Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A585EC54C40611EFAB6E53AC762E951A.roa
File: A585EC54C40611EFAB6E53AC762E951A.roa (raw, json)
Hash identifier: QJPfoWj7zN4s3Vzh3qM4UfhF4ewNsxRvNNDZoqUT+JE=
Subject key identifier: 29:99:76:E5:42:C7:65:04:CF:C4:D0:8B:16:DE:19:B3:5A:32:BF:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A585EC54C40611EFAB6E53AC762E951A.roa
Signing time: Fri 27 Dec 2024 03:57:10 +0000
ROA not before: Fri 27 Dec 2024 03:57:06 +0000
ROA not after: Fri 12 Dec 2025 03:57:06 +0000
asID: 984
IP address blocks: 154.194.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76007 (0x128e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 03:57:06 2024 GMT
Not After : Dec 12 03:57:06 2025 GMT
Subject: CN=676e2596-8590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:26:dc:82:38:03:84:af:71:25:66:cf:eb:
13:06:a2:49:21:db:a8:61:df:88:c7:97:f5:30:00:
37:28:cc:e4:d9:b9:a7:f7:93:81:f8:15:5b:a9:ba:
e3:2b:91:50:7f:2f:69:32:4a:a2:38:c7:3f:fb:d5:
57:c4:41:f9:e5:2b:4d:a1:dc:fa:4f:0e:40:3f:d5:
8c:dd:d6:15:f4:56:9a:7f:23:08:19:1f:29:b9:13:
bf:3b:ad:19:db:cf:dc:6b:e4:b5:41:c1:35:fc:ef:
9f:fe:4c:62:48:a6:53:81:ba:d2:2d:10:86:c3:c7:
20:5f:25:48:d8:db:a5:c6:44:e7:5f:f8:3a:97:35:
75:74:24:3b:e1:82:de:84:3a:fe:62:31:63:fe:33:
39:34:f7:6f:fa:72:1b:36:c0:78:7d:c5:fa:d0:02:
3e:6b:d9:ed:11:1e:c6:13:72:69:b1:7e:86:b7:a3:
8e:68:db:35:52:0c:6d:c2:12:00:d5:c8:1e:82:5a:
16:1e:d0:1a:20:57:68:d8:32:94:19:d4:1f:a5:ee:
06:0b:9c:d6:5b:b8:d4:f1:6e:96:c3:35:35:64:45:
94:7e:28:60:af:ca:0a:0c:31:6a:14:6b:f7:58:2c:
d3:e8:87:8d:a7:f6:50:cd:c2:37:1a:b0:8a:23:c8:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:99:76:E5:42:C7:65:04:CF:C4:D0:8B:16:DE:19:B3:5A:32:BF:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A585EC54C40611EFAB6E53AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.47.0/24
Signature Algorithm: sha256WithRSAEncryption
68:33:fb:34:05:94:c9:8b:8b:8a:56:b1:4f:e0:4d:db:79:0e:
15:9d:c3:0e:3b:bc:29:2f:85:6b:d9:5f:28:4f:ca:c0:22:38:
94:93:b1:e1:ba:91:7f:87:0e:21:8e:a9:84:d0:87:7a:9b:6b:
4f:63:68:e7:7a:49:c9:90:3b:59:78:b3:e3:30:a3:c3:5b:45:
66:cb:69:d2:d2:e1:aa:93:3b:53:d7:62:65:11:fe:61:bb:55:
0b:43:68:e9:9c:9f:cd:79:3c:0d:7f:48:7a:b4:8a:65:a3:7c:
42:27:74:e1:38:4f:68:b8:ea:b8:fa:45:6b:60:98:a7:a4:2c:
2d:4a:f5:65:0d:af:bc:84:1c:b3:bc:c8:90:3c:fb:3e:67:5b:
f5:51:e8:f3:1b:df:62:17:47:a9:91:d9:e8:d6:16:c8:0b:53:
17:e1:4e:bb:31:e1:9f:ed:0d:e7:6e:c8:01:8e:a8:3f:63:46:
05:86:87:ee:42:b0:bf:8a:3a:9e:e9:a2:0f:60:86:41:00:13:
29:5c:08:a6:35:74:df:fb:f0:5f:09:c6:4b:14:e7:3d:44:84:
57:29:1f:b8:9b:5b:3b:a9:f8:76:0d:f3:9b:9b:13:54:49:94:
56:a8:db:bf:8a:50:00:c2:26:49:bd:3c:24:fa:a1:11:7f:9a:
a9:74:8d:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASjnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDM1NzA2WhcNMjUxMjEyMDM1NzA2WjAYMRYw
FAYDVQQDEw02NzZlMjU5Ni04NTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0fIm3II4A4SvcSVmz+sTBqJJIduoYd+Ix5f1MAA3KMzk2bmn95OB+BVb
qbrjK5FQfy9pMkqiOMc/+9VXxEH55StNodz6Tw5AP9WM3dYV9FaafyMIGR8puRO/
O60Z28/ca+S1QcE1/O+f/kxiSKZTgbrSLRCGw8cgXyVI2NulxkTnX/g6lzV1dCQ7
4YLehDr+YjFj/jM5NPdv+nIbNsB4fcX60AI+a9ntER7GE3JpsX6Gt6OOaNs1Ugxt
whIA1cgegloWHtAaIFdo2DKUGdQfpe4GC5zWW7jU8W6WwzU1ZEWUfihgr8oKDDFq
FGv3WCzT6IeNp/ZQzcI3GrCKI8hiawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCmZ
duVCx2UEz8TQixbeGbNaMr87MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNTg1RUM1NEM0MDYxMUVGQUI2RTUzQUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIvMA0GCSqGSIb3DQEB
CwUAA4IBAQBoM/s0BZTJi4uKVrFP4E3beQ4VncMOO7wpL4Vr2V8oT8rAIjiUk7Hh
upF/hw4hjqmE0Id6m2tPY2jneknJkDtZeLPjMKPDW0Vmy2nS0uGqkztT12JlEf5h
u1ULQ2jpnJ/NeTwNf0h6tIplo3xCJ3ThOE9ouOq4+kVrYJinpCwtSvVlDa+8hByz
vMiQPPs+Z1v1UejzG99iF0epkdno1hbIC1MX4U67MeGf7Q3nbsgBjqg/Y0YFhofu
QrC/ijqe6aIPYIZBABMpXAimNXTf+/BfCcZLFOc9RIRXKR+4m1s7qfh2DfObmxNU
SZRWqNu/ilAAwiZJvTwk+qERf5qpdI3v
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:03:59 2025 by rpki-client