Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3D8A166C38011EF93ABCD4B762E951A.roa
File: A3D8A166C38011EF93ABCD4B762E951A.roa (raw, json)
Hash identifier: RAPv5e4VWRiToKg/DHuBUMCKO0EpO9jgPsLqxFFhLv0=
Subject key identifier: 7C:21:9F:E7:75:46:46:86:79:FE:53:85:20:E7:6F:A7:AB:DF:79:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01275A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3D8A166C38011EF93ABCD4B762E951A.roa
Signing time: Thu 26 Dec 2024 11:57:54 +0000
ROA not before: Thu 26 Dec 2024 11:57:51 +0000
ROA not after: Fri 12 Dec 2025 11:57:51 +0000
asID: 984
IP address blocks: 154.94.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75610 (0x1275a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:57:51 2024 GMT
Not After : Dec 12 11:57:51 2025 GMT
Subject: CN=676d44c2-a9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:cf:97:94:ae:96:3c:f6:aa:cb:d8:c8:70:
87:10:4f:ce:d3:9c:71:77:57:de:ce:c7:94:01:bb:
73:7d:59:b5:6c:42:75:6e:5b:3a:8a:55:37:5f:dd:
7a:d1:f2:43:7a:19:5f:fa:c6:51:2d:0f:b7:ef:dc:
a5:76:93:b5:0f:9e:96:d3:02:9b:49:67:21:bb:f4:
a8:1f:bc:e5:99:9f:a8:d5:ca:84:f8:5e:64:50:2a:
86:74:ff:2c:76:37:6d:a7:e6:e5:f5:cd:da:bd:f5:
22:cf:65:88:ae:36:f8:97:cd:bf:87:df:fc:7b:1b:
da:2c:83:36:49:a4:8e:14:ed:e3:c3:e0:96:ee:14:
66:e6:d4:ef:6b:fb:bf:4d:26:de:1d:10:91:5d:66:
f9:c6:1a:e8:89:de:32:7b:1f:6b:7e:5c:bf:d8:e3:
19:13:43:fc:02:58:ec:c9:c2:b1:41:ce:37:73:63:
42:c5:f5:b4:8f:e8:60:3d:b3:51:21:47:66:26:1c:
02:04:93:2e:ce:23:9e:40:1b:db:cc:97:73:5b:73:
b6:3e:f0:02:24:ad:11:70:7a:cf:94:84:4d:29:db:
d3:25:3c:e7:e7:b3:cb:10:2c:75:d5:c9:f3:aa:5e:
6a:54:16:33:12:b8:37:e4:ef:94:a9:23:1e:b6:ee:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:21:9F:E7:75:46:46:86:79:FE:53:85:20:E7:6F:A7:AB:DF:79:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3D8A166C38011EF93ABCD4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.196.0/24
Signature Algorithm: sha256WithRSAEncryption
34:dc:92:40:14:1e:c8:e6:e2:ec:9c:38:1b:d5:70:18:bd:de:
ea:7a:30:99:ef:84:93:1a:1a:ea:ac:64:58:3a:00:1c:14:e4:
96:d3:d0:9f:1f:16:5e:33:46:ed:b8:6c:7f:3d:38:5a:f0:00:
79:69:8b:20:16:42:9f:cc:ae:12:be:f2:f2:8e:2f:ea:6a:aa:
cc:d7:7d:7e:cf:63:b4:65:a1:0e:b3:5a:79:b0:31:5a:ad:50:
5d:68:11:c0:46:0d:be:5e:6f:fa:49:b8:f4:15:2c:2f:4e:6d:
8b:d2:14:92:2c:06:b9:c5:e2:fb:5f:44:64:7d:c9:a3:1c:2e:
3f:f0:2f:e8:53:8e:21:2e:5c:b6:e4:1c:a7:ac:8b:e7:31:7a:
cf:a1:83:a2:4a:64:a9:bf:82:ea:c7:49:5c:cb:de:c0:35:57:
02:00:d9:3b:8d:36:3b:dc:d3:6a:b7:d4:08:87:9f:7a:6d:a0:
e9:97:95:6f:98:c8:25:1e:c8:59:ac:b9:a3:a5:a2:f9:fd:73:
6b:7d:fb:a5:94:b3:a0:80:61:3c:38:d8:29:39:9d:a7:e6:89:
02:9d:13:5b:02:9f:ee:4b:f7:b2:3a:0f:04:3f:74:8e:9c:38:
68:57:37:83:b9:ff:2c:de:3e:2f:58:a5:6f:d3:72:e8:09:6c:
26:0e:74:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASdaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MTE1NzUxWhcNMjUxMjEyMTE1NzUxWjAYMRYw
FAYDVQQDEw02NzZkNDRjMi1hOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAujTPl5Suljz2qsvYyHCHEE/O05xxd1fezseUAbtzfVm1bEJ1bls6ilU3
X9160fJDehlf+sZRLQ+379yldpO1D56W0wKbSWchu/SoH7zlmZ+o1cqE+F5kUCqG
dP8sdjdtp+bl9c3avfUiz2WIrjb4l82/h9/8exvaLIM2SaSOFO3jw+CW7hRm5tTv
a/u/TSbeHRCRXWb5xhroid4yex9rfly/2OMZE0P8AljsycKxQc43c2NCxfW0j+hg
PbNRIUdmJhwCBJMuziOeQBvbzJdzW3O2PvACJK0RcHrPlIRNKdvTJTzn57PLECx1
1cnzql5qVBYzErg35O+UqSMetu5YKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHwh
n+d1RkaGef5ThSDnb6er33mgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BM0Q4QTE2NkMzODAxMUVGOTNBQkNENEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml7EMA0GCSqGSIb3DQEB
CwUAA4IBAQA03JJAFB7I5uLsnDgb1XAYvd7qejCZ74STGhrqrGRYOgAcFOSW09Cf
HxZeM0btuGx/PTha8AB5aYsgFkKfzK4SvvLyji/qaqrM131+z2O0ZaEOs1p5sDFa
rVBdaBHARg2+Xm/6Sbj0FSwvTm2L0hSSLAa5xeL7X0RkfcmjHC4/8C/oU44hLly2
5BynrIvnMXrPoYOiSmSpv4Lqx0lcy97ANVcCANk7jTY73NNqt9QIh596baDpl5Vv
mMglHshZrLmjpaL5/XNrffullLOggGE8ONgpOZ2n5okCnRNbAp/uS/eyOg8EP3SO
nDhoVzeDuf8s3j4vWKVv03LoCWwmDnRM
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:56 2025 by rpki-client