Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A4FB62C93311EF866FAF80762E951A.roa
File: 91A4FB62C93311EF866FAF80762E951A.roa (raw, json)
Hash identifier: JlkT4RvGN15sQeqsyOexRFAt8IchKb38dOkoCeI/3YI=
Subject key identifier: 7E:CA:30:DF:AF:10:02:19:25:3D:17:55:47:FD:87:9F:F4:9E:96:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A4FB62C93311EF866FAF80762E951A.roa
Signing time: Thu 02 Jan 2025 18:01:20 +0000
ROA not before: Thu 02 Jan 2025 18:01:16 +0000
ROA not after: Mon 13 Dec 2027 18:01:16 +0000
asID: 17561
IP address blocks: 154.222.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78783 (0x133bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:01:16 2025 GMT
Not After : Dec 13 18:01:16 2027 GMT
Subject: CN=6776d46f-b9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:e8:3c:37:31:c0:97:d5:37:bc:18:9b:79:
4e:6b:b5:7c:af:05:74:ae:b2:4b:16:89:2a:33:d4:
f7:12:07:39:a2:ad:d4:85:5f:3d:a3:77:c4:93:a3:
d9:f8:b5:37:cd:ce:fc:eb:38:93:c4:42:e8:a6:37:
50:60:0e:f4:aa:1c:e8:cd:9b:13:64:d3:6d:35:2b:
dd:74:5c:06:ed:90:70:eb:40:5e:99:f2:c2:e9:f8:
cd:8e:f1:19:00:75:2b:dd:a2:ec:b1:f9:d7:d7:64:
44:f5:8f:36:19:4b:3b:21:b2:e7:1b:c2:f4:45:49:
5b:f8:98:b1:b7:f1:7b:90:9f:33:bb:9c:6e:cb:29:
00:61:b3:1c:ea:ae:1e:a8:f6:6e:e5:d2:6f:3c:c0:
ae:30:58:a0:7e:af:7a:5b:0c:08:43:e0:ad:3a:93:
d9:cd:e2:27:da:f8:49:7a:af:c2:ac:6e:9c:5e:63:
a5:d5:5a:f2:46:f2:f5:1a:c8:05:ff:2d:2a:8d:f4:
3c:67:4d:27:4a:0c:91:a6:0f:be:84:65:b5:b9:26:
06:af:44:e8:c7:9e:03:c3:70:4b:92:2d:0b:26:d6:
5a:30:fd:f8:61:d5:cd:cc:f3:e1:5a:d8:22:28:e2:
12:30:f3:d0:7d:7b:ff:65:fd:82:03:fb:89:3e:c3:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CA:30:DF:AF:10:02:19:25:3D:17:55:47:FD:87:9F:F4:9E:96:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A4FB62C93311EF866FAF80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.173.0/24
Signature Algorithm: sha256WithRSAEncryption
17:24:0b:58:75:68:ac:68:a7:5f:fb:bf:60:fc:0d:40:84:7e:
fb:ab:78:52:73:c7:43:ff:c9:79:fe:e0:6f:31:cc:a5:40:48:
5e:18:6f:ac:4a:c7:fc:17:0f:c9:d4:d6:8b:ed:32:e4:e1:48:
11:08:d3:55:e0:84:3b:c4:f0:50:36:20:e5:08:4d:5a:fc:df:
3e:1b:c4:24:5c:a0:66:1d:b6:61:1f:f6:ee:2e:e0:19:d5:76:
6e:f7:31:d7:f1:38:33:ba:fb:86:2a:ec:27:ec:05:c3:cd:a8:
c5:78:7b:01:3d:d5:59:a9:c9:fe:90:28:09:f6:d7:fa:4a:ee:
8d:d2:ca:21:d6:ce:68:cb:55:67:35:38:4f:45:4f:ef:99:7d:
fb:47:34:3b:cd:78:ee:ce:f6:f4:f1:9b:fc:cf:89:c1:a3:5f:
61:ce:fb:7f:28:1f:03:b7:66:78:92:5b:86:00:ab:f3:74:13:
f3:4a:b6:34:8e:b9:2c:2b:eb:57:f3:af:ae:ad:f1:34:bb:aa:
e3:47:c0:c5:59:12:95:4f:b3:68:01:28:d3:29:af:4e:05:aa:
0b:48:6c:d0:3a:d5:5a:93:81:8f:a7:b4:50:ec:e1:1b:50:7b:
9f:73:b6:53:53:76:b0:3a:43:e4:1e:a1:ac:95:66:ac:9c:25:
a1:86:53:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATO/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTgwMTE2WhcNMjcxMjEzMTgwMTE2WjAYMRYw
FAYDVQQDEw02Nzc2ZDQ2Zi1iOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAplPoPDcxwJfVN7wYm3lOa7V8rwV0rrJLFokqM9T3Egc5oq3UhV89o3fE
k6PZ+LU3zc786ziTxELopjdQYA70qhzozZsTZNNtNSvddFwG7ZBw60BemfLC6fjN
jvEZAHUr3aLssfnX12RE9Y82GUs7IbLnG8L0RUlb+Jixt/F7kJ8zu5xuyykAYbMc
6q4eqPZu5dJvPMCuMFigfq96WwwIQ+CtOpPZzeIn2vhJeq/CrG6cXmOl1VryRvL1
GsgF/y0qjfQ8Z00nSgyRpg++hGW1uSYGr0Tox54Dw3BLki0LJtZaMP34YdXNzPPh
WtgiKOISMPPQfXv/Zf2CA/uJPsPsDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH7K
MN+vEAIZJT0XVUf9h5/0npYIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MUE0RkI2MkM5MzMxMUVGODY2RkFGODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6tMA0GCSqGSIb3DQEB
CwUAA4IBAQAXJAtYdWisaKdf+79g/A1AhH77q3hSc8dD/8l5/uBvMcylQEheGG+s
Ssf8Fw/J1NaL7TLk4UgRCNNV4IQ7xPBQNiDlCE1a/N8+G8QkXKBmHbZhH/buLuAZ
1XZu9zHX8TgzuvuGKuwn7AXDzajFeHsBPdVZqcn+kCgJ9tf6Su6N0soh1s5oy1Vn
NThPRU/vmX37RzQ7zXjuzvb08Zv8z4nBo19hzvt/KB8Dt2Z4kluGAKvzdBPzSrY0
jrksK+tX86+urfE0u6rjR8DFWRKVT7NoASjTKa9OBaoLSGzQOtVak4GPp7RQ7OEb
UHufc7ZTU3awOkPkHqGslWasnCWhhlPN
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:52:19 2025 by rpki-client