Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96F18A3A0CCD11F0AB9F967D762E951A.roa
File: 96F18A3A0CCD11F0AB9F967D762E951A.roa (raw, json)
Hash identifier: eOjlnppTt0rDUoV3fKQ4UvwZv1MtXPn58H8CIhEuiF4=
Subject key identifier: 63:1F:69:2C:CF:D2:E1:C7:69:76:CB:DE:DB:62:A7:70:05:C0:06:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96F18A3A0CCD11F0AB9F967D762E951A.roa
Signing time: Sat 29 Mar 2025 18:42:39 +0000
ROA not before: Sat 29 Mar 2025 18:42:35 +0000
ROA not after: Mon 07 Apr 2025 18:42:35 +0000
asID: 132513
IP address blocks: 154.84.180.0/24 maxlen: 24
154.85.98.0/24 maxlen: 24
154.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95966 (0x176de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 18:42:35 2025 GMT
Not After : Apr 7 18:42:35 2025 GMT
Subject: CN=67e83f1f-a074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:25:d3:9a:cb:b9:28:68:ea:d4:77:e5:c2:
69:66:df:77:2d:22:fb:72:43:b2:55:6e:cd:33:c2:
c7:0c:22:83:af:56:7a:94:b5:6a:05:f9:9d:7c:6e:
8b:48:d9:a2:ff:0d:cf:c8:66:ef:44:e3:71:9e:cf:
0e:c2:8f:0f:21:07:8a:ef:17:68:d1:a6:89:cc:b0:
12:fb:2f:ba:b7:69:ee:e5:71:a2:31:3b:fe:c5:0b:
5b:72:f1:eb:7b:61:d2:21:6f:2a:4a:e4:28:47:31:
26:33:14:55:65:f7:79:54:a9:3a:9b:d9:2c:ed:0f:
42:15:94:5d:3a:85:3d:bf:43:5e:f5:b2:be:8d:00:
38:38:4a:16:01:78:1f:2e:7a:ea:5e:75:3c:65:6a:
5d:42:e6:61:91:86:93:a1:28:e0:cc:44:6e:7e:bc:
e5:78:b2:ca:2f:a1:5d:b2:51:3d:2d:3b:81:9e:0b:
b9:03:ad:eb:8e:45:3b:19:bd:ff:d3:eb:94:b8:7d:
65:3e:6a:e6:7a:52:80:d9:06:41:77:72:b5:db:1f:
d3:5b:51:e8:4d:22:4e:f5:7f:12:af:a9:3c:28:be:
a9:80:5a:34:a6:74:0b:da:42:e9:54:33:94:af:cd:
e9:53:e6:dc:75:b1:7a:61:2d:59:bd:b7:3f:78:29:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1F:69:2C:CF:D2:E1:C7:69:76:CB:DE:DB:62:A7:70:05:C0:06:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96F18A3A0CCD11F0AB9F967D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.180.0/24
154.85.98.0/24
154.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0c:c9:c3:8b:ce:b3:ab:62:03:b4:b4:e9:d2:7d:9a:03:3e:
39:9a:7b:a9:cc:6d:c7:95:2c:66:4f:98:e1:92:14:36:91:bd:
f4:30:74:c2:9b:10:3c:f9:66:9b:1a:81:e5:9d:c0:e6:26:9a:
7b:fd:55:12:a2:85:66:54:db:11:9f:51:a7:0a:7c:d7:df:a2:
e3:b5:9b:dc:c3:d0:1d:01:b5:57:76:7c:76:11:36:39:85:61:
7f:34:4e:67:79:12:51:9c:b4:11:00:de:35:a4:43:33:48:ab:
e1:cb:9a:64:0f:99:07:42:06:d4:68:90:c6:7f:4d:3e:46:86:
2f:5c:04:5a:47:3d:28:82:d6:8e:43:a9:7e:be:cb:ee:ef:e9:
65:0c:cc:5b:25:02:4e:8a:21:8a:e2:be:29:d4:cd:dd:5f:9a:
94:03:c1:3d:ae:e2:f2:50:92:d8:cb:97:7e:d1:cd:c6:9e:2a:
ea:d9:84:dd:15:6b:fc:d2:f5:41:8c:55:06:47:22:4a:6a:bf:
76:4b:2f:f8:99:b4:33:6c:6a:cf:8a:f5:08:da:8b:b7:07:4e:
6f:55:81:99:c7:27:27:89:6f:c1:d2:50:14:c9:09:3d:4b:68:
7f:b9:2e:f5:cb:88:ae:d2:1b:72:5f:cf:63:e1:a2:85:6a:93:
86:c9:a1:df
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXbeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI5MTg0MjM1WhcNMjUwNDA3MTg0MjM1WjAYMRYw
FAYDVQQDEw02N2U4M2YxZi1hMDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp9wl05rLuSho6tR35cJpZt93LSL7ckOyVW7NM8LHDCKDr1Z6lLVqBfmd
fG6LSNmi/w3PyGbvRONxns8Owo8PIQeK7xdo0aaJzLAS+y+6t2nu5XGiMTv+xQtb
cvHre2HSIW8qSuQoRzEmMxRVZfd5VKk6m9ks7Q9CFZRdOoU9v0Ne9bK+jQA4OEoW
AXgfLnrqXnU8ZWpdQuZhkYaToSjgzERufrzleLLKL6FdslE9LTuBngu5A63rjkU7
Gb3/0+uUuH1lPmrmelKA2QZBd3K12x/TW1HoTSJO9X8Sr6k8KL6pgFo0pnQL2kLp
VDOUr83pU+bcdbF6YS1Zvbc/eCks+wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFGMf
aSzP0uHHaXbL3ttip3AFwAbwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NkYxOEEzQTBDQ0QxMUYwQUI5Rjk2N0Q3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmlS0AwQAmlViAwQAmluL
MA0GCSqGSIb3DQEBCwUAA4IBAQAiDMnDi86zq2IDtLTp0n2aAz45mnupzG3HlSxm
T5jhkhQ2kb30MHTCmxA8+WabGoHlncDmJpp7/VUSooVmVNsRn1GnCnzX36LjtZvc
w9AdAbVXdnx2ETY5hWF/NE5neRJRnLQRAN41pEMzSKvhy5pkD5kHQgbUaJDGf00+
RoYvXARaRz0ogtaOQ6l+vsvu7+llDMxbJQJOiiGK4r4p1M3dX5qUA8E9ruLyUJLY
y5d+0c3Gnirq2YTdFWv80vVBjFUGRyJKar92Sy/4mbQzbGrPivUI2ou3B05vVYGZ
xycniW/B0lAUyQk9S2h/uS71y4iu0htyX89j4aKFapOGyaHf
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:06 2025 by rpki-client