Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D1E7F88F2E111EFA8936A64762E951A.roa
File: 7D1E7F88F2E111EFA8936A64762E951A.roa (raw, json)
Hash identifier: c+nK25ioZ80nv+iB+QNLgj/wZAqpnq/qIcXAReSqwkk=
Subject key identifier: 28:6F:5E:32:54:FB:FD:25:B2:FC:94:59:36:F0:60:50:73:87:A3:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D1E7F88F2E111EFA8936A64762E951A.roa
Signing time: Mon 24 Feb 2025 18:59:35 +0000
ROA not before: Mon 24 Feb 2025 18:59:32 +0000
ROA not after: Mon 07 Apr 2025 18:59:32 +0000
asID: 138915
IP address blocks: 154.223.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89288 (0x15cc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:59:32 2025 GMT
Not After : Apr 7 18:59:32 2025 GMT
Subject: CN=67bcc197-aeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9e:a2:bc:60:7f:86:ab:0a:b1:28:63:28:0d:
a8:66:41:d6:a9:9b:5d:b6:6a:dc:db:b2:13:4d:d0:
5e:5d:b2:b3:f2:f1:fb:7f:50:78:4f:02:b6:c7:a7:
8c:48:c7:21:43:8b:49:67:08:af:c1:7c:fe:9b:88:
33:ac:bd:ac:ce:93:d4:39:4b:12:a2:48:72:93:d7:
a0:64:c8:aa:89:73:16:40:46:9d:16:a9:25:0c:c1:
71:54:b6:57:84:aa:2e:77:97:6d:c2:5f:c5:9c:ff:
b0:3d:ba:e8:fc:22:fe:ba:73:60:97:78:a6:8c:2d:
4a:2a:07:3c:2f:86:6a:11:ae:fc:2f:c8:bb:8d:1b:
fe:40:22:94:f4:63:f2:26:1c:06:45:ad:9d:3b:b0:
5d:37:37:3f:ca:04:d7:3a:c1:d6:11:32:10:84:1e:
b5:4a:9f:da:64:63:ad:eb:06:c0:45:d3:9e:dc:2e:
5c:6d:80:49:27:ea:29:f4:a3:bc:d6:88:5c:9d:2a:
6d:c1:4c:15:36:ea:d0:f4:23:99:7a:be:30:13:bc:
22:5d:00:8d:15:05:75:8f:58:4b:93:82:7e:72:18:
c6:1b:bc:fc:df:6e:ac:be:9f:a0:e7:45:ea:e9:c4:
c2:6b:06:eb:c6:cc:70:83:93:da:bb:02:d6:9d:bc:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6F:5E:32:54:FB:FD:25:B2:FC:94:59:36:F0:60:50:73:87:A3:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D1E7F88F2E111EFA8936A64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.32.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c7:00:9d:16:c7:58:84:d1:51:fc:df:5b:21:6a:27:40:52:
09:1a:b9:32:d9:83:61:fb:44:84:07:a6:d5:2f:b5:c3:3c:f5:
a4:26:65:4a:b0:19:d1:60:66:b6:49:40:bb:70:d4:ee:93:96:
1d:e9:ad:5e:9d:1f:31:a5:ee:40:af:af:6c:4f:c5:f5:0c:5f:
ac:59:f8:de:b2:ee:38:ae:84:8a:aa:d0:2c:42:25:41:ce:f2:
2d:03:e4:c6:04:f0:44:33:d3:2d:29:0a:58:00:42:99:f7:6b:
89:ee:81:66:f8:0f:ee:db:03:5c:f7:8b:27:74:84:34:48:5e:
ff:76:a6:60:1b:96:52:be:4f:f3:4d:5f:7c:a0:9a:83:75:fb:
1d:87:43:38:7b:60:70:75:a8:8c:ff:db:7e:3a:41:02:a8:23:
4f:32:9e:9c:b0:4c:b5:06:af:a7:2e:70:1f:1d:df:b7:4b:82:
e9:64:8a:73:41:38:b7:2c:4c:f4:c8:62:5f:75:cf:85:1e:ac:
57:2d:72:2c:48:9a:cf:5e:ea:0a:0b:16:e8:1f:0a:94:2b:9c:
22:74:bc:82:df:a1:64:48:d6:01:8e:a5:58:be:da:bb:36:8b:
80:9d:2b:84:b9:b0:75:08:ef:dd:a9:b6:4c:66:de:45:94:39:
5d:7d:5f:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVzIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTg1OTMyWhcNMjUwNDA3MTg1OTMyWjAYMRYw
FAYDVQQDEw02N2JjYzE5Ny1hZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA356ivGB/hqsKsShjKA2oZkHWqZtdtmrc27ITTdBeXbKz8vH7f1B4TwK2
x6eMSMchQ4tJZwivwXz+m4gzrL2szpPUOUsSokhyk9egZMiqiXMWQEadFqklDMFx
VLZXhKoud5dtwl/FnP+wPbro/CL+unNgl3imjC1KKgc8L4ZqEa78L8i7jRv+QCKU
9GPyJhwGRa2dO7BdNzc/ygTXOsHWETIQhB61Sp/aZGOt6wbARdOe3C5cbYBJJ+op
9KO81ohcnSptwUwVNurQ9COZer4wE7wiXQCNFQV1j1hLk4J+chjGG7z8326svp+g
50Xq6cTCawbrxsxwg5PauwLWnbwZiQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFChv
XjJU+/0lsvyUWTbwYFBzh6P3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RDFFN0Y4OEYyRTExMUVGQTg5MzZBNjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8gMA0GCSqGSIb3DQEB
CwUAA4IBAQBExwCdFsdYhNFR/N9bIWonQFIJGrky2YNh+0SEB6bVL7XDPPWkJmVK
sBnRYGa2SUC7cNTuk5Yd6a1enR8xpe5Ar69sT8X1DF+sWfjesu44roSKqtAsQiVB
zvItA+TGBPBEM9MtKQpYAEKZ92uJ7oFm+A/u2wNc94sndIQ0SF7/dqZgG5ZSvk/z
TV98oJqDdfsdh0M4e2BwdaiM/9t+OkECqCNPMp6csEy1Bq+nLnAfHd+3S4LpZIpz
QTi3LEz0yGJfdc+FHqxXLXIsSJrPXuoKCxboHwqUK5widLyC36FkSNYBjqVYvtq7
NouAnSuEubB1CO/dqbZMZt5FlDldfV8Q
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:49 2025 by rpki-client