Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793C2220C92A11EFB271C248762E951A.roa
File: 793C2220C92A11EFB271C248762E951A.roa (raw, json)
Hash identifier: ZUOhv/QRYSK6DA119hsy+QzfEBPMJXqAAV5mSfuV0rg=
Subject key identifier: AC:6D:1F:A4:01:8A:09:9E:6A:9A:A2:1D:A8:3A:65:6B:AB:75:45:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013377
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793C2220C92A11EFB271C248762E951A.roa
Signing time: Thu 02 Jan 2025 16:56:13 +0000
ROA not before: Thu 02 Jan 2025 16:56:10 +0000
ROA not after: Mon 13 Dec 2027 16:56:10 +0000
asID: 17561
IP address blocks: 154.222.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78711 (0x13377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:56:10 2025 GMT
Not After : Dec 13 16:56:10 2027 GMT
Subject: CN=6776c52d-88cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:8e:e8:73:c7:56:99:2b:91:92:45:b1:84:
81:b5:9d:bb:86:ee:e7:7e:98:ed:61:8f:b2:54:59:
9c:2b:3b:72:72:09:5d:e9:5d:2b:95:35:14:b1:68:
12:75:ff:25:a3:8c:f1:83:dd:a1:3e:a2:e4:74:6a:
fa:e3:ef:c6:89:39:7b:c1:99:ad:64:6f:51:4e:a0:
2a:7f:14:71:41:2d:75:3b:c9:ca:e9:bf:0c:24:7e:
eb:b9:e8:3d:3f:ea:81:32:05:69:60:34:9a:61:04:
d1:88:07:8a:a7:7b:ba:fb:93:98:ac:68:6e:c1:c6:
2f:87:59:41:74:ea:73:2a:9e:8e:97:a8:2e:61:44:
cb:f1:03:07:e9:5c:21:13:a8:41:dc:00:57:63:04:
65:41:74:a6:8b:b2:37:2f:7f:15:0c:bf:a3:79:61:
8c:b1:f5:ae:c1:27:cb:e6:fa:09:42:45:7a:dc:90:
d1:b7:ea:aa:27:90:80:1f:98:fe:9c:21:ec:c0:17:
ba:ea:14:2e:75:ba:36:9b:ec:14:b8:d4:d3:df:a6:
bc:f7:bc:f2:43:ac:66:c4:c4:c6:76:c1:9d:26:4f:
42:40:5b:38:5d:74:77:ac:c1:5e:b7:05:e6:f1:8d:
75:f6:36:09:16:d0:e4:73:56:1c:1e:c9:55:44:98:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:1F:A4:01:8A:09:9E:6A:9A:A2:1D:A8:3A:65:6B:AB:75:45:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/793C2220C92A11EFB271C248762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.135.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:51:2a:0e:c7:e7:06:78:70:59:dc:23:7f:39:5a:3c:12:48:
f0:0a:ff:61:db:2a:d6:fa:78:69:db:b7:38:54:3a:ab:b7:d9:
0a:1b:bb:5a:b2:08:11:48:e8:57:28:28:ee:10:68:e5:bb:00:
05:cb:0f:d3:e5:d1:a4:a5:75:3c:77:a3:63:ee:bb:04:8f:40:
c8:a7:07:e7:14:b3:a9:a0:b5:8a:3b:a7:f0:59:0f:d7:60:19:
6a:90:de:96:65:17:b5:61:75:37:86:aa:a6:6e:3f:ca:c5:68:
a0:0e:da:58:bc:26:19:32:7c:53:ec:b5:48:15:97:6e:9e:56:
9e:9b:2f:30:a4:d5:30:0e:e4:a6:a8:1d:f8:60:4a:95:58:ff:
76:ac:ca:53:7d:02:81:62:36:c0:05:9c:f1:ed:ef:5e:12:69:
b0:05:be:ca:9d:f9:79:b8:bb:41:ae:8b:0c:f4:b3:5e:f0:dc:
28:63:1a:77:d1:2c:21:f5:ec:3b:f4:d4:db:72:7c:16:9c:90:
37:25:7d:5d:7c:84:ba:3c:7e:81:45:ed:f9:bc:97:1a:02:70:
3c:9a:85:52:59:4c:b0:3e:bf:c9:78:55:79:ee:f4:9e:d4:4b:
ce:c1:4f:ea:56:23:27:19:6f:a6:5e:f0:c7:1e:7d:3c:9c:fb:
dc:50:84:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATN3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTY1NjEwWhcNMjcxMjEzMTY1NjEwWjAYMRYw
FAYDVQQDEw02Nzc2YzUyZC04OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoCGO6HPHVpkrkZJFsYSBtZ27hu7nfpjtYY+yVFmcKztycgld6V0rlTUU
sWgSdf8lo4zxg92hPqLkdGr64+/GiTl7wZmtZG9RTqAqfxRxQS11O8nK6b8MJH7r
ueg9P+qBMgVpYDSaYQTRiAeKp3u6+5OYrGhuwcYvh1lBdOpzKp6Ol6guYUTL8QMH
6VwhE6hB3ABXYwRlQXSmi7I3L38VDL+jeWGMsfWuwSfL5voJQkV63JDRt+qqJ5CA
H5j+nCHswBe66hQudbo2m+wUuNTT36a897zyQ6xmxMTGdsGdJk9CQFs4XXR3rMFe
twXm8Y119jYJFtDkc1YcHslVRJi6WQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKxt
H6QBigmeapqiHag6ZWurdUWGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTNDMjIyMEM5MkExMUVGQjI3MUMyNDg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6HMA0GCSqGSIb3DQEB
CwUAA4IBAQDJUSoOx+cGeHBZ3CN/OVo8EkjwCv9h2yrW+nhp27c4VDqrt9kKG7ta
sggRSOhXKCjuEGjluwAFyw/T5dGkpXU8d6Nj7rsEj0DIpwfnFLOpoLWKO6fwWQ/X
YBlqkN6WZRe1YXU3hqqmbj/KxWigDtpYvCYZMnxT7LVIFZdunlaemy8wpNUwDuSm
qB34YEqVWP92rMpTfQKBYjbABZzx7e9eEmmwBb7Knfl5uLtBrosM9LNe8NwoYxp3
0Swh9ew79NTbcnwWnJA3JX1dfIS6PH6BRe35vJcaAnA8moVSWUywPr/JeFV57vSe
1EvOwU/qViMnGW+mXvDHHn08nPvcUIRv
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:58 2025 by rpki-client