Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEC20DE0CC911F0958C6665762E951A.roa
File: 9CEC20DE0CC911F0958C6665762E951A.roa (raw, json)
Hash identifier: a2Qn/zWkXY7gC35UevhxbHYOihB1EnDSlTBAgyXXiqI=
Subject key identifier: C9:B8:81:6C:85:2D:6A:ED:17:19:F7:91:34:1F:6F:58:7C:75:6A:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEC20DE0CC911F0958C6665762E951A.roa
Signing time: Sat 29 Mar 2025 18:14:11 +0000
ROA not before: Sat 29 Mar 2025 18:14:07 +0000
ROA not after: Mon 07 Apr 2025 18:14:07 +0000
asID: 132513
IP address blocks: 154.197.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95962 (0x176da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 18:14:07 2025 GMT
Not After : Apr 7 18:14:07 2025 GMT
Subject: CN=67e83873-6feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1f:73:a7:31:52:91:d6:da:85:02:c7:95:9d:
7e:32:24:26:c7:15:a4:f7:db:b2:91:32:ba:bc:a0:
d7:36:19:33:30:f0:51:3a:87:fc:03:5c:6a:db:1a:
2d:b5:f3:6d:57:0e:a0:2d:53:66:de:fe:b3:0d:08:
c5:07:07:ae:38:72:e3:5a:32:3c:98:ad:62:65:b6:
94:e4:19:e2:a3:2d:6c:56:34:9c:be:02:17:16:bd:
0a:a4:a9:ce:8b:f9:07:1d:74:c0:93:a1:9f:58:2b:
63:9a:3b:47:43:b8:93:93:38:0d:b4:f9:d2:1b:0f:
a8:7e:86:a8:74:fc:f8:80:23:ee:ac:c8:53:47:6e:
64:25:c9:b3:f8:72:1b:4d:63:3a:0e:f6:09:71:dc:
65:47:71:c7:e8:44:6e:32:86:a4:c6:0b:3d:be:79:
38:57:48:6d:98:1c:d1:25:01:e7:16:99:56:47:20:
23:7c:03:34:d2:07:a0:a4:4c:7b:8e:23:8e:10:ff:
f1:8b:54:13:a1:99:2c:0a:12:d1:23:e0:39:a1:0d:
6d:da:dd:e8:8c:bb:0b:b5:bc:2f:5e:a0:e8:f9:09:
a9:b1:60:a8:3c:e4:ea:25:c3:10:d4:c2:2f:72:d4:
4e:d7:2a:72:37:33:97:47:fb:17:1c:95:16:04:9a:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B8:81:6C:85:2D:6A:ED:17:19:F7:91:34:1F:6F:58:7C:75:6A:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEC20DE0CC911F0958C6665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fc:12:7c:5f:17:1e:25:0c:5e:dd:af:e3:b6:98:36:61:14:
34:d2:81:12:95:19:ff:61:91:d2:b4:b1:cb:09:d2:52:f6:dd:
b8:2c:c8:ab:85:eb:e2:97:7a:9f:e9:ec:49:bd:f2:fd:a9:45:
dc:72:02:63:5d:a6:c5:2b:22:d0:1c:27:06:3d:c0:d7:15:84:
ef:cf:ba:92:32:11:ee:62:ce:70:ed:1e:ae:ca:cd:56:03:a1:
00:99:aa:30:cf:c2:c4:8a:dc:4c:78:58:c1:ba:a9:cc:bc:7e:
fe:5c:48:15:ae:5f:99:f2:37:d3:13:51:f2:26:4d:83:bf:29:
e3:86:cf:f6:d1:46:63:82:d7:de:04:94:4c:2e:52:78:9f:64:
cf:81:0c:a1:65:24:a2:7b:bf:45:32:80:82:a3:4e:1d:3f:a3:
2f:21:c9:44:25:e6:9d:5e:e7:5f:9f:aa:2e:23:93:83:0e:0d:
5b:2c:39:4c:0d:40:6b:df:6f:17:23:07:79:71:61:33:4c:e2:
21:a7:a4:5a:82:cb:c7:61:1d:3b:0a:f3:ee:92:7b:52:b6:da:
c3:68:bc:cc:02:bf:b3:59:3d:d8:b1:7f:58:fb:63:af:8c:03:
f2:f0:61:89:62:ca:5e:88:51:4d:c6:05:e2:f1:8a:a2:b2:a6:
70:c4:59:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXbaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI5MTgxNDA3WhcNMjUwNDA3MTgxNDA3WjAYMRYw
FAYDVQQDEw02N2U4Mzg3My02ZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3h9zpzFSkdbahQLHlZ1+MiQmxxWk99uykTK6vKDXNhkzMPBROof8A1xq
2xottfNtVw6gLVNm3v6zDQjFBweuOHLjWjI8mK1iZbaU5Bnioy1sVjScvgIXFr0K
pKnOi/kHHXTAk6GfWCtjmjtHQ7iTkzgNtPnSGw+ofoaodPz4gCPurMhTR25kJcmz
+HIbTWM6DvYJcdxlR3HH6ERuMoakxgs9vnk4V0htmBzRJQHnFplWRyAjfAM00geg
pEx7jiOOEP/xi1QToZksChLRI+A5oQ1t2t3ojLsLtbwvXqDo+QmpsWCoPOTqJcMQ
1MIvctRO1ypyNzOXR/sXHJUWBJqmUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMm4
gWyFLWrtFxn3kTQfb1h8dWqIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Q0VDMjBERTBDQzkxMUYwOTU4QzY2NjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUsMA0GCSqGSIb3DQEB
CwUAA4IBAQAK/BJ8XxceJQxe3a/jtpg2YRQ00oESlRn/YZHStLHLCdJS9t24LMir
hevil3qf6exJvfL9qUXccgJjXabFKyLQHCcGPcDXFYTvz7qSMhHuYs5w7R6uys1W
A6EAmaowz8LEitxMeFjBuqnMvH7+XEgVrl+Z8jfTE1HyJk2Dvynjhs/20UZjgtfe
BJRMLlJ4n2TPgQyhZSSie79FMoCCo04dP6MvIclEJeadXudfn6ouI5ODDg1bLDlM
DUBr328XIwd5cWEzTOIhp6RagsvHYR07CvPukntSttrDaLzMAr+zWT3YsX9Y+2Ov
jAPy8GGJYspeiFFNxgXi8YqisqZwxFna
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:23 2025 by rpki-client