:e7:e1:47:f8:f9:85:4e:e9:a6:96:4e:
35:f1:bb:79:35:0a:a8:d8:d5:ff:c6:b7:5d:f2:d0:
0e:a2:c9:50:cf:ec:67:5d:95:f4:cc:70:e4:bd:ef:
79:1e:32:65:c0:18:cf:ad:3a:15:08:18:6c:7b:2c:
d6:8c:6b:70:40:54:25:dd:80:4d:96:48:59:70:4e:
82:2b:b0:69:2c:55:99:74:4f:49:3b:3c:13:2c:3b:
ed:4c:03:97:cc:12:97:7a:65:5e:f4:e3:ba:73:71:
99:41:b3:35:9d:63:07:80:21:e2:67:a9:59:38:a6:
5a:28:1b:c4:4b:f7:42:8a:ac:7e:46:cd:b9:2d:af:
fe:f4:8b:c3:ae:4b:0c:d6:be:41:a1:83:2d:66:96:
29:27:99:38:fd:c1:8b:46:ea:4b:42:e0:14:6a:09:
40:22:9c:74:91:c1:f6:d6:6d:92:91:b3:e6:df:48:
39:18:43:e5:e3:05:dc:a0:ac:f5:af:5d:31:1b:bc:
2b:ea:1b:4b:e5:a7:bd:bc:07:a5:3c:df:fe:de:03:
b1:2a:8b:0f:ba:9e:b0:6d:61:97:4d:4f:a5:ca:5c:
ac:f9:79:b2:07:83:11:97:4b:bb:88:20:de:43:d9:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:47:0E:08:5D:3A:50:6A:6D:63:75:65:71:D6:79:9B:FC:77:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ED8D252F81811EF89E8BC98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.126.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:62:f4:65:dc:27:86:ce:f2:bb:18:1f:45:c3:00:0a:74:69:
a5:49:7b:ba:dd:ac:e2:68:65:db:13:4e:34:27:e7:36:1f:a6:
cc:14:12:e5:00:f8:d0:0f:d0:ad:3c:09:e5:5b:46:c6:37:9e:
ca:a8:72:b7:30:50:60:7e:17:c7:89:e8:8a:dc:6b:df:ac:67:
6f:52:12:d6:a4:33:7a:e5:18:3b:e4:a1:81:a3:49:01:0d:4f:
97:39:e7:d6:87:11:11:f6:4e:2c:00:b2:d1:55:28:4f:db:c6:
33:6f:e1:13:41:b8:1d:5d:23:c3:f9:f3:c1:57:68:7b:b6:43:
19:aa:7f:e9:61:1d:84:19:75:6e:8f:87:c5:aa:13:a7:77:1c:
cb:ab:38:28:91:4d:e1:57:7d:9a:01:d6:43:2e:52:0b:6e:32:
6c:08:09:e8:67:e2:51:55:55:28:44:7e:ce:71:20:54:ae:44:
68:52:4e:b4:04:d2:57:ed:5b:ec:7c:8c:04:33:b6:bb:6d:db:
d2:c8:91:8d:d2:bb:9e:cd:eb:f2:74:83:d8:cf:f0:ea:b2:a3:
19:cc:cb:e1:8c:94:1c:e8:99:e4:2f:16:d6:a9:21:1c:a9:c0:
6d:e9:39:66:0c:80:b8:86:85:83:e9:b2:48:d7:55:59:6d:47:
20:9a:b5:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXAAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTAxNTI2WhcNMjUwNDMwMTAxNTI2WjAYMRYw
FAYDVQQDEw02N2M1ODE0MS0yYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3uwRODiETDcBclQi2fdBSvHj5+FH+PmFTummlk418bt5NQqo2NX/xrdd
8tAOoslQz+xnXZX0zHDkve95HjJlwBjPrToVCBhseyzWjGtwQFQl3YBNlkhZcE6C
K7BpLFWZdE9JOzwTLDvtTAOXzBKXemVe9OO6c3GZQbM1nWMHgCHiZ6lZOKZaKBvE
S/dCiqx+Rs25La/+9IvDrksM1r5BoYMtZpYpJ5k4/cGLRupLQuAUaglAIpx0kcH2
1m2SkbPm30g5GEPl4wXcoKz1r10xG7wr6htL5ae9vAelPN/+3gOxKosPup6wbWGX
TU+lylys+XmyB4MRl0u7iCDeQ9kwmwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDWr
Rw4IXTpQam1jdWVx1nmb/HdpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RUQ4RDI1MkY4MTgxMUVGODlFOEJDOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5+MA0GCSqGSIb3DQEB
CwUAA4IBAQAcYvRl3CeGzvK7GB9FwwAKdGmlSXu63aziaGXbE040J+c2H6bMFBLl
APjQD9CtPAnlW0bGN57KqHK3MFBgfhfHieiK3GvfrGdvUhLWpDN65Rg75KGBo0kB
DU+XOefWhxER9k4sALLRVShP28Yzb+ETQbgdXSPD+fPBV2h7tkMZqn/pYR2EGXVu
j4fFqhOndxzLqzgokU3hV32aAdZDLlILbjJsCAnoZ+JRVVUoRH7OcSBUrkRoUk60
BNJX7VvsfIwEM7a7bdvSyJGN0ruezevydIPYz/DqsqMZzMvhjJQc6JnkLxbWqSEc
qcBt6TlmDIC4hoWD6bJI11VZbUcgmrUx
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:52 2025 by rpki-client