Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FA7A23AC90811EF9FBC6973762E951A.roa
File: 9FA7A23AC90811EF9FBC6973762E951A.roa (raw, json)
Hash identifier: ZHus+4y+SZAANlFrggoS6RPJfIers3IVmyxXKph3Nqk=
Subject key identifier: E5:BA:80:EF:25:E7:94:1E:C4:9F:DE:60:B7:27:38:D5:BA:07:00:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01327F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FA7A23AC90811EF9FBC6973762E951A.roa
Signing time: Thu 02 Jan 2025 12:53:55 +0000
ROA not before: Thu 02 Jan 2025 12:53:51 +0000
ROA not after: Sat 13 Dec 2025 12:53:51 +0000
asID: 984
IP address blocks: 154.221.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78463 (0x1327f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 12:53:51 2025 GMT
Not After : Dec 13 12:53:51 2025 GMT
Subject: CN=67768c63-ce53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:a9:c4:50:c9:cf:c4:ae:66:d1:c2:be:c9:
a5:b7:e2:d7:84:7f:e8:30:d4:6f:a1:93:fb:70:cf:
0c:20:3c:48:c7:86:9d:8a:83:4a:03:3d:51:ba:24:
38:0d:bf:f3:3f:f8:87:a6:5f:23:09:fd:5e:6b:27:
77:c8:88:f8:c5:dd:72:b8:0a:42:c1:52:37:9a:1d:
eb:df:8c:2d:24:2a:b0:2e:f7:56:1b:40:b9:78:e7:
b6:cc:fc:75:b8:4f:0d:a6:12:bd:f6:95:00:7c:d1:
7f:03:84:5b:82:67:b1:be:a1:cd:54:2e:4e:c6:e7:
84:d2:02:af:52:30:18:81:5b:a1:06:b3:99:4a:94:
a5:89:bb:bd:43:64:84:de:fc:98:9b:3f:81:de:79:
64:ee:ab:04:cf:19:de:ef:46:32:16:c9:01:5f:33:
e3:d1:0b:71:e8:ce:5b:8f:29:f0:62:c2:82:9a:42:
00:11:b3:4a:19:b5:0e:dd:d8:e2:05:dd:85:6e:46:
bc:1f:12:f8:16:a4:ef:bb:82:58:6e:a2:a7:95:27:
d0:22:e5:15:c7:44:42:98:31:cd:7e:3f:93:fd:52:
d2:26:33:19:09:02:14:03:4f:44:e7:47:12:45:d0:
3d:d0:38:60:31:d9:e5:ca:11:c6:5c:42:01:39:b6:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BA:80:EF:25:E7:94:1E:C4:9F:DE:60:B7:27:38:D5:BA:07:00:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FA7A23AC90811EF9FBC6973762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.204.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b5:e0:7c:c9:55:af:64:ce:49:b2:b3:19:a7:1e:ec:09:70:
c0:fe:a9:b0:65:7e:1a:b5:02:2c:b7:08:a8:6e:9b:f9:fc:d0:
d5:60:ca:80:70:04:ab:99:27:88:ba:de:c3:2c:18:93:56:a4:
03:83:f2:d4:42:99:d5:56:bd:0a:6e:f4:96:0c:0d:f7:c2:84:
89:fd:8f:64:7d:8b:14:ba:b4:a1:0d:5c:2a:74:25:7b:c4:36:
4c:bb:f9:c8:f7:28:f4:60:16:5a:91:10:d1:17:fd:1b:20:47:
6c:13:09:90:28:92:8e:92:55:de:bd:5b:9c:a1:71:3c:32:d7:
c0:e1:a4:bf:16:f8:c6:8e:b0:2a:75:66:a4:1c:e3:4c:9c:43:
16:4e:1e:02:aa:b5:d6:a3:0e:89:65:8f:a9:f9:63:c0:f9:4b:
85:05:f6:6d:06:96:02:f0:54:a1:c3:e9:90:64:a1:57:27:37:
6d:55:9c:d5:2c:53:9f:f1:c2:80:96:07:b4:d1:0a:d2:1e:3d:
8b:d7:44:ef:cd:80:50:db:34:65:b5:c3:19:cf:6e:88:8f:23:
72:cb:f1:c5:26:8b:4f:01:a3:da:ff:f6:f7:96:90:b3:82:63:
f4:37:da:e6:8e:e8:5b:d9:89:fb:ae:60:38:f4:b9:51:d3:4f:
ef:64:ee:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATJ/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTI1MzUxWhcNMjUxMjEzMTI1MzUxWjAYMRYw
FAYDVQQDEw02Nzc2OGM2My1jZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvdqpxFDJz8SuZtHCvsmlt+LXhH/oMNRvoZP7cM8MIDxIx4adioNKAz1R
uiQ4Db/zP/iHpl8jCf1eayd3yIj4xd1yuApCwVI3mh3r34wtJCqwLvdWG0C5eOe2
zPx1uE8NphK99pUAfNF/A4RbgmexvqHNVC5OxueE0gKvUjAYgVuhBrOZSpSlibu9
Q2SE3vyYmz+B3nlk7qsEzxne70YyFskBXzPj0Qtx6M5bjynwYsKCmkIAEbNKGbUO
3djiBd2Fbka8HxL4FqTvu4JYbqKnlSfQIuUVx0RCmDHNfj+T/VLSJjMZCQIUA09E
50cSRdA90DhgMdnlyhHGXEIBObZIhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOW6
gO8l55QexJ/eYLcnONW6BwB7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RkE3QTIzQUM5MDgxMUVGOUZCQzY5NzM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3MMA0GCSqGSIb3DQEB
CwUAA4IBAQCWteB8yVWvZM5JsrMZpx7sCXDA/qmwZX4atQIstwiobpv5/NDVYMqA
cASrmSeIut7DLBiTVqQDg/LUQpnVVr0KbvSWDA33woSJ/Y9kfYsUurShDVwqdCV7
xDZMu/nI9yj0YBZakRDRF/0bIEdsEwmQKJKOklXevVucoXE8MtfA4aS/FvjGjrAq
dWakHONMnEMWTh4CqrXWow6JZY+p+WPA+UuFBfZtBpYC8FShw+mQZKFXJzdtVZzV
LFOf8cKAlge00QrSHj2L10TvzYBQ2zRltcMZz26IjyNyy/HFJotPAaPa//b3lpCz
gmP0N9rmjuhb2Yn7rmA49LlR00/vZO6G
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:34 2025 by rpki-client