Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/959F1B32C91D11EF8930A276762E951A.roa
File: 959F1B32C91D11EF8930A276762E951A.roa (raw, json)
Hash identifier: znCFkEzJsEGDuWqdHa9Gug57LfyaAIXTR+aeMDJhMgc=
Subject key identifier: CD:4B:75:4A:FB:38:F1:FA:3E:80:8E:FF:06:8C:A8:01:F6:67:1F:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01330F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/959F1B32C91D11EF8930A276762E951A.roa
Signing time: Thu 02 Jan 2025 15:23:57 +0000
ROA not before: Thu 02 Jan 2025 15:23:54 +0000
ROA not after: Sat 13 Dec 2025 15:23:54 +0000
asID: 984
IP address blocks: 154.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78607 (0x1330f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:23:54 2025 GMT
Not After : Dec 13 15:23:54 2025 GMT
Subject: CN=6776af8d-5992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:2d:1f:9c:1c:53:d2:0c:59:f3:d9:f2:e2:
0a:f5:90:3a:19:f5:79:ea:4c:4a:aa:dd:f5:54:6e:
d9:30:93:0f:5a:c0:5a:b1:bf:38:d2:9c:9a:f4:58:
06:66:c4:cc:79:48:3f:f2:e7:88:2a:50:53:15:4f:
ff:90:fa:b5:89:b9:07:1e:b6:d0:93:0b:6f:22:56:
aa:3d:d0:c0:5b:e7:86:78:52:05:a6:9d:fc:4a:fd:
98:d7:6d:61:c2:93:6a:d1:e4:cd:77:0d:4e:af:e5:
1b:9e:cd:c3:09:f6:77:0e:01:40:46:be:5f:38:ad:
d6:82:f9:8a:e3:a2:39:ec:3f:42:00:8d:f6:3d:d1:
c3:20:94:74:5e:09:07:d0:35:d8:f5:c6:e7:47:6c:
bc:37:5a:21:87:e0:27:ff:eb:5f:db:7a:5c:7a:08:
d3:d1:6e:6d:d2:2c:90:c9:81:98:ad:ef:cf:0f:9b:
01:92:a4:04:27:97:56:ea:bc:4a:79:12:00:46:12:
89:d6:61:4a:34:08:01:1b:8a:3a:c6:0f:4d:31:61:
af:b4:ab:a5:09:de:7e:52:90:a3:08:19:9d:0a:2c:
cb:02:a2:e4:2b:c0:96:09:d3:8e:b6:98:fa:55:72:
71:64:fc:4e:a5:2a:0c:3b:d1:02:22:82:42:0a:ae:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4B:75:4A:FB:38:F1:FA:3E:80:8E:FF:06:8C:A8:01:F6:67:1F:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/959F1B32C91D11EF8930A276762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3c:b9:78:99:ef:13:db:96:c4:6e:a4:eb:12:26:22:ff:62:
27:55:db:59:68:dd:54:76:a8:51:ca:43:50:ff:ea:81:ff:30:
09:66:71:e6:8c:3b:1b:1b:e1:ba:f3:c4:3b:35:de:7c:d2:c9:
1e:24:df:7e:cd:4b:c1:d2:59:84:47:e1:d5:41:42:51:0d:78:
94:09:43:79:25:12:63:c8:a5:3d:8e:78:eb:a6:df:93:1c:3d:
ba:12:43:ef:f5:1d:fb:ff:79:f2:7f:b6:6f:9d:20:fe:91:51:
0b:b4:23:e7:4d:19:70:4c:e6:16:39:d0:7c:c0:6e:ce:70:23:
54:fd:2a:d4:e9:7e:09:2e:0f:bd:89:73:ba:c2:40:1a:98:0e:
1d:0d:31:99:c8:fd:4e:c8:eb:c2:af:09:40:e8:0b:16:5a:13:
61:c5:3c:6f:9a:54:40:1a:06:b4:0c:5c:0c:04:1d:54:bf:17:
ff:46:f3:91:ce:21:f4:7e:9c:4e:11:f2:f3:84:68:6c:c9:ee:
d4:5a:6e:34:9b:31:0c:e7:69:88:5c:0b:c2:67:9c:10:86:2f:
26:3b:0b:30:da:b4:58:80:2a:2f:33:c6:0f:57:4f:ba:58:92:
a0:4f:e0:70:d2:cb:e5:97:0a:3b:cd:01:b4:c9:45:89:bd:7c:
b8:31:40:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATMPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTUyMzU0WhcNMjUxMjEzMTUyMzU0WjAYMRYw
FAYDVQQDEw02Nzc2YWY4ZC01OTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0hgtH5wcU9IMWfPZ8uIK9ZA6GfV56kxKqt31VG7ZMJMPWsBasb840pya
9FgGZsTMeUg/8ueIKlBTFU//kPq1ibkHHrbQkwtvIlaqPdDAW+eGeFIFpp38Sv2Y
121hwpNq0eTNdw1Or+Ubns3DCfZ3DgFARr5fOK3WgvmK46I57D9CAI32PdHDIJR0
XgkH0DXY9cbnR2y8N1ohh+An/+tf23pcegjT0W5t0iyQyYGYre/PD5sBkqQEJ5dW
6rxKeRIARhKJ1mFKNAgBG4o6xg9NMWGvtKulCd5+UpCjCBmdCizLAqLkK8CWCdOO
tpj6VXJxZPxOpSoMO9ECIoJCCq4McwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM1L
dUr7OPH6PoCO/waMqAH2Zx9WMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NTlGMUIzMkM5MUQxMUVGODkzMEEyNzY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt5MMA0GCSqGSIb3DQEB
CwUAA4IBAQBGPLl4me8T25bEbqTrEiYi/2InVdtZaN1UdqhRykNQ/+qB/zAJZnHm
jDsbG+G688Q7Nd580skeJN9+zUvB0lmER+HVQUJRDXiUCUN5JRJjyKU9jnjrpt+T
HD26EkPv9R37/3nyf7ZvnSD+kVELtCPnTRlwTOYWOdB8wG7OcCNU/SrU6X4JLg+9
iXO6wkAamA4dDTGZyP1OyOvCrwlA6AsWWhNhxTxvmlRAGga0DFwMBB1Uvxf/RvOR
ziH0fpxOEfLzhGhsye7UWm40mzEM52mIXAvCZ5wQhi8mOwsw2rRYgCovM8YPV0+6
WJKgT+Bw0svllwo7zQG0yUWJvXy4MUBp
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:02 2025 by rpki-client