Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6BA994C35511EF96F4E0BD762E951A.roa
File: AB6BA994C35511EF96F4E0BD762E951A.roa (raw, json)
Hash identifier: cLBB7NLsHzNv3U5EwVyljh80JUwot3Tver+7KCENEdo=
Subject key identifier: 1A:96:85:11:1D:52:05:F2:01:B7:EB:BB:37:F6:4F:0B:42:9C:49:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6BA994C35511EF96F4E0BD762E951A.roa
Signing time: Thu 26 Dec 2024 06:50:19 +0000
ROA not before: Thu 26 Dec 2024 06:50:15 +0000
ROA not after: Fri 12 Dec 2025 06:50:15 +0000
asID: 984
IP address blocks: 154.88.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75227 (0x125db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:50:15 2024 GMT
Not After : Dec 12 06:50:15 2025 GMT
Subject: CN=676cfcab-1291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:17:a1:92:ec:c3:db:0b:23:81:e0:40:55:
42:47:b7:e1:9d:8a:15:dc:10:05:f8:44:7f:b0:b3:
7f:e9:19:6e:f3:de:9d:83:ca:fb:ee:e3:28:d1:bd:
0b:78:9e:c9:ca:a3:3f:52:3f:09:f9:5f:84:b8:c9:
d4:07:f5:ba:06:c0:53:85:be:12:94:74:76:d0:6b:
33:1b:21:64:8e:3e:be:c9:bc:0b:ed:90:db:f3:81:
62:32:95:fd:b4:a5:83:4f:f9:87:c0:f4:46:b2:18:
2c:11:c0:70:5e:45:98:97:64:dd:11:7f:26:44:57:
7e:50:ba:aa:5a:96:0c:b2:3c:69:db:44:0a:a9:90:
22:b0:8e:96:0b:0c:a3:9f:a5:4a:2b:25:83:ed:8b:
f3:27:f9:0b:06:c1:29:09:1e:92:f2:4d:10:dc:18:
bd:05:2d:25:12:6b:a3:1a:0f:6c:0c:e7:02:8b:3a:
c2:4a:74:a3:c1:ce:a9:1c:4c:e3:2c:af:52:28:21:
16:ec:c0:8f:e1:f6:be:c8:34:a0:95:19:99:c7:8e:
ed:93:54:8e:18:0a:26:34:e7:d3:73:70:14:27:aa:
14:d0:a1:af:b5:25:13:46:a5:dd:e0:35:30:69:f4:
69:b9:ab:77:1b:d7:3a:39:96:cb:94:d9:a6:ea:9b:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:96:85:11:1D:52:05:F2:01:B7:EB:BB:37:F6:4F:0B:42:9C:49:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB6BA994C35511EF96F4E0BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.49.0/24
Signature Algorithm: sha256WithRSAEncryption
30:07:b2:7f:56:f6:10:c0:9a:08:c9:2f:12:55:de:6b:4a:c3:
1c:5c:2a:fc:4f:36:e9:ae:3b:01:c3:b5:7f:d5:a4:e3:b7:3e:
f2:03:de:8a:ec:2b:8b:b0:3a:55:bf:5a:fc:b7:03:79:8c:5a:
5d:c6:7f:65:68:88:3d:b2:39:ad:2c:26:dc:46:9e:19:05:d2:
8e:dd:5d:14:50:54:16:c3:30:3a:d0:45:80:55:4f:5d:85:cf:
60:0d:01:b6:54:77:bf:97:eb:b3:ab:5e:7e:8c:5a:d8:e4:21:
6f:3a:32:3e:68:01:b1:9f:90:5f:f9:35:ae:5a:49:f9:6f:17:
94:a7:7d:df:4d:f4:dd:27:cb:bc:69:49:4d:c3:14:a1:68:1d:
62:81:b7:d2:3c:1d:be:00:85:9a:45:b1:73:a8:63:7e:e7:f4:
20:f4:b7:bd:93:de:9d:70:f0:5f:32:cc:88:1d:cc:04:1b:f3:
ba:20:e6:8c:09:43:8f:b6:5a:6e:54:89:c1:27:61:7f:98:bc:
57:77:f0:95:85:fd:5f:eb:96:1c:87:1f:e1:39:26:ee:32:8e:
10:f2:42:b9:f9:b9:28:27:a0:33:0a:0c:f3:64:7d:56:4e:12:
06:a2:0e:cd:c9:e8:4a:e4:cc:e6:d3:93:40:03:37:15:60:f4:
59:05:2e:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASXbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDY1MDE1WhcNMjUxMjEyMDY1MDE1WjAYMRYw
FAYDVQQDEw02NzZjZmNhYi0xMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0DAXoZLsw9sLI4HgQFVCR7fhnYoV3BAF+ER/sLN/6Rlu896dg8r77uMo
0b0LeJ7JyqM/Uj8J+V+EuMnUB/W6BsBThb4SlHR20GszGyFkjj6+ybwL7ZDb84Fi
MpX9tKWDT/mHwPRGshgsEcBwXkWYl2TdEX8mRFd+ULqqWpYMsjxp20QKqZAisI6W
Cwyjn6VKKyWD7YvzJ/kLBsEpCR6S8k0Q3Bi9BS0lEmujGg9sDOcCizrCSnSjwc6p
HEzjLK9SKCEW7MCP4fa+yDSglRmZx47tk1SOGAomNOfTc3AUJ6oU0KGvtSUTRqXd
4DUwafRpuat3G9c6OZbLlNmm6pud+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBqW
hREdUgXyAbfruzf2TwtCnEmDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQjZCQTk5NEMzNTUxMUVGOTZGNEUwQkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgxMA0GCSqGSIb3DQEB
CwUAA4IBAQAwB7J/VvYQwJoIyS8SVd5rSsMcXCr8TzbprjsBw7V/1aTjtz7yA96K
7CuLsDpVv1r8twN5jFpdxn9laIg9sjmtLCbcRp4ZBdKO3V0UUFQWwzA60EWAVU9d
hc9gDQG2VHe/l+uzq15+jFrY5CFvOjI+aAGxn5Bf+TWuWkn5bxeUp33fTfTdJ8u8
aUlNwxShaB1igbfSPB2+AIWaRbFzqGN+5/Qg9Le9k96dcPBfMsyIHcwEG/O6IOaM
CUOPtlpuVInBJ2F/mLxXd/CVhf1f65Ychx/hOSbuMo4Q8kK5+bkoJ6AzCgzzZH1W
ThIGog7NyehK5Mzm05NAAzcVYPRZBS7d
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:15 2025 by rpki-client