Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DA649FEF35E11EF99431ABB762E951A.roa
File: 7DA649FEF35E11EF99431ABB762E951A.roa (raw, json)
Hash identifier: FpO8ni4UuaK/EOWPMHcwQeOKtao6jBUxFxQ4T08ZAhw=
Subject key identifier: E2:DC:64:D8:BA:8D:36:29:AD:C1:87:3A:B0:9E:34:EC:82:76:A8:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DA649FEF35E11EF99431ABB762E951A.roa
Signing time: Tue 25 Feb 2025 09:54:23 +0000
ROA not before: Tue 25 Feb 2025 09:54:19 +0000
ROA not after: Sat 19 Feb 2028 09:54:19 +0000
asID: 17561
IP address blocks: 154.83.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89626 (0x15e1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:54:19 2025 GMT
Not After : Feb 19 09:54:19 2028 GMT
Subject: CN=67bd934f-7092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:29:4a:bd:0d:a2:61:ae:d4:3f:61:c3:1f:
1c:c1:1b:5f:ff:0e:85:39:06:63:a0:24:1d:26:57:
bd:2a:cd:0b:6e:c6:2d:80:29:3c:7a:68:67:6f:da:
e0:98:83:b0:3a:d4:1f:91:bb:b4:99:14:52:47:1a:
62:22:fb:f3:f8:b2:7a:3f:34:5b:07:df:37:6f:3e:
56:a5:b5:96:9d:e7:e3:34:d8:da:b1:c0:d4:27:2a:
1c:88:32:6b:2d:6e:26:a4:64:6e:15:db:d7:92:9f:
9e:78:cc:ef:98:ab:5f:a2:38:25:db:d4:a8:1d:4d:
17:89:a4:35:06:92:2e:7a:e3:a0:75:b9:7f:21:a7:
6c:e4:31:7e:20:06:f3:91:a9:f3:b0:e2:9f:d0:02:
a8:bd:4c:d7:b3:93:2b:01:ed:ec:18:fa:08:c2:80:
26:12:f3:e8:80:f8:89:b0:38:52:99:5e:25:a7:9e:
56:1b:f0:97:bd:21:cf:6c:de:0c:30:ff:a5:25:cc:
c1:d0:94:84:ca:c9:c7:8f:e4:1a:cd:41:9c:87:5c:
43:89:db:83:cf:ea:c8:d7:64:0b:1d:51:31:96:b0:
53:14:eb:d4:35:6f:04:ad:0a:ed:58:85:b2:03:94:
8a:ea:dc:64:c1:fb:33:67:65:ec:6c:68:ea:db:13:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:64:D8:BA:8D:36:29:AD:C1:87:3A:B0:9E:34:EC:82:76:A8:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DA649FEF35E11EF99431ABB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.101.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bf:8e:b0:bb:5f:2d:00:1f:53:b8:64:26:ef:74:b0:f1:67:
53:3b:fc:c3:94:c8:c5:83:53:7c:0a:fb:31:ba:3c:08:66:c4:
e7:9a:9e:08:b8:50:62:30:15:d9:6a:36:99:71:b9:00:3a:59:
c8:66:dc:4d:9f:53:cd:c0:52:1b:7f:28:f7:ea:4c:6d:6d:60:
41:25:93:3a:fd:82:84:20:a8:c4:e9:e5:b1:e9:cd:20:4d:50:
71:01:a1:25:2b:d2:1a:ff:fd:f1:5c:1a:c9:86:de:c0:7d:f2:
09:57:97:46:9d:1f:a9:a1:db:90:c6:90:63:91:90:e4:1c:5b:
40:3c:a1:14:6e:1d:23:c7:46:26:2a:cd:77:c0:14:9d:dd:95:
07:c5:87:e1:4c:a0:5a:36:8f:f6:b5:54:a2:68:12:1e:5d:d6:
6f:9a:63:6c:6e:e1:d0:51:87:74:ac:48:76:0a:46:1c:33:62:
23:48:07:93:d0:a4:c9:85:fd:1c:37:e2:59:7d:36:eb:ff:d5:
2d:2f:a9:31:6e:94:d4:54:1c:b1:a3:ff:2c:2d:5e:d1:63:54:
c2:50:b5:e9:c8:8c:e5:28:e9:a6:3d:70:c1:1f:15:0b:6a:74:
ee:ce:ef:a8:7e:50:7c:22:75:83:e4:16:0f:74:a7:d2:7d:10:
c3:44:af:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAV4aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MDk1NDE5WhcNMjgwMjE5MDk1NDE5WjAYMRYw
FAYDVQQDEw02N2JkOTM0Zi03MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoacpSr0NomGu1D9hwx8cwRtf/w6FOQZjoCQdJle9Ks0LbsYtgCk8emhn
b9rgmIOwOtQfkbu0mRRSRxpiIvvz+LJ6PzRbB983bz5WpbWWnefjNNjascDUJyoc
iDJrLW4mpGRuFdvXkp+eeMzvmKtfojgl29SoHU0XiaQ1BpIueuOgdbl/Iads5DF+
IAbzkanzsOKf0AKovUzXs5MrAe3sGPoIwoAmEvPogPiJsDhSmV4lp55WG/CXvSHP
bN4MMP+lJczB0JSEysnHj+QazUGch1xDiduDz+rI12QLHVExlrBTFOvUNW8ErQrt
WIWyA5SK6txkwfszZ2XsbGjq2xNiAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOLc
ZNi6jTYprcGHOrCeNOyCdqibMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83REE2NDlGRUYzNUUxMUVGOTk0MzFBQkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlNlMA0GCSqGSIb3DQEB
CwUAA4IBAQCAv46wu18tAB9TuGQm73Sw8WdTO/zDlMjFg1N8CvsxujwIZsTnmp4I
uFBiMBXZajaZcbkAOlnIZtxNn1PNwFIbfyj36kxtbWBBJZM6/YKEIKjE6eWx6c0g
TVBxAaElK9Ia//3xXBrJht7AffIJV5dGnR+poduQxpBjkZDkHFtAPKEUbh0jx0Ym
Ks13wBSd3ZUHxYfhTKBaNo/2tVSiaBIeXdZvmmNsbuHQUYd0rEh2CkYcM2IjSAeT
0KTJhf0cN+JZfTbr/9UtL6kxbpTUVByxo/8sLV7RY1TCULXpyIzlKOmmPXDBHxUL
anTuzu+oflB8InWD5BYPdKfSfRDDRK89
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:05 2025 by rpki-client