Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3371F50C34F11EF891F7C98762E951A.roa
File: C3371F50C34F11EF891F7C98762E951A.roa (raw, json)
Hash identifier: I027ANaBRoHTrj3VDE3D4lWBN/NOdjKW4cSI9rIQfL0=
Subject key identifier: C4:35:72:B8:03:07:D9:D3:35:E5:A3:A7:7D:1F:E4:76:4B:1B:94:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01259B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3371F50C34F11EF891F7C98762E951A.roa
Signing time: Thu 26 Dec 2024 06:08:02 +0000
ROA not before: Thu 26 Dec 2024 06:07:58 +0000
ROA not after: Sun 12 Dec 2027 06:07:58 +0000
asID: 17561
IP address blocks: 154.95.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75163 (0x1259b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:07:58 2024 GMT
Not After : Dec 12 06:07:58 2027 GMT
Subject: CN=676cf2c2-96b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:b6:2b:05:54:58:34:b1:de:ce:73:6c:37:
1a:f2:cb:3d:25:3b:9c:ef:00:e1:ae:fa:7e:45:34:
fa:c7:1c:f8:51:c3:bc:fd:01:2f:09:b6:92:31:cd:
dd:7f:48:13:2b:0f:29:0a:b1:19:59:56:39:86:7b:
0a:22:38:98:7a:69:9c:5c:4b:8c:ea:ac:33:de:47:
1a:62:2e:b1:c8:b9:53:77:95:9f:57:d1:0f:07:dc:
38:5f:c5:41:c8:43:de:b6:e3:30:1c:04:d3:22:16:
d2:ce:36:a9:82:c8:73:37:aa:7a:1c:3b:51:f7:91:
df:85:7a:02:e5:7a:7f:90:f5:a0:97:e3:06:6e:ff:
31:93:08:84:27:0a:64:6b:89:eb:42:ff:4c:a3:34:
2b:55:4e:2c:9e:3c:dc:ca:08:99:64:5d:ba:09:07:
f1:d2:4b:52:d0:ee:81:98:2a:2e:10:6a:86:fe:43:
0b:22:f8:10:74:a1:cc:91:28:40:6d:5b:0b:5d:23:
36:cf:3c:f6:62:6c:42:c5:0b:d4:7e:25:ce:5b:52:
f2:2e:d5:9d:e5:67:23:fa:18:ba:b2:bd:f6:5a:e4:
e7:04:10:cf:79:e0:ee:c9:85:6a:2a:83:2f:84:84:
74:f4:e7:50:4e:cd:d5:ae:79:c0:4a:bf:58:f3:1a:
61:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:35:72:B8:03:07:D9:D3:35:E5:A3:A7:7D:1F:E4:76:4B:1B:94:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3371F50C34F11EF891F7C98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.26.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ee:b1:1f:3d:25:6a:0d:de:f3:ac:c1:cd:0b:49:a1:7f:5f:
95:a9:99:33:72:73:06:0e:3b:6a:57:ee:d9:23:66:9e:8e:1c:
3a:99:3d:f2:97:72:e0:9e:8c:27:9a:32:5e:d1:30:92:03:b7:
7f:da:e4:22:11:c7:7c:51:ae:71:fb:dd:34:0d:01:92:eb:8e:
c3:ec:85:57:70:8f:a9:1a:e4:49:81:ba:5b:55:0c:68:73:0a:
17:dd:c3:4d:7e:64:5c:a6:cb:95:b2:66:bd:94:28:de:cd:b1:
27:ce:34:b3:11:61:93:fb:2b:99:d7:65:64:cb:e7:87:cc:79:
b7:c1:d3:4c:7a:4e:e3:ba:0e:80:6e:88:e8:3f:08:2a:bb:ff:
32:21:d1:81:62:5a:2d:65:69:cd:7c:e8:13:59:40:26:86:8a:
7e:bc:9a:fb:31:b2:54:70:3d:a7:4b:24:20:44:90:a4:de:31:
cf:78:6e:91:96:b0:37:5e:4a:e6:a0:6d:34:df:05:aa:5c:ba:
9e:34:18:9e:6c:49:00:e9:59:67:fb:8d:14:78:e8:a2:54:a5:
82:53:23:c5:a1:2b:ef:29:a5:45:87:ab:95:50:8e:d1:a1:8e:
24:9e:de:17:51:d8:2a:74:9d:4e:bd:5d:f1:15:0a:16:b4:a7:
97:8b:27:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASWbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDYwNzU4WhcNMjcxMjEyMDYwNzU4WjAYMRYw
FAYDVQQDEw02NzZjZjJjMi05NmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0y62KwVUWDSx3s5zbDca8ss9JTuc7wDhrvp+RTT6xxz4UcO8/QEvCbaS
Mc3df0gTKw8pCrEZWVY5hnsKIjiYemmcXEuM6qwz3kcaYi6xyLlTd5WfV9EPB9w4
X8VByEPetuMwHATTIhbSzjapgshzN6p6HDtR95HfhXoC5Xp/kPWgl+MGbv8xkwiE
Jwpka4nrQv9MozQrVU4snjzcygiZZF26CQfx0ktS0O6BmCouEGqG/kMLIvgQdKHM
kShAbVsLXSM2zzz2YmxCxQvUfiXOW1LyLtWd5Wcj+hi6sr32WuTnBBDPeeDuyYVq
KoMvhIR09OdQTs3VrnnASr9Y8xph+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMQ1
crgDB9nTNeWjp30f5HZLG5RxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzM3MUY1MEMzNEYxMUVGODkxRjdDOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8aMA0GCSqGSIb3DQEB
CwUAA4IBAQCB7rEfPSVqDd7zrMHNC0mhf1+VqZkzcnMGDjtqV+7ZI2aejhw6mT3y
l3LgnownmjJe0TCSA7d/2uQiEcd8Ua5x+900DQGS647D7IVXcI+pGuRJgbpbVQxo
cwoX3cNNfmRcpsuVsma9lCjezbEnzjSzEWGT+yuZ12Vky+eHzHm3wdNMek7jug6A
bojoPwgqu/8yIdGBYlotZWnNfOgTWUAmhop+vJr7MbJUcD2nSyQgRJCk3jHPeG6R
lrA3XkrmoG003wWqXLqeNBiebEkA6Vln+40UeOiiVKWCUyPFoSvvKaVFh6uVUI7R
oY4knt4XUdgqdJ1OvV3xFQoWtKeXiycI
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:57 2025 by rpki-client