Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4944A00C41F11EF9D5FCE4A762E951A.roa
File: C4944A00C41F11EF9D5FCE4A762E951A.roa (raw, json)
Hash identifier: dPz+QaDUe3QTAQMQfQMKuPQR7tUzTQBez7sw906DdOU=
Subject key identifier: 83:CF:ED:E4:3C:F5:3B:5E:EB:B5:58:8A:11:FE:8D:60:3B:47:35:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4944A00C41F11EF9D5FCE4A762E951A.roa
Signing time: Fri 27 Dec 2024 06:56:59 +0000
ROA not before: Fri 27 Dec 2024 06:56:56 +0000
ROA not after: Sun 12 Dec 2027 06:56:56 +0000
asID: 17561
IP address blocks: 154.201.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76211 (0x129b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:56:56 2024 GMT
Not After : Dec 12 06:56:56 2027 GMT
Subject: CN=676e4fbb-f68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:e9:a0:e6:b9:7a:f1:69:22:b8:03:4c:e5:
65:4b:ee:86:29:ee:f4:bb:6f:59:b6:2e:45:31:cf:
96:a5:ed:84:21:fd:37:39:5d:b1:bc:27:d7:b0:7d:
ef:1f:31:59:de:35:14:ba:8f:17:fb:5e:0f:64:94:
64:6b:c7:69:56:08:67:5e:8e:b1:b6:b5:4e:5f:76:
32:10:e2:75:0b:8b:a4:e7:01:6c:01:17:50:bb:d9:
da:73:b3:2e:bb:a7:b1:7b:6c:25:56:39:b5:a2:ef:
be:8b:51:41:da:9d:60:a5:5d:d9:83:12:93:fe:3f:
2e:c3:18:76:5b:73:d7:62:c0:1c:7e:98:52:47:86:
f9:a9:92:68:93:99:6e:ac:0d:b1:8d:84:26:66:0c:
c8:dc:01:99:2a:0a:6e:28:37:b1:fa:5a:3d:49:93:
02:4b:cb:5a:8a:38:1c:8f:0a:f9:dc:52:0e:1d:28:
0a:64:54:4c:ea:42:d5:30:c9:9b:ba:ae:8a:4d:6d:
79:ca:80:c1:be:ad:43:34:75:0c:4b:e8:a3:51:a0:
4a:29:ba:a0:41:f5:88:12:90:49:da:87:76:e8:7a:
f5:ed:3c:c6:94:46:2b:65:c2:26:fe:1c:03:7a:27:
4d:fb:85:5c:b9:28:13:0e:41:a9:67:c4:42:c6:bc:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:ED:E4:3C:F5:3B:5E:EB:B5:58:8A:11:FE:8D:60:3B:47:35:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4944A00C41F11EF9D5FCE4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.44.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:b6:73:c9:e0:d9:3c:95:11:d3:5d:72:18:90:3f:d8:6e:08:
53:1c:ab:9a:a4:7a:6a:b6:d5:b7:01:ba:14:a9:22:28:85:9c:
24:1d:2e:91:62:79:54:2c:eb:5e:d5:67:ff:a0:06:b5:d0:4d:
24:c2:02:b7:aa:cf:c2:99:c3:15:08:98:1d:66:ea:71:0d:dd:
88:c6:20:0e:18:83:9e:f9:ba:43:4b:88:cc:8b:a0:75:f3:31:
ad:dd:3f:60:03:9a:e2:73:27:b7:17:a6:5e:a5:aa:a4:45:9a:
5a:54:b1:f1:33:60:7e:73:58:6d:4c:8b:3c:96:71:01:7f:28:
e3:f9:77:29:1f:11:fd:e4:99:0a:3d:95:2e:11:10:df:58:4b:
4c:f6:03:f1:41:54:97:d1:19:cc:2c:af:5e:88:0b:9c:1c:d3:
e1:18:6b:68:f2:0c:d7:df:3f:08:47:23:56:6b:f9:7b:22:cb:
c9:58:a1:a6:1b:8b:0a:90:8c:82:63:74:82:c6:2f:36:2f:4b:
cb:75:8a:67:ab:78:be:9d:4e:bc:19:ec:2b:5f:b1:71:b9:02:
35:98:7c:c4:de:7c:46:26:ac:8a:f0:b3:c8:33:c3:28:d2:a7:
14:49:db:88:f6:8c:ef:be:a2:28:e0:50:42:22:fc:d7:d0:39:
24:4b:ec:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASmzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDY1NjU2WhcNMjcxMjEyMDY1NjU2WjAYMRYw
FAYDVQQDEw02NzZlNGZiYi1mNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxsbpoOa5evFpIrgDTOVlS+6GKe70u29Zti5FMc+Wpe2EIf03OV2xvCfX
sH3vHzFZ3jUUuo8X+14PZJRka8dpVghnXo6xtrVOX3YyEOJ1C4uk5wFsARdQu9na
c7Muu6exe2wlVjm1ou++i1FB2p1gpV3ZgxKT/j8uwxh2W3PXYsAcfphSR4b5qZJo
k5lurA2xjYQmZgzI3AGZKgpuKDex+lo9SZMCS8taijgcjwr53FIOHSgKZFRM6kLV
MMmbuq6KTW15yoDBvq1DNHUMS+ijUaBKKbqgQfWIEpBJ2od26Hr17TzGlEYrZcIm
/hwDeidN+4VcuSgTDkGpZ8RCxrzvDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIPP
7eQ89Tte67VYihH+jWA7RzWJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDk0NEEwMEM0MUYxMUVGOUQ1RkNFNEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsksMA0GCSqGSIb3DQEB
CwUAA4IBAQDRtnPJ4Nk8lRHTXXIYkD/YbghTHKuapHpqttW3AboUqSIohZwkHS6R
YnlULOte1Wf/oAa10E0kwgK3qs/CmcMVCJgdZupxDd2IxiAOGIOe+bpDS4jMi6B1
8zGt3T9gA5ricye3F6ZepaqkRZpaVLHxM2B+c1htTIs8lnEBfyjj+XcpHxH95JkK
PZUuERDfWEtM9gPxQVSX0RnMLK9eiAucHNPhGGto8gzX3z8IRyNWa/l7IsvJWKGm
G4sKkIyCY3SCxi82L0vLdYpnq3i+nU68GewrX7FxuQI1mHzE3nxGJqyK8LPIM8Mo
0qcUSduI9ozvvqIo4FBCIvzX0DkkS+xZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:32 2025 by rpki-client