Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4FA67CC36711EF9DAC7FAF762E951A.roa
File: 9E4FA67CC36711EF9DAC7FAF762E951A.roa (raw, json)
Hash identifier: CvEz+Ezgez2C1/+w0IZuqRT+yx75RviUrPMtCo/hjRE=
Subject key identifier: 92:89:32:15:A1:7E:73:EE:A1:CB:AB:29:71:C9:FF:C3:DC:F9:1E:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4FA67CC36711EF9DAC7FAF762E951A.roa
Signing time: Thu 26 Dec 2024 08:58:48 +0000
ROA not before: Thu 26 Dec 2024 08:58:44 +0000
ROA not after: Sun 12 Dec 2027 08:58:44 +0000
asID: 17561
IP address blocks: 154.94.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75462 (0x126c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:58:44 2024 GMT
Not After : Dec 12 08:58:44 2027 GMT
Subject: CN=676d1ac8-98ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:0c:9d:81:85:4d:74:f4:a7:2c:23:59:c8:
a2:f9:2c:b4:b2:1f:16:0b:e7:eb:4b:96:e5:10:1e:
05:f3:13:a6:c8:27:0e:52:3d:5d:4b:2a:33:04:a4:
05:84:d9:53:e3:19:fa:32:f7:ad:19:a6:81:54:be:
05:04:eb:d8:aa:00:bc:b2:e6:07:e2:13:d4:18:23:
71:60:e8:a7:4c:f1:8f:3f:87:e7:38:e3:a9:83:b6:
ec:91:df:f4:c4:ae:6a:5e:59:dd:e2:4f:c7:12:4c:
c6:a7:31:6c:03:98:a6:14:de:16:3c:62:63:e4:63:
95:2e:a1:13:d4:20:8c:e2:f1:68:c5:9c:9b:69:cc:
83:1c:27:97:53:77:b6:98:eb:ca:47:78:1f:98:be:
da:3c:f6:e6:5e:94:3a:3d:a8:63:08:d1:38:e7:96:
37:a9:bd:ab:47:1f:b4:c9:67:40:ca:78:cf:c3:fd:
17:e8:e9:7d:8e:02:a9:1b:8a:9e:0f:f3:0c:79:c3:
3b:98:9c:31:df:cf:18:c4:2f:19:52:5e:34:9d:49:
f7:38:ff:cb:6e:ac:f0:7c:16:0e:b1:fc:af:5e:00:
27:9a:03:74:96:86:bc:9c:c4:29:d0:0a:46:32:82:
3b:2a:18:f2:72:c5:a7:ac:c7:61:65:05:18:b1:cd:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:89:32:15:A1:7E:73:EE:A1:CB:AB:29:71:C9:FF:C3:DC:F9:1E:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4FA67CC36711EF9DAC7FAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.54.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d8:5c:b1:5c:d3:1d:b3:74:a6:04:ba:69:e5:3a:43:73:50:
f1:9b:af:30:b3:63:80:b1:12:0e:50:72:6c:91:c7:42:20:61:
f2:07:62:43:e9:c7:9c:87:b7:98:a9:b1:32:1b:a8:dc:53:04:
aa:40:8b:b5:9c:37:d5:4f:bd:70:07:c3:69:91:e3:45:4f:26:
5e:81:c8:a0:6b:ba:3c:b6:c1:9b:84:ba:5a:8a:16:35:e8:e8:
a8:3b:e3:f5:e8:0c:4c:d3:12:ba:7d:b7:79:fe:7a:38:6a:b6:
2f:3e:f3:90:ac:13:40:55:97:62:70:f8:a9:7c:5c:f9:2b:a4:
0a:59:9b:fb:93:12:fb:ac:5a:4f:83:94:29:e1:2c:5f:00:5a:
2b:0a:8d:12:ad:9d:3e:c4:99:47:bf:7e:70:d7:1e:b8:ea:1c:
1e:96:59:f0:c9:16:cf:c9:17:18:3b:3b:fc:f8:47:c3:3f:e2:
eb:e9:0f:95:a7:a6:87:5a:ce:0c:50:ec:e5:6c:d3:44:33:ae:
3f:57:cf:71:a2:9d:bf:58:2c:e4:34:9b:ce:f0:f6:47:8a:be:
2b:df:4b:91:9d:76:dd:79:93:95:63:b4:f0:11:0a:89:f5:21:
30:30:55:2a:a5:35:b7:26:fd:5d:35:64:fc:8f:50:2e:55:64:
12:c2:4a:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASbGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDg1ODQ0WhcNMjcxMjEyMDg1ODQ0WjAYMRYw
FAYDVQQDEw02NzZkMWFjOC05OGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwP0MnYGFTXT0pywjWcii+Sy0sh8WC+frS5blEB4F8xOmyCcOUj1dSyoz
BKQFhNlT4xn6MvetGaaBVL4FBOvYqgC8suYH4hPUGCNxYOinTPGPP4fnOOOpg7bs
kd/0xK5qXlnd4k/HEkzGpzFsA5imFN4WPGJj5GOVLqET1CCM4vFoxZybacyDHCeX
U3e2mOvKR3gfmL7aPPbmXpQ6PahjCNE455Y3qb2rRx+0yWdAynjPw/0X6Ol9jgKp
G4qeD/MMecM7mJwx388YxC8ZUl40nUn3OP/LbqzwfBYOsfyvXgAnmgN0loa8nMQp
0ApGMoI7KhjycsWnrMdhZQUYsc0a/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJKJ
MhWhfnPuocurKXHJ/8Pc+R5/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RTRGQTY3Q0MzNjcxMUVGOURBQzdGQUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml42MA0GCSqGSIb3DQEB
CwUAA4IBAQBZ2FyxXNMds3SmBLpp5TpDc1Dxm68ws2OAsRIOUHJskcdCIGHyB2JD
6cech7eYqbEyG6jcUwSqQIu1nDfVT71wB8NpkeNFTyZegciga7o8tsGbhLpaihY1
6OioO+P16AxM0xK6fbd5/no4arYvPvOQrBNAVZdicPipfFz5K6QKWZv7kxL7rFpP
g5Qp4SxfAForCo0SrZ0+xJlHv35w1x646hwellnwyRbPyRcYOzv8+EfDP+Lr6Q+V
p6aHWs4MUOzlbNNEM64/V89xop2/WCzkNJvO8PZHir4r30uRnXbdeZOVY7TwEQqJ
9SEwMFUqpTW3Jv1dNWT8j1AuVWQSwkqW
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:05 2025 by rpki-client