Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AF9E1EFF3211EFBB105747762E951A.roa
File: 75AF9E1EFF3211EFBB105747762E951A.roa (raw, json)
Hash identifier: wd3GPNUVG2CZTlAxbYZEF1TQKgMbz1nYC/st9NvUj4k=
Subject key identifier: F5:13:76:9E:1A:A3:C5:A6:80:72:04:BF:01:02:CA:E9:EE:8C:2F:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AF9E1EFF3211EFBB105747762E951A.roa
Signing time: Wed 12 Mar 2025 11:09:26 +0000
ROA not before: Wed 12 Mar 2025 11:09:22 +0000
ROA not after: Thu 24 Apr 2025 11:09:22 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95224 (0x173f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 11:09:22 2025 GMT
Not After : Apr 24 11:09:22 2025 GMT
Subject: CN=67d16b66-175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:45:7d:3d:ea:16:17:51:f1:49:10:c7:d3:
58:a3:eb:83:8e:75:e3:a1:5d:a0:7d:ed:51:fb:63:
9f:71:9a:56:17:68:63:e7:dc:f9:d4:dd:7a:04:4a:
87:9d:d2:0b:ab:e1:17:27:2d:38:6d:92:8d:33:97:
fd:b2:72:0a:2b:8e:06:b0:de:2e:01:c3:67:44:60:
ae:f5:06:3a:3a:d0:58:6e:64:92:40:ce:f6:f4:84:
8b:dc:64:13:31:77:57:0c:31:7d:2d:42:f2:d8:49:
f5:bf:ab:ff:c4:20:f5:34:80:32:f8:c7:b7:b6:63:
5d:51:07:11:32:ce:bb:b4:ee:72:73:27:ff:8d:62:
de:25:56:35:d9:65:02:b8:82:d1:c8:91:f7:2d:27:
ec:18:10:03:c4:b9:0e:e8:5b:75:8b:32:7a:6b:0e:
8a:88:3b:23:d1:05:72:ee:7d:b7:3e:04:3e:d3:93:
83:01:ed:45:19:4c:f7:16:67:5f:e6:f2:78:88:77:
0a:70:79:57:b6:f4:c0:74:90:48:c0:1c:e1:ce:7d:
c8:ab:2f:db:45:45:fe:75:1e:dd:0f:bd:d4:4a:e1:
c4:16:4c:61:da:2c:4c:0e:7a:82:14:c3:85:93:36:
c6:e0:c4:1b:f9:25:76:df:6c:eb:47:e3:12:29:b5:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:76:9E:1A:A3:C5:A6:80:72:04:BF:01:02:CA:E9:EE:8C:2F:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75AF9E1EFF3211EFBB105747762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
48:55:f0:f7:6f:d2:7b:7e:b3:1e:52:e0:08:29:1d:96:d6:75:
ab:28:f4:4b:aa:8e:f8:7e:34:98:10:4f:2d:25:fa:7d:30:9e:
ca:7b:af:c9:e7:7d:0a:11:2f:c1:d9:7d:f4:40:6b:83:76:dc:
18:74:3b:39:aa:9f:70:29:50:ba:8d:7b:7f:10:2c:8a:aa:74:
91:5e:52:11:bc:ee:ee:3e:3a:88:1b:80:57:e8:3e:aa:c6:7c:
01:16:92:cf:d0:81:70:b6:b0:dc:6a:95:b4:f6:3d:0b:64:b5:
43:42:64:f4:5e:5e:a0:8a:8c:7e:65:fc:99:a7:fd:95:b7:a5:
f5:4b:fc:f3:e1:df:4b:d1:89:51:69:c5:aa:f0:05:ee:50:61:
87:52:4e:0a:b2:0d:7e:9d:41:90:de:82:01:b7:60:ba:ff:42:
b1:93:c7:93:1c:21:46:c4:12:68:38:e9:61:27:39:9c:6f:1e:
69:53:e0:c4:8f:90:f4:ef:55:42:7b:ce:d5:d6:d6:e0:4d:1e:
a4:9e:a0:87:30:ba:da:1f:99:26:32:40:1c:af:fb:27:10:6e:
5f:41:b0:73:47:be:62:65:c4:eb:58:a9:c5:33:7f:f6:4f:20:
12:a8:fa:7b:5f:f3:ef:ff:95:93:eb:6d:c1:db:fe:d0:2f:9a:
73:9e:d1:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXP4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEyMTEwOTIyWhcNMjUwNDI0MTEwOTIyWjAYMRYw
FAYDVQQDEw02N2QxNmI2Ni0xNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzmxFfT3qFhdR8UkQx9NYo+uDjnXjoV2gfe1R+2OfcZpWF2hj59z51N16
BEqHndILq+EXJy04bZKNM5f9snIKK44GsN4uAcNnRGCu9QY6OtBYbmSSQM729ISL
3GQTMXdXDDF9LULy2En1v6v/xCD1NIAy+Me3tmNdUQcRMs67tO5ycyf/jWLeJVY1
2WUCuILRyJH3LSfsGBADxLkO6Ft1izJ6aw6KiDsj0QVy7n23PgQ+05ODAe1FGUz3
Fmdf5vJ4iHcKcHlXtvTAdJBIwBzhzn3Iqy/bRUX+dR7dD73USuHEFkxh2ixMDnqC
FMOFkzbG4MQb+SV232zrR+MSKbW2GwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPUT
dp4ao8WmgHIEvwECyunujC9UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NUFGOUUxRUZGMzIxMUVGQkIxMDU3NDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQBIVfD3b9J7frMeUuAIKR2W1nWrKPRLqo74fjSYEE8tJfp9MJ7Ke6/J
530KES/B2X30QGuDdtwYdDs5qp9wKVC6jXt/ECyKqnSRXlIRvO7uPjqIG4BX6D6q
xnwBFpLP0IFwtrDcapW09j0LZLVDQmT0Xl6giox+ZfyZp/2Vt6X1S/zz4d9L0YlR
acWq8AXuUGGHUk4Ksg1+nUGQ3oIBt2C6/0Kxk8eTHCFGxBJoOOlhJzmcbx5pU+DE
j5D071VCe87V1tbgTR6knqCHMLraH5kmMkAcr/snEG5fQbBzR75iZcTrWKnFM3/2
TyASqPp7X/Pv/5WT623B2/7QL5pzntH5
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:16 2025 by rpki-client