Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F25074C1BD11EFB5D74B90762E951A.roa
File: B4F25074C1BD11EFB5D74B90762E951A.roa (raw, json)
Hash identifier: Nd992FRRVY02wnS+ox/Ruq9hunn+XmFnsEdfeQPOPKQ=
Subject key identifier: 73:E0:42:15:8B:FC:3F:F0:45:B2:94:8A:A5:25:24:8E:6B:8A:11:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01220B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F25074C1BD11EFB5D74B90762E951A.roa
Signing time: Tue 24 Dec 2024 06:10:00 +0000
ROA not before: Tue 24 Dec 2024 06:09:56 +0000
ROA not after: Wed 10 Dec 2025 06:09:56 +0000
asID: 984
IP address blocks: 154.193.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74251 (0x1220b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 06:09:56 2024 GMT
Not After : Dec 10 06:09:56 2025 GMT
Subject: CN=676a5038-7f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:75:f4:cf:39:1a:99:a1:cc:a3:b2:3e:19:
98:1e:bb:ed:a7:6e:20:f7:4e:85:04:6a:a0:39:31:
88:39:ee:7e:05:2c:1e:89:58:5e:8b:ed:42:18:4f:
0b:8d:c4:a0:f5:8a:fe:a6:c4:d5:bd:0f:34:f8:e1:
b4:16:60:c2:c8:f3:ce:21:99:cc:ad:14:ff:f2:25:
89:10:b1:d8:5b:a1:df:bc:b4:69:a9:18:8c:72:8f:
fd:13:1a:94:9e:9e:ae:e2:9f:af:98:1f:92:96:ed:
be:fa:a8:ca:d1:3b:b3:5d:e8:0f:fe:b1:c7:b7:6d:
aa:ec:50:48:a3:d2:e0:7c:54:07:51:05:46:d5:bb:
f0:4c:10:48:50:cb:42:d5:03:47:04:e4:de:54:a0:
d4:94:9b:2b:b8:1b:a4:06:50:c7:d8:b5:fb:10:ba:
e9:00:9e:51:d0:87:1f:d8:c6:3a:32:4b:4f:17:49:
c9:8d:bb:6c:3d:81:98:e6:ff:b3:9f:52:c7:d2:64:
76:7b:a8:c0:cd:88:88:e3:53:37:ad:4a:0a:e4:ec:
9d:40:e8:13:f4:4a:3b:af:d3:6e:db:d7:89:f1:a9:
36:02:57:82:df:80:c6:0e:12:2c:22:92:d1:00:12:
65:45:70:8f:29:d1:8e:65:1f:7e:00:0c:5a:1d:32:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E0:42:15:8B:FC:3F:F0:45:B2:94:8A:A5:25:24:8E:6B:8A:11:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F25074C1BD11EFB5D74B90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:3b:46:20:8e:d4:0e:86:50:ba:fe:71:76:dc:87:e2:16:3c:
f1:ad:32:b9:4b:5d:64:a0:e8:3c:48:06:91:98:06:71:c5:9f:
76:58:55:85:7f:8b:8a:0c:4e:7f:e2:c8:28:c3:e4:4f:c5:83:
8e:7c:27:04:ac:6f:c5:f1:ec:4f:c8:5d:b1:3c:77:04:12:8d:
4b:f6:32:6f:a4:12:2d:a6:c3:21:42:6a:39:a5:da:78:80:61:
fd:b0:d3:3d:2e:f3:64:92:49:65:5e:c0:a6:01:a7:dc:f7:d6:
c8:93:5d:18:3e:fa:ae:5c:a1:71:02:a8:ff:02:d1:b3:27:49:
f9:7f:82:e8:a4:d3:e1:83:2a:07:41:68:f6:82:4b:fe:e8:16:
da:6e:6d:01:69:e0:f0:a3:d3:24:77:95:7e:50:af:fe:84:4a:
54:76:7f:62:f1:a4:43:3e:5a:50:eb:cc:ee:6a:a0:e5:3c:42:
21:33:7f:1a:04:b1:90:bc:2e:db:4a:6a:05:ef:ad:9e:2e:5a:
37:5b:a0:d8:1b:5f:e8:fe:d0:3d:9f:57:f6:6f:f5:04:aa:7a:
82:11:6d:5e:48:82:81:ec:ea:aa:91:80:02:f8:ee:c0:cd:b0:
69:03:d7:45:02:c6:42:93:68:73:6c:bb:73:3d:4a:41:b0:f7:
62:25:99:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASILMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDYwOTU2WhcNMjUxMjEwMDYwOTU2WjAYMRYw
FAYDVQQDEw02NzZhNTAzOC03ZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoGd19M85GpmhzKOyPhmYHrvtp24g906FBGqgOTGIOe5+BSweiVhei+1C
GE8LjcSg9Yr+psTVvQ80+OG0FmDCyPPOIZnMrRT/8iWJELHYW6HfvLRpqRiMco/9
ExqUnp6u4p+vmB+Slu2++qjK0TuzXegP/rHHt22q7FBIo9LgfFQHUQVG1bvwTBBI
UMtC1QNHBOTeVKDUlJsruBukBlDH2LX7ELrpAJ5R0Icf2MY6MktPF0nJjbtsPYGY
5v+zn1LH0mR2e6jAzYiI41M3rUoK5OydQOgT9Eo7r9Nu29eJ8ak2AleC34DGDhIs
IpLRABJlRXCPKdGOZR9+AAxaHTIbgwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHPg
QhWL/D/wRbKUiqUlJI5rihFKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNEYyNTA3NEMxQkQxMUVGQjVENzRCOTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHCMA0GCSqGSIb3DQEB
CwUAA4IBAQDCO0YgjtQOhlC6/nF23IfiFjzxrTK5S11koOg8SAaRmAZxxZ92WFWF
f4uKDE5/4sgow+RPxYOOfCcErG/F8exPyF2xPHcEEo1L9jJvpBItpsMhQmo5pdp4
gGH9sNM9LvNkkkllXsCmAafc99bIk10YPvquXKFxAqj/AtGzJ0n5f4LopNPhgyoH
QWj2gkv+6Bbabm0BaeDwo9Mkd5V+UK/+hEpUdn9i8aRDPlpQ68zuaqDlPEIhM38a
BLGQvC7bSmoF762eLlo3W6DYG1/o/tA9n1f2b/UEqnqCEW1eSIKB7OqqkYAC+O7A
zbBpA9dFAsZCk2hzbLtzPUpBsPdiJZkW
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:10 2025 by rpki-client