Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8506A564C8A611EFAB1CBE79762E951A.roa
File: 8506A564C8A611EFAB1CBE79762E951A.roa (raw, json)
Hash identifier: nH19eXQM25IS1X3MA9kVXmQ/C1yLvqXCkxl+2Lc0HHc=
Subject key identifier: FD:3E:88:F8:D7:97:DB:DB:A6:93:E4:CC:0A:50:69:E3:28:34:DC:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01314E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8506A564C8A611EFAB1CBE79762E951A.roa
Signing time: Thu 02 Jan 2025 01:11:39 +0000
ROA not before: Thu 02 Jan 2025 01:11:36 +0000
ROA not after: Sun 12 Dec 2027 01:11:36 +0000
asID: 17561
IP address blocks: 154.220.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78158 (0x1314e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:11:36 2025 GMT
Not After : Dec 12 01:11:36 2027 GMT
Subject: CN=6775e7cb-5e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:bb:fd:e4:b3:61:46:36:b5:19:9a:71:1d:
0a:5b:63:2c:8c:fe:2a:88:e9:18:6e:02:26:9a:9b:
cf:ae:64:4d:a8:0b:e0:6f:85:0b:b4:e5:a7:8e:f8:
0c:bc:a1:5e:ee:a1:e2:46:2b:d8:88:47:cf:c6:32:
49:2f:0e:3a:c2:62:3b:07:31:3c:13:43:d9:81:ed:
fd:ba:5c:ed:aa:dc:1e:44:6e:2b:33:76:8e:2b:a0:
4b:f0:04:1d:a8:57:3b:78:c8:90:0b:c7:d5:01:61:
cc:f0:2a:9b:1f:90:df:f4:3f:5f:fa:b4:41:96:eb:
c1:28:91:93:a4:76:f7:46:ac:39:ae:e7:1e:39:ef:
be:4b:03:95:ec:1f:1e:6f:db:3e:35:c2:c4:f1:c6:
d0:5e:52:53:dd:06:f6:02:28:6b:0a:59:80:ec:02:
94:e2:67:9e:18:3e:84:62:5b:73:70:84:24:a1:e5:
41:c4:b5:65:ff:d7:be:5c:9f:42:a6:de:81:56:b2:
3f:99:1f:b6:a9:dc:6a:fb:b5:38:cc:1a:ca:f2:2c:
f5:95:93:ae:e4:53:5d:df:f9:9e:ea:cc:ff:0c:ff:
8b:68:9c:d3:28:ce:8d:2f:f3:ba:f8:e2:9d:8f:49:
72:1f:93:8a:d0:3b:94:6e:c8:c4:17:e3:ac:7f:68:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:88:F8:D7:97:DB:DB:A6:93:E4:CC:0A:50:69:E3:28:34:DC:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8506A564C8A611EFAB1CBE79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.130.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0f:60:a8:a1:a0:43:15:8f:f8:29:41:ef:0f:3c:4c:f4:ba:
51:53:c8:30:87:a0:80:3f:bd:cb:c2:0e:e4:51:52:fc:50:11:
b2:e8:28:38:ff:53:c4:30:f8:67:c1:bd:4b:74:b6:28:f3:7e:
f6:9b:87:51:b7:c3:a0:42:1b:f5:10:91:4f:9e:5b:2a:fb:ee:
38:9b:9e:3c:82:35:13:b3:98:fa:ba:05:fe:89:22:52:c3:14:
9e:e8:3d:a2:b3:cb:51:9d:2d:46:f6:1c:12:ea:01:7b:74:bf:
d2:e6:8f:74:d6:96:c0:d3:2c:c3:d2:70:5a:a8:11:d2:51:27:
e9:dc:c6:67:fb:16:f3:f8:b3:a8:e1:24:1f:dd:c8:5b:ed:93:
d2:59:58:fe:8a:83:c3:76:65:f5:f6:10:ba:ed:65:41:85:9b:
e8:19:34:15:1c:df:eb:f7:91:a4:dc:96:cc:63:c4:10:aa:df:
82:2b:fe:3a:ec:5a:45:ef:0d:92:58:1e:50:d8:c5:ea:8e:98:
fd:3a:41:96:91:df:b7:b1:b8:1e:0c:8e:10:50:8f:6b:d8:2c:
5f:d6:b3:6a:f7:d0:02:5c:36:78:1b:a3:26:7d:c9:9c:ce:0f:
60:7a:58:74:15:bc:26:f7:69:dc:2b:b9:36:d9:30:48:a8:42:
5d:b6:05:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATFOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDExMTM2WhcNMjcxMjEyMDExMTM2WjAYMRYw
FAYDVQQDEw02Nzc1ZTdjYi01ZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtmu7/eSzYUY2tRmacR0KW2MsjP4qiOkYbgImmpvPrmRNqAvgb4ULtOWn
jvgMvKFe7qHiRivYiEfPxjJJLw46wmI7BzE8E0PZge39ulztqtweRG4rM3aOK6BL
8AQdqFc7eMiQC8fVAWHM8CqbH5Df9D9f+rRBluvBKJGTpHb3Rqw5ruceOe++SwOV
7B8eb9s+NcLE8cbQXlJT3Qb2AihrClmA7AKU4meeGD6EYltzcIQkoeVBxLVl/9e+
XJ9Cpt6BVrI/mR+2qdxq+7U4zBrK8iz1lZOu5FNd3/me6sz/DP+LaJzTKM6NL/O6
+OKdj0lyH5OK0DuUbsjEF+Osf2gu/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP0+
iPjXl9vbppPkzApQaeMoNNylMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NTA2QTU2NEM4QTYxMUVGQUIxQ0JFNzk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtyCMA0GCSqGSIb3DQEB
CwUAA4IBAQCaD2CooaBDFY/4KUHvDzxM9LpRU8gwh6CAP73Lwg7kUVL8UBGy6Cg4
/1PEMPhnwb1LdLYo8372m4dRt8OgQhv1EJFPnlsq++44m548gjUTs5j6ugX+iSJS
wxSe6D2is8tRnS1G9hwS6gF7dL/S5o901pbA0yzD0nBaqBHSUSfp3MZn+xbz+LOo
4SQf3chb7ZPSWVj+ioPDdmX19hC67WVBhZvoGTQVHN/r95Gk3JbMY8QQqt+CK/46
7FpF7w2SWB5Q2MXqjpj9OkGWkd+3sbgeDI4QUI9r2Cxf1rNq99ACXDZ4G6Mmfcmc
zg9gelh0Fbwm92ncK7k22TBIqEJdtgWh
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:51 2025 by rpki-client