Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04D446CE2C211EF88C80152762E951A.roa
File: C04D446CE2C211EF88C80152762E951A.roa (raw, json)
Hash identifier: ZxUc3UdcJlM9OHjmAqiLjFdoD1MXoV+xrE1WEreoPpU=
Subject key identifier: CA:16:E2:C4:C9:EE:42:A9:B1:4B:80:B8:82:A3:A4:E1:BE:BE:48:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015052
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04D446CE2C211EF88C80152762E951A.roa
Signing time: Tue 04 Feb 2025 06:39:15 +0000
ROA not before: Tue 04 Feb 2025 06:39:11 +0000
ROA not after: Wed 30 Apr 2025 06:39:11 +0000
asID: 18229
IP address blocks: 154.210.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86098 (0x15052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 06:39:11 2025 GMT
Not After : Apr 30 06:39:11 2025 GMT
Subject: CN=67a1b613-fc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:3a:46:91:c2:52:e8:b5:35:1c:29:38:a7:
4c:0d:ad:d9:aa:d1:2e:57:dc:46:8c:63:a6:62:8f:
82:89:11:1a:88:ae:23:70:58:9d:eb:bd:cf:13:21:
7c:c5:d8:e0:f2:3a:eb:12:0d:0f:aa:fc:e8:78:9a:
26:3d:54:4e:0f:15:34:a4:55:90:c4:2a:0d:f4:31:
7d:1c:cd:40:df:fa:f0:01:5c:52:ea:ed:ab:6a:49:
3b:5d:40:ae:64:c5:0a:65:dd:b5:35:b4:2b:72:4a:
94:cd:e8:65:19:a3:49:12:73:32:42:a6:e0:d3:ca:
2b:ff:fa:48:2f:2a:a2:24:51:a8:04:57:59:53:bd:
68:f3:cd:d1:4a:bd:8a:d6:1b:bf:58:0e:c9:f8:d7:
4f:1c:6e:a5:44:3b:4c:e2:93:56:e2:2e:1a:59:56:
20:50:45:07:9f:dd:6f:4d:7e:53:9e:e3:e0:19:b1:
e4:90:fa:af:c8:ff:02:8e:4f:d7:b4:7e:7a:f5:f6:
e2:c4:8e:fb:e4:ce:d1:52:9d:8b:f6:46:34:b7:8a:
7c:b1:bc:5b:c3:6e:b9:ee:09:b7:59:bb:d0:c3:0c:
f4:74:4c:db:0e:0b:30:54:92:1d:cb:1a:f6:f3:f3:
ad:9d:71:99:76:bf:f0:ca:cd:da:bc:fd:7e:8a:88:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:E2:C4:C9:EE:42:A9:B1:4B:80:B8:82:A3:A4:E1:BE:BE:48:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C04D446CE2C211EF88C80152762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.191.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:25:14:ec:fb:84:84:f4:ae:43:ed:e7:44:58:80:0c:87:02:
9a:9d:84:6e:be:e8:07:06:a9:79:14:16:46:2f:aa:0a:5e:30:
af:8b:49:13:3e:b9:e7:a9:89:f0:71:8d:af:57:93:30:c2:33:
ac:b3:58:97:8d:ad:c1:12:5c:78:9f:69:1e:9b:42:82:6c:90:
6b:2f:d8:25:05:07:c6:0e:1e:17:1a:6f:b1:37:75:ba:00:b8:
b2:29:94:37:b9:38:b9:de:0b:bc:3a:99:65:86:10:85:d7:2c:
45:34:05:fa:70:f8:e5:9a:74:60:b2:f3:fa:fd:96:ef:99:18:
11:b3:34:92:6c:a5:5c:41:71:e0:29:5c:d0:84:51:dd:64:2f:
79:a0:4d:cc:8f:d3:f6:57:3f:a2:ff:f2:bc:12:c1:46:87:ad:
bb:9f:7e:27:27:db:7f:81:e7:8c:ad:c6:60:49:41:97:9c:c7:
21:f2:e7:1c:57:ab:f9:0f:e1:bd:6a:e5:9f:bc:c4:c3:9f:6c:
c7:41:27:f5:36:74:29:ab:03:e6:87:58:6f:78:de:d0:0c:1e:
ee:a8:05:a7:f5:ac:eb:63:66:a4:46:d6:ff:9b:48:b6:30:8c:
78:e4:fb:2d:f4:92:6b:de:ed:04:f3:62:ec:3c:ea:6a:18:30:
d0:7e:b8:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVBSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MDYzOTExWhcNMjUwNDMwMDYzOTExWjAYMRYw
FAYDVQQDEw02N2ExYjYxMy1mYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy746RpHCUui1NRwpOKdMDa3ZqtEuV9xGjGOmYo+CiREaiK4jcFid673P
EyF8xdjg8jrrEg0PqvzoeJomPVRODxU0pFWQxCoN9DF9HM1A3/rwAVxS6u2rakk7
XUCuZMUKZd21NbQrckqUzehlGaNJEnMyQqbg08or//pILyqiJFGoBFdZU71o883R
Sr2K1hu/WA7J+NdPHG6lRDtM4pNW4i4aWVYgUEUHn91vTX5TnuPgGbHkkPqvyP8C
jk/XtH569fbixI775M7RUp2L9kY0t4p8sbxbw2657gm3WbvQwwz0dEzbDgswVJId
yxr28/OtnXGZdr/wys3avP1+iogEjwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMoW
4sTJ7kKpsUuAuIKjpOG+vkidMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMDRENDQ2Q0UyQzIxMUVGODhDODAxNTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtK/MA0GCSqGSIb3DQEB
CwUAA4IBAQCtJRTs+4SE9K5D7edEWIAMhwKanYRuvugHBql5FBZGL6oKXjCvi0kT
PrnnqYnwcY2vV5MwwjOss1iXja3BElx4n2kem0KCbJBrL9glBQfGDh4XGm+xN3W6
ALiyKZQ3uTi53gu8OpllhhCF1yxFNAX6cPjlmnRgsvP6/ZbvmRgRszSSbKVcQXHg
KVzQhFHdZC95oE3Mj9P2Vz+i//K8EsFGh627n34nJ9t/geeMrcZgSUGXnMch8ucc
V6v5D+G9auWfvMTDn2zHQSf1NnQpqwPmh1hveN7QDB7uqAWn9azrY2akRtb/m0i2
MIx45Pst9JJr3u0E82LsPOpqGDDQfrgE
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:14 2025 by rpki-client