Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7589FC92E2D911EFAAC0A269762E951A.roa
File: 7589FC92E2D911EFAAC0A269762E951A.roa (raw, json)
Hash identifier: CCQmImA3ioc87+QCuca4O7Zrz7FiYMBIm3G63ga36R0=
Subject key identifier: EF:BF:2B:EA:81:F1:55:3F:5C:63:E9:CB:D0:16:D2:82:F2:63:C5:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7589FC92E2D911EFAAC0A269762E951A.roa
Signing time: Tue 04 Feb 2025 09:21:48 +0000
ROA not before: Tue 04 Feb 2025 09:21:44 +0000
ROA not after: Wed 30 Apr 2025 09:21:44 +0000
asID: 18229
IP address blocks: 154.210.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86228 (0x150d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:21:44 2025 GMT
Not After : Apr 30 09:21:44 2025 GMT
Subject: CN=67a1dc2c-5306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:91:80:29:7d:03:27:55:c1:e1:38:bb:bc:
b6:1f:d3:98:34:eb:77:95:a1:c4:d7:67:05:b0:00:
4b:34:23:52:f2:c7:04:cc:7c:b0:15:2e:e9:bf:99:
b5:30:ab:30:3b:7d:90:2f:75:c7:4b:75:0f:71:f4:
ea:8a:a3:4b:00:20:5c:b3:d0:b8:94:6d:9e:cd:dc:
4f:14:20:17:48:b4:82:c8:f8:ae:cc:fa:eb:41:e2:
83:a1:2b:1d:26:66:86:bc:cb:a6:43:19:18:d9:b0:
69:14:48:a8:ba:72:66:d3:ed:3c:7f:dc:43:d8:35:
27:6d:4a:0f:09:51:01:e5:da:7b:c8:d4:6d:d3:3f:
88:d2:a7:36:f0:e7:80:5a:c6:2d:1c:6f:0f:54:d3:
9e:a7:20:98:e6:eb:e8:b8:d7:77:b5:b9:42:bd:f0:
a3:2a:0d:74:c7:9e:b0:7b:51:00:2f:86:08:e8:16:
39:e1:35:1e:81:a5:60:90:85:70:22:99:53:25:27:
54:88:97:b5:a1:bf:7e:89:9f:ee:60:47:81:f1:5a:
8e:ab:5b:73:bd:b0:6c:62:30:df:71:54:df:1c:01:
77:03:df:57:ac:72:29:4a:12:e6:1a:98:6e:c5:8f:
67:80:97:8c:dd:b7:42:b3:ab:c0:ba:2f:b9:8f:20:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BF:2B:EA:81:F1:55:3F:5C:63:E9:CB:D0:16:D2:82:F2:63:C5:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7589FC92E2D911EFAAC0A269762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:60:59:55:27:6c:c1:fe:b2:44:2c:e7:b0:83:a4:02:6e:ec:
0a:d2:2a:25:3d:b3:e5:d5:53:4d:cb:cb:73:24:18:b8:51:1f:
27:ca:4a:e8:e3:cd:32:84:d7:da:30:68:53:d5:a4:aa:39:77:
cb:4b:4a:21:99:ad:85:18:fa:84:06:4d:aa:33:8c:2d:3c:d6:
89:1c:12:4a:d2:30:19:de:d2:a9:89:9c:35:50:76:58:3c:69:
c2:cd:2e:0d:d1:ef:50:08:48:ca:f6:33:1c:25:75:15:ff:46:
c3:44:9f:5f:85:c3:cb:fc:9c:38:13:2f:17:bf:64:96:79:4f:
5e:c2:53:82:5d:cb:ec:a1:47:46:1a:de:5f:34:bc:78:61:07:
6f:d1:6f:de:17:73:a5:1d:6f:57:e0:37:2f:3d:53:9d:dd:62:
39:05:e7:f6:16:a5:30:a3:6f:d8:4b:06:ce:2a:c6:11:c2:b3:
54:2f:7b:94:2d:53:1c:78:04:f1:b2:e1:50:58:9b:65:03:b4:
e8:5d:48:73:69:d8:bd:07:a2:81:30:d1:20:eb:89:e4:c9:34:
37:62:f8:d1:5e:c4:43:46:d2:78:12:f0:80:48:a5:92:b9:9e:
86:76:2c:e0:67:88:c2:e9:04:08:74:cf:4f:74:1b:65:10:9e:
40:f2:b0:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVDUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MDkyMTQ0WhcNMjUwNDMwMDkyMTQ0WjAYMRYw
FAYDVQQDEw02N2ExZGMyYy01MzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArRSRgCl9AydVweE4u7y2H9OYNOt3laHE12cFsABLNCNS8scEzHywFS7p
v5m1MKswO32QL3XHS3UPcfTqiqNLACBcs9C4lG2ezdxPFCAXSLSCyPiuzPrrQeKD
oSsdJmaGvMumQxkY2bBpFEiounJm0+08f9xD2DUnbUoPCVEB5dp7yNRt0z+I0qc2
8OeAWsYtHG8PVNOepyCY5uvouNd3tblCvfCjKg10x56we1EAL4YI6BY54TUegaVg
kIVwIplTJSdUiJe1ob9+iZ/uYEeB8VqOq1tzvbBsYjDfcVTfHAF3A99XrHIpShLm
GphuxY9ngJeM3bdCs6vAui+5jyB2wQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO+/
K+qB8VU/XGPpy9AW0oLyY8WjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NTg5RkM5MkUyRDkxMUVGQUFDMEEyNjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLZMA0GCSqGSIb3DQEB
CwUAA4IBAQC5YFlVJ2zB/rJELOewg6QCbuwK0iolPbPl1VNNy8tzJBi4UR8nykro
480yhNfaMGhT1aSqOXfLS0ohma2FGPqEBk2qM4wtPNaJHBJK0jAZ3tKpiZw1UHZY
PGnCzS4N0e9QCEjK9jMcJXUV/0bDRJ9fhcPL/Jw4Ey8Xv2SWeU9ewlOCXcvsoUdG
Gt5fNLx4YQdv0W/eF3OlHW9X4DcvPVOd3WI5Bef2FqUwo2/YSwbOKsYRwrNUL3uU
LVMceATxsuFQWJtlA7ToXUhzadi9B6KBMNEg64nkyTQ3YvjRXsRDRtJ4EvCASKWS
uZ6GdizgZ4jC6QQIdM9PdBtlEJ5A8rAn
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:09 2025 by rpki-client