Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA5B5F6C36611EFBD2C02A8762E951A.roa
File: 7EA5B5F6C36611EFBD2C02A8762E951A.roa (raw, json)
Hash identifier: eV7EIEC/GdkkTppoURrhezuqZK9nU7z4v2M4U5HvkEw=
Subject key identifier: 23:A8:7F:31:88:1A:96:15:75:CC:F8:73:1A:03:D5:1D:7F:3B:41:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA5B5F6C36611EFBD2C02A8762E951A.roa
Signing time: Thu 26 Dec 2024 08:50:45 +0000
ROA not before: Thu 26 Dec 2024 08:50:41 +0000
ROA not after: Sun 12 Dec 2027 08:50:41 +0000
asID: 17561
IP address blocks: 154.94.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75450 (0x126ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:50:41 2024 GMT
Not After : Dec 12 08:50:41 2027 GMT
Subject: CN=676d18e5-481b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:c3:21:e8:61:76:66:fb:0b:b5:37:58:00:
eb:33:a0:ff:f4:3f:84:e4:49:d0:83:31:30:e8:41:
4e:b6:32:f9:bf:56:22:cc:b4:9d:0c:7c:3b:e3:45:
04:32:21:5f:82:05:16:51:e8:46:1b:92:95:1c:a1:
a8:b6:35:9c:49:3a:7e:b0:56:eb:de:78:09:c2:47:
13:7c:86:35:99:f0:f9:3a:7b:bf:9b:b2:c2:3e:ba:
9a:68:99:cb:46:59:5f:cb:6f:d7:0e:1c:9a:02:9c:
70:93:bc:ca:a5:8c:1e:1b:2b:72:17:50:db:20:aa:
9c:ad:62:67:89:fb:e8:d2:62:66:32:66:c5:47:ce:
3e:06:79:de:07:e4:4a:f4:28:b2:15:46:2a:7d:2c:
9d:11:1b:29:fd:c4:aa:86:0c:b7:42:75:e7:72:97:
d4:c1:89:bf:7c:df:4e:55:6b:04:66:b9:e0:97:c3:
17:ac:c9:c5:6d:74:45:e8:42:b6:ad:93:67:30:5c:
b1:4e:c9:4e:09:b3:4d:8e:9c:56:78:19:b5:46:72:
78:b2:7f:d3:0f:97:d5:99:32:48:c0:d3:26:43:d0:
6a:7b:e7:97:9c:4a:36:3b:02:cc:8a:94:76:1b:76:
c9:ae:f5:65:c1:58:36:9f:e6:bd:6c:0a:2b:3b:dc:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:7F:31:88:1A:96:15:75:CC:F8:73:1A:03:D5:1D:7F:3B:41:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EA5B5F6C36611EFBD2C02A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.18.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:dd:4c:dd:78:d0:ea:e7:aa:da:df:c4:fa:76:6c:84:7b:04:
ee:9d:e8:dc:d0:14:d3:a1:41:3b:9a:f0:1f:cd:5a:9f:40:02:
1d:40:d6:2d:55:06:db:ed:af:33:b9:6a:8d:6a:9b:31:52:ab:
12:12:c0:ca:ba:7a:7a:c6:9f:52:a7:c2:25:05:3f:80:5f:14:
86:31:a9:e8:39:2c:3d:bc:ee:c9:a0:f5:8c:d7:44:7e:51:4c:
a6:74:30:72:94:44:c1:50:a2:e5:3c:8c:84:a1:0d:cb:2a:9a:
cc:10:2c:94:75:bd:ba:0e:6c:69:f0:11:97:24:d1:2f:d0:96:
c6:f2:44:ef:f7:19:8d:17:4c:d6:e1:eb:af:45:0f:7c:cf:6f:
c3:f8:34:e3:45:df:19:fe:ad:7e:4d:19:ed:22:33:55:84:fc:
58:68:e5:49:70:55:20:f6:ac:b4:f4:e5:5f:05:84:a3:5c:aa:
81:38:f9:72:eb:a4:a2:8b:da:8e:d8:e2:76:f1:b6:a1:15:fd:
87:67:e4:05:8e:c1:28:f6:81:d5:c7:26:33:92:2a:59:b7:38:
15:18:10:61:80:93:ef:65:a5:10:73:59:77:dc:3c:1a:50:4d:
57:5f:83:a0:51:86:d1:ed:93:90:b9:d3:c3:3a:c7:52:de:08:
b0:72:ce:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASa6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDg1MDQxWhcNMjcxMjEyMDg1MDQxWjAYMRYw
FAYDVQQDEw02NzZkMThlNS00ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA18zDIehhdmb7C7U3WADrM6D/9D+E5EnQgzEw6EFOtjL5v1YizLSdDHw7
40UEMiFfggUWUehGG5KVHKGotjWcSTp+sFbr3ngJwkcTfIY1mfD5Onu/m7LCPrqa
aJnLRllfy2/XDhyaApxwk7zKpYweGytyF1DbIKqcrWJnifvo0mJmMmbFR84+Bnne
B+RK9CiyFUYqfSydERsp/cSqhgy3QnXncpfUwYm/fN9OVWsEZrngl8MXrMnFbXRF
6EK2rZNnMFyxTslOCbNNjpxWeBm1RnJ4sn/TD5fVmTJIwNMmQ9Bqe+eXnEo2OwLM
ipR2G3bJrvVlwVg2n+a9bAorO9wOKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCOo
fzGIGpYVdcz4cxoD1R1/O0GoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RUE1QjVGNkMzNjYxMUVGQkQyQzAyQTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4SMA0GCSqGSIb3DQEB
CwUAA4IBAQC/3UzdeNDq56ra38T6dmyEewTunejc0BTToUE7mvAfzVqfQAIdQNYt
VQbb7a8zuWqNapsxUqsSEsDKunp6xp9Sp8IlBT+AXxSGManoOSw9vO7JoPWM10R+
UUymdDBylETBUKLlPIyEoQ3LKprMECyUdb26Dmxp8BGXJNEv0JbG8kTv9xmNF0zW
4euvRQ98z2/D+DTjRd8Z/q1+TRntIjNVhPxYaOVJcFUg9qy09OVfBYSjXKqBOPly
66Sii9qO2OJ28bahFf2HZ+QFjsEo9oHVxyYzkipZtzgVGBBhgJPvZaUQc1l33Dwa
UE1XX4OgUYbR7ZOQudPDOsdS3giwcs49
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:26 2025 by rpki-client