Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4CCF2CC8AF11EF84EAAFBC762E951A.roa
File: 9E4CCF2CC8AF11EF84EAAFBC762E951A.roa (raw, json)
Hash identifier: gOUAC6uoozDpyPcwsRElJsxIyp31a/dKWuSEJ5TQGWc=
Subject key identifier: 61:CA:D0:26:EB:3B:53:47:66:99:25:9B:3C:3D:5F:46:F1:EC:C0:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01319C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4CCF2CC8AF11EF84EAAFBC762E951A.roa
Signing time: Thu 02 Jan 2025 02:16:47 +0000
ROA not before: Thu 02 Jan 2025 02:16:44 +0000
ROA not after: Mon 13 Dec 2027 02:16:44 +0000
asID: 17561
IP address blocks: 154.220.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78236 (0x1319c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:16:44 2025 GMT
Not After : Dec 13 02:16:44 2027 GMT
Subject: CN=6775f70f-ca76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:dd:10:da:eb:61:ea:1c:8f:eb:63:9d:9c:
77:cb:c1:ca:90:a8:15:31:0b:da:6d:a3:42:83:ae:
57:2c:ba:53:ed:fe:3e:3e:bf:20:30:cd:b1:22:fd:
af:90:74:be:2c:37:a2:26:42:c6:35:67:96:ed:32:
d1:4b:52:08:f6:c2:81:5e:da:db:cd:8f:07:b2:f2:
ad:29:ba:02:0e:65:6e:cc:f8:e2:43:43:5f:b6:83:
f2:cb:6b:5d:2a:14:b6:04:4e:1e:52:5b:6d:fc:d9:
0b:e2:f8:44:09:b9:6a:50:bf:75:6b:26:26:e3:1b:
b1:69:66:ad:64:4a:e9:1c:a9:3f:69:24:08:b5:45:
f4:e8:42:66:3b:4b:7f:e3:48:d4:c3:4a:2a:28:2d:
e8:1a:0c:8e:21:e4:e7:a5:a2:ec:49:fd:1b:5b:33:
49:34:4a:06:3c:45:60:fe:06:98:5d:9f:80:ff:c7:
b3:2a:39:88:32:a5:c7:ac:8f:f1:6b:d8:b6:36:10:
8c:ab:18:5b:7c:2a:5f:2a:bb:ee:b2:21:8d:04:bd:
f6:69:61:0c:d9:82:42:6b:67:3e:57:d5:ca:7d:d9:
2a:38:15:93:34:e7:31:f1:3b:94:43:85:a0:b3:a0:
70:cd:2e:4f:8a:d3:3a:7b:c4:b9:91:fe:fc:dc:53:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:D0:26:EB:3B:53:47:66:99:25:9B:3C:3D:5F:46:F1:EC:C0:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4CCF2CC8AF11EF84EAAFBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.170.0/24
Signature Algorithm: sha256WithRSAEncryption
83:05:78:66:4f:88:24:48:29:fa:06:ce:aa:4c:2f:d6:00:bd:
e4:b8:7a:a3:5c:77:58:a8:5c:7d:35:4d:bd:31:cf:e4:85:f1:
00:2d:c6:08:8e:11:b5:db:31:d9:e2:95:65:a5:2b:95:e4:1d:
cd:dd:cc:26:59:7c:72:b0:9b:cd:f5:8b:62:dd:03:d9:c5:53:
f9:2c:64:cc:4d:32:4f:77:40:b7:f8:85:fe:9e:c3:3e:60:1e:
05:e6:df:f2:55:c1:de:99:79:6d:ab:fa:67:53:5e:23:51:c0:
89:16:ed:e5:b3:13:13:49:e2:93:6f:ec:ab:01:2b:47:fa:9e:
8c:ed:87:78:38:24:db:81:91:f2:5b:e2:a6:5d:f5:22:29:50:
57:20:65:f0:c0:84:0c:cc:72:45:24:a5:07:6e:f1:85:39:7e:
f9:16:74:08:49:06:e9:12:28:80:e0:0d:17:03:c2:6e:fd:7f:
0a:a8:03:2f:91:4c:e3:92:74:f7:17:f1:d0:1d:33:2a:6c:48:
f7:bf:94:b4:e1:18:0b:32:36:ea:a8:8e:af:80:d5:c6:62:96:
67:f3:b7:12:af:be:d7:4f:38:94:a6:6c:79:19:13:c2:f0:de:
06:ca:29:0e:28:b4:eb:09:5c:bd:85:2d:87:83:13:52:61:19:
d4:e1:99:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATGcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDIxNjQ0WhcNMjcxMjEzMDIxNjQ0WjAYMRYw
FAYDVQQDEw02Nzc1ZjcwZi1jYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqWXdENrrYeocj+tjnZx3y8HKkKgVMQvabaNCg65XLLpT7f4+Pr8gMM2x
Iv2vkHS+LDeiJkLGNWeW7TLRS1II9sKBXtrbzY8HsvKtKboCDmVuzPjiQ0NftoPy
y2tdKhS2BE4eUltt/NkL4vhECblqUL91ayYm4xuxaWatZErpHKk/aSQItUX06EJm
O0t/40jUw0oqKC3oGgyOIeTnpaLsSf0bWzNJNEoGPEVg/gaYXZ+A/8ezKjmIMqXH
rI/xa9i2NhCMqxhbfCpfKrvusiGNBL32aWEM2YJCa2c+V9XKfdkqOBWTNOcx8TuU
Q4Wgs6BwzS5PitM6e8S5kf783FPL2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGHK
0CbrO1NHZpklmzw9X0bx7MCPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RTRDQ0YyQ0M4QUYxMUVGODRFQUFGQkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtyqMA0GCSqGSIb3DQEB
CwUAA4IBAQCDBXhmT4gkSCn6Bs6qTC/WAL3kuHqjXHdYqFx9NU29Mc/khfEALcYI
jhG12zHZ4pVlpSuV5B3N3cwmWXxysJvN9Yti3QPZxVP5LGTMTTJPd0C3+IX+nsM+
YB4F5t/yVcHemXltq/pnU14jUcCJFu3lsxMTSeKTb+yrAStH+p6M7Yd4OCTbgZHy
W+KmXfUiKVBXIGXwwIQMzHJFJKUHbvGFOX75FnQISQbpEiiA4A0XA8Ju/X8KqAMv
kUzjknT3F/HQHTMqbEj3v5S04RgLMjbqqI6vgNXGYpZn87cSr77XTziUpmx5GRPC
8N4GyikOKLTrCVy9hS2HgxNSYRnU4Zm6
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:35 2025 by rpki-client