Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C46607E2CDC211EF90119B89762E951A.roa
File: C46607E2CDC211EF90119B89762E951A.roa (raw, json)
Hash identifier: ohPnTjiy9UfppXhidz6g9kQzLkwPAACrYETUeSH/NKM=
Subject key identifier: CD:A1:DC:A5:0A:AD:7E:31:2F:57:FD:06:D0:69:A8:57:3F:6C:14:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013720
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C46607E2CDC211EF90119B89762E951A.roa
Signing time: Wed 08 Jan 2025 13:16:27 +0000
ROA not before: Wed 08 Jan 2025 13:16:24 +0000
ROA not after: Tue 16 Dec 2025 13:16:24 +0000
asID: 984
IP address blocks: 154.200.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79648 (0x13720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:16:24 2025 GMT
Not After : Dec 16 13:16:24 2025 GMT
Subject: CN=677e7aab-e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:44:46:fd:c0:2a:76:0c:af:a3:78:06:6b:
2d:0e:44:ee:24:da:cf:2d:04:9f:3f:3d:6d:5d:0c:
fb:6d:4a:b0:66:78:53:2e:59:ea:59:b7:c5:75:03:
b1:3b:0b:f6:d1:4f:ae:cd:d1:ef:70:21:78:0d:99:
7a:80:db:9f:9f:77:7e:cb:d0:63:3c:9a:a6:de:40:
1e:32:c3:f2:4e:f3:c1:ea:5c:7f:3f:b2:93:c9:f5:
d9:57:86:bd:03:d3:38:3f:33:20:70:f6:a1:98:51:
0a:81:fd:e8:85:d6:05:30:f2:a7:ea:3a:40:6b:ec:
af:d9:ae:58:cc:20:e7:7e:fb:91:e5:42:cf:60:45:
3e:d3:8f:4f:9d:0e:16:84:d0:55:68:55:4f:83:ee:
20:d4:b5:1b:55:ee:2f:be:0d:cc:77:da:29:a6:71:
e0:10:4a:3d:9c:84:f9:20:26:1f:1e:5b:4b:9e:5a:
dd:d0:50:17:3e:a8:50:fe:af:8e:47:ec:3d:f5:00:
56:c4:48:90:ea:b6:c6:b3:60:3e:77:1f:69:68:7c:
24:ce:2a:89:a1:63:dc:fe:42:cc:68:83:6e:81:df:
9f:ec:96:42:01:24:b5:bc:25:d4:fc:07:64:86:71:
46:a3:59:61:b2:40:a9:18:38:05:4b:13:1d:c5:a3:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:DC:A5:0A:AD:7E:31:2F:57:FD:06:D0:69:A8:57:3F:6C:14:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C46607E2CDC211EF90119B89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.239.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e5:30:70:80:6e:c2:bc:63:b5:49:5a:a6:2d:f6:82:aa:a9:
a6:e1:15:41:71:bc:a5:f5:80:1f:15:e2:2a:55:e8:99:37:ec:
b6:40:66:f2:7f:a8:94:24:16:cb:89:60:81:f7:09:19:ea:f1:
8f:6b:c6:fb:37:bc:29:98:d8:0b:0d:52:d9:f6:c6:5a:89:21:
26:ab:dd:61:1a:82:2e:3b:74:9b:e9:1b:46:5f:d6:69:c8:74:
fa:80:6b:b0:84:46:88:02:80:05:b0:87:9e:75:14:7b:e1:41:
da:54:5a:5b:52:b4:21:55:82:66:88:70:ed:10:67:e7:0e:e3:
d0:71:a2:9a:44:61:b9:ce:ea:39:22:49:7f:0d:e3:1a:4d:d0:
55:0b:18:6c:52:8f:d2:fa:aa:f7:65:98:17:1f:7d:7c:cb:c4:
b1:cd:ec:fa:89:27:93:3e:c5:3f:f2:a8:29:29:d1:e6:56:8c:
ed:f1:39:8b:b4:f6:b9:9b:44:d7:a0:19:00:d7:19:f4:f0:dd:
ea:81:5c:bb:93:ae:69:81:6c:a7:b1:36:34:60:72:eb:b9:86:
cd:5a:75:64:99:8a:26:15:f8:3e:de:f0:bb:4f:18:6f:ae:b1:
a1:25:69:bb:82:6c:54:f1:80:ea:96:27:b4:11:6a:7d:a9:94:
5c:25:93:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATcgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTMxNjI0WhcNMjUxMjE2MTMxNjI0WjAYMRYw
FAYDVQQDEw02NzdlN2FhYi1lN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq0lERv3AKnYMr6N4BmstDkTuJNrPLQSfPz1tXQz7bUqwZnhTLlnqWbfF
dQOxOwv20U+uzdHvcCF4DZl6gNufn3d+y9BjPJqm3kAeMsPyTvPB6lx/P7KTyfXZ
V4a9A9M4PzMgcPahmFEKgf3ohdYFMPKn6jpAa+yv2a5YzCDnfvuR5ULPYEU+049P
nQ4WhNBVaFVPg+4g1LUbVe4vvg3Md9oppnHgEEo9nIT5ICYfHltLnlrd0FAXPqhQ
/q+OR+w99QBWxEiQ6rbGs2A+dx9paHwkziqJoWPc/kLMaINugd+f7JZCASS1vCXU
/AdkhnFGo1lhskCpGDgFSxMdxaNTpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM2h
3KUKrX4xL1f9BtBpqFc/bBSPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDY2MDdFMkNEQzIxMUVGOTAxMTlCODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjvMA0GCSqGSIb3DQEB
CwUAA4IBAQA05TBwgG7CvGO1SVqmLfaCqqmm4RVBcbyl9YAfFeIqVeiZN+y2QGby
f6iUJBbLiWCB9wkZ6vGPa8b7N7wpmNgLDVLZ9sZaiSEmq91hGoIuO3Sb6RtGX9Zp
yHT6gGuwhEaIAoAFsIeedRR74UHaVFpbUrQhVYJmiHDtEGfnDuPQcaKaRGG5zuo5
Ikl/DeMaTdBVCxhsUo/S+qr3ZZgXH318y8Sxzez6iSeTPsU/8qgpKdHmVozt8TmL
tPa5m0TXoBkA1xn08N3qgVy7k65pgWynsTY0YHLruYbNWnVkmYomFfg+3vC7Txhv
rrGhJWm7gmxU8YDqlie0EWp9qZRcJZNT
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client