Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7BF8FA0C34D11EFA6159C8B762E951A.roa
File: C7BF8FA0C34D11EFA6159C8B762E951A.roa (raw, json)
Hash identifier: 6CEiP3tTlAyyqJjFWKM9K/4zDix8qqPXK0d1fq1fwYc=
Subject key identifier: 40:79:BA:B1:5D:B4:F7:83:01:25:54:41:AC:E8:1A:DC:9E:FA:2C:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012585
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7BF8FA0C34D11EFA6159C8B762E951A.roa
Signing time: Thu 26 Dec 2024 05:53:50 +0000
ROA not before: Thu 26 Dec 2024 05:53:47 +0000
ROA not after: Sun 12 Dec 2027 05:53:47 +0000
asID: 17561
IP address blocks: 154.95.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75141 (0x12585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 05:53:47 2024 GMT
Not After : Dec 12 05:53:47 2027 GMT
Subject: CN=676cef6e-08c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:75:56:33:d9:fd:83:be:c2:1e:c2:27:76:
9e:66:37:c4:63:74:96:7b:0a:e6:a8:e0:40:7f:bb:
de:c2:c9:0f:f9:d2:89:2a:fd:0e:0a:96:81:b4:77:
33:5f:c3:b3:8a:df:a2:52:db:dc:f4:2d:f9:87:b0:
30:db:d7:41:74:4e:93:05:26:e3:8f:98:a5:98:9e:
da:b2:70:56:a0:63:81:87:a7:d4:89:9d:a1:de:83:
da:e3:58:a1:2e:1a:dd:72:56:57:99:7a:b0:f7:b2:
53:6a:fb:60:9d:31:54:5f:86:ef:4c:60:55:fb:e5:
b0:93:52:7e:f6:f6:6b:d9:b8:42:0a:3c:5c:98:69:
f7:59:c7:85:87:a9:d2:4b:5f:60:4e:38:5c:c0:52:
95:ab:7c:45:fb:60:1d:85:ec:07:84:f4:15:d1:8a:
d9:4e:0f:40:81:93:1a:ec:3a:1f:b7:4a:91:8a:ef:
b2:b3:40:d2:f3:47:62:e9:18:e1:c4:b9:e3:3c:3b:
c2:da:9c:eb:62:4e:5b:15:a5:88:fb:a5:3f:6e:96:
4f:9b:d5:f7:b5:e6:17:06:0a:4f:04:ad:e1:0c:47:
60:08:70:8a:0e:ca:bb:f8:f0:f1:f6:00:07:69:fe:
a0:06:45:33:01:09:85:04:db:87:b9:42:ac:84:9d:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:79:BA:B1:5D:B4:F7:83:01:25:54:41:AC:E8:1A:DC:9E:FA:2C:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7BF8FA0C34D11EFA6159C8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.3.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9f:ed:80:9a:03:c6:72:72:ab:7b:ca:3b:d5:c9:2c:53:14:
7a:79:5b:57:27:14:1b:84:c2:e3:47:c0:78:8d:d2:8c:a3:60:
60:6b:8c:31:e9:46:75:ff:12:ce:2a:fa:06:da:9b:2d:28:18:
5c:f4:92:6f:7e:0a:7c:8a:ee:f1:36:b1:b8:fd:7a:7f:4e:34:
f3:6a:56:10:ca:f3:83:1e:f6:91:20:ca:06:8d:b4:ea:ea:c0:
03:0e:e2:a2:00:1b:1a:b2:fe:c1:55:90:2e:e9:79:3f:1f:77:
cf:54:d8:7a:20:0a:58:39:d3:e6:a3:bb:25:c3:b7:06:a2:f9:
bc:1a:a1:b7:bd:98:12:6a:b3:a2:69:fd:0c:4d:1b:16:05:37:
48:74:f5:74:29:48:fc:b4:df:eb:ea:63:76:14:1b:51:07:75:
e7:53:bf:90:83:a2:bd:1b:aa:60:1e:ef:47:8d:30:a9:14:94:
ef:ec:f0:9f:77:51:c4:b4:af:f2:91:e0:3b:c7:bb:1e:c5:92:
6b:fa:3d:50:79:6d:1a:10:1d:a2:20:30:b7:be:44:1d:31:73:
61:92:e8:11:9b:7d:d9:c1:ad:2a:ff:ef:37:0f:af:7a:d5:24:
78:08:68:59:9d:10:0e:22:11:49:6b:31:63:4d:04:95:b9:d8:
e9:fa:53:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASWFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDU1MzQ3WhcNMjcxMjEyMDU1MzQ3WjAYMRYw
FAYDVQQDEw02NzZjZWY2ZS0wOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw7V1VjPZ/YO+wh7CJ3aeZjfEY3SWewrmqOBAf7vewskP+dKJKv0OCpaB
tHczX8Ozit+iUtvc9C35h7Aw29dBdE6TBSbjj5ilmJ7asnBWoGOBh6fUiZ2h3oPa
41ihLhrdclZXmXqw97JTavtgnTFUX4bvTGBV++Wwk1J+9vZr2bhCCjxcmGn3WceF
h6nSS19gTjhcwFKVq3xF+2AdhewHhPQV0YrZTg9AgZMa7Doft0qRiu+ys0DS80di
6RjhxLnjPDvC2pzrYk5bFaWI+6U/bpZPm9X3teYXBgpPBK3hDEdgCHCKDsq7+PDx
9gAHaf6gBkUzAQmFBNuHuUKshJ0yLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEB5
urFdtPeDASVUQazoGtye+izKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DN0JGOEZBMEMzNEQxMUVGQTYxNTlDOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8DMA0GCSqGSIb3DQEB
CwUAA4IBAQCEn+2AmgPGcnKre8o71cksUxR6eVtXJxQbhMLjR8B4jdKMo2Bga4wx
6UZ1/xLOKvoG2pstKBhc9JJvfgp8iu7xNrG4/Xp/TjTzalYQyvODHvaRIMoGjbTq
6sADDuKiABsasv7BVZAu6Xk/H3fPVNh6IApYOdPmo7slw7cGovm8GqG3vZgSarOi
af0MTRsWBTdIdPV0KUj8tN/r6mN2FBtRB3XnU7+Qg6K9G6pgHu9HjTCpFJTv7PCf
d1HEtK/ykeA7x7sexZJr+j1QeW0aEB2iIDC3vkQdMXNhkugRm33Zwa0q/+83D696
1SR4CGhZnRAOIhFJazFjTQSVudjp+lNC
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:34 2025 by rpki-client