Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBAA92F8C92B11EF9AB66651762E951A.roa
File: BBAA92F8C92B11EF9AB66651762E951A.roa (raw, json)
Hash identifier: Dwn1UUj1QaXKX1yfQom63QB4UAtqBGFe43gia6+UE7U=
Subject key identifier: F5:E9:03:69:8F:F3:EF:D3:70:B2:24:AB:CF:14:E4:9F:43:D8:83:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013381
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBAA92F8C92B11EF9AB66651762E951A.roa
Signing time: Thu 02 Jan 2025 17:05:14 +0000
ROA not before: Thu 02 Jan 2025 17:05:10 +0000
ROA not after: Sat 13 Dec 2025 17:05:10 +0000
asID: 984
IP address blocks: 154.222.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78721 (0x13381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:05:10 2025 GMT
Not After : Dec 13 17:05:10 2025 GMT
Subject: CN=6776c74a-4fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:cf:9a:7b:4f:8c:4a:6e:2c:36:9d:87:ed:
38:4c:1f:3e:c4:20:75:65:3f:3f:d5:92:e8:23:c7:
5a:2d:99:12:a9:b0:53:e2:7d:04:74:29:73:ad:35:
cf:1e:fd:27:de:1d:cd:9a:86:62:38:5f:a9:bd:26:
45:97:48:46:7f:09:a1:14:10:d3:09:f7:09:f2:6a:
2a:a3:bf:7b:e7:f6:e7:a4:62:37:76:73:6b:62:65:
d5:95:2a:e8:a6:7b:f1:0d:07:78:27:46:49:a3:19:
f0:0f:16:0e:5c:54:7a:fa:db:3c:fd:35:f5:a3:f0:
6a:ca:c3:c2:4f:1c:87:ae:72:b0:9b:32:b7:56:a3:
ef:6a:11:c5:c0:6a:ba:d5:b4:ec:c3:8b:02:56:9c:
07:9d:4d:e2:ab:72:22:1c:4e:a7:e6:55:71:3c:fa:
7f:f2:08:11:03:8a:a4:79:b6:43:fa:6a:e2:6c:1c:
4f:b2:dc:04:42:87:01:d5:94:78:a6:9e:65:23:4b:
e4:cd:3c:36:a2:1b:1f:1c:6b:1a:ea:88:89:06:f1:
c2:55:b4:da:08:ce:d1:be:a4:94:cf:71:91:9b:49:
7e:bd:a9:27:c9:fe:3f:c1:02:c6:27:46:5a:bf:e6:
d0:d1:23:af:61:e5:69:98:e2:3e:00:fe:a7:95:fc:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:03:69:8F:F3:EF:D3:70:B2:24:AB:CF:14:E4:9F:43:D8:83:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBAA92F8C92B11EF9AB66651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.141.0/24
Signature Algorithm: sha256WithRSAEncryption
10:35:3d:ce:c1:9b:cd:fd:ab:64:2d:9f:62:b7:b7:81:2c:6a:
15:62:1f:b5:e7:8b:3f:05:58:33:c7:cd:fe:06:f1:51:fa:6f:
28:62:cc:19:a2:08:1b:e8:33:d1:93:7f:29:1a:2b:24:d1:18:
ad:29:9d:9f:9a:b9:d9:60:56:4b:44:bf:ad:dd:41:1a:4e:9a:
de:b7:71:a2:d4:d2:6d:ad:ad:11:9a:a6:d2:9d:82:c4:f5:06:
bd:d0:b5:55:d2:bb:2d:61:b5:b6:85:05:0d:7c:11:bf:85:0f:
e7:50:f5:37:42:99:03:fe:46:7f:70:f2:c3:e4:6f:50:b8:be:
f4:c6:ba:36:29:17:03:f0:01:63:87:17:9f:45:24:14:cb:5d:
6f:ef:ec:0e:71:38:fd:d4:21:c8:47:35:a1:f7:35:c0:ce:9d:
19:de:11:2a:3a:c8:b9:31:d8:d7:96:0a:c0:79:92:3f:59:f3:
ab:b7:98:f0:9b:88:36:e8:a7:71:69:25:1a:d1:63:9f:4c:ae:
cf:3b:d1:e5:06:8c:be:af:2e:5a:37:0f:10:3a:e4:5a:cc:ed:
79:34:6f:9d:e4:c5:96:df:01:be:42:10:b7:00:34:9d:65:80:
61:01:a0:ef:63:2b:7f:0e:37:ad:22:a8:be:15:74:1e:79:d6:
a2:b0:c4:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATOBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTcwNTEwWhcNMjUxMjEzMTcwNTEwWjAYMRYw
FAYDVQQDEw02Nzc2Yzc0YS00ZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4enPmntPjEpuLDadh+04TB8+xCB1ZT8/1ZLoI8daLZkSqbBT4n0EdClz
rTXPHv0n3h3NmoZiOF+pvSZFl0hGfwmhFBDTCfcJ8moqo7975/bnpGI3dnNrYmXV
lSropnvxDQd4J0ZJoxnwDxYOXFR6+ts8/TX1o/BqysPCTxyHrnKwmzK3VqPvahHF
wGq61bTsw4sCVpwHnU3iq3IiHE6n5lVxPPp/8ggRA4qkebZD+mribBxPstwEQocB
1ZR4pp5lI0vkzTw2ohsfHGsa6oiJBvHCVbTaCM7RvqSUz3GRm0l+vaknyf4/wQLG
J0Zav+bQ0SOvYeVpmOI+AP6nlfyX7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPXp
A2mP8+/TcLIkq88U5J9D2INUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQkFBOTJGOEM5MkIxMUVGOUFCNjY2NTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6NMA0GCSqGSIb3DQEB
CwUAA4IBAQAQNT3OwZvN/atkLZ9it7eBLGoVYh+154s/BVgzx83+BvFR+m8oYswZ
oggb6DPRk38pGisk0RitKZ2fmrnZYFZLRL+t3UEaTpret3Gi1NJtra0RmqbSnYLE
9Qa90LVV0rstYbW2hQUNfBG/hQ/nUPU3QpkD/kZ/cPLD5G9QuL70xro2KRcD8AFj
hxefRSQUy11v7+wOcTj91CHIRzWh9zXAzp0Z3hEqOsi5MdjXlgrAeZI/WfOrt5jw
m4g26KdxaSUa0WOfTK7PO9HlBoy+ry5aNw8QOuRazO15NG+d5MWW3wG+QhC3ADSd
ZYBhAaDvYyt/DjetIqi+FXQeedaisMQM
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:04:44 2025 by rpki-client