Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC198DE8C1B411EF90B61D59762E951A.roa
File: CC198DE8C1B411EF90B61D59762E951A.roa (raw, json)
Hash identifier: 3isUpH37im0U4KqRnjFfLqV8fDITESVlZGqwnrYfoYg=
Subject key identifier: FA:19:DB:D7:17:1B:20:B4:BD:A7:F6:2B:C4:EE:DE:43:2E:94:29:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC198DE8C1B411EF90B61D59762E951A.roa
Signing time: Tue 24 Dec 2024 05:06:13 +0000
ROA not before: Tue 24 Dec 2024 05:06:10 +0000
ROA not after: Wed 10 Dec 2025 05:06:10 +0000
asID: 984
IP address blocks: 154.193.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74145 (0x121a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:06:10 2024 GMT
Not After : Dec 10 05:06:10 2025 GMT
Subject: CN=676a4145-c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:2b:f1:c2:f5:d5:58:69:6f:58:36:1d:d1:
b1:90:c5:2e:f9:0d:a9:5a:01:6a:aa:31:62:e4:6b:
c7:03:d8:10:45:c4:13:15:69:d4:9c:24:c8:4c:58:
f8:13:cd:f4:22:09:fe:48:ce:cd:3d:b5:4c:2c:c5:
73:9d:4b:9e:62:bb:3e:19:da:88:0b:74:f8:e5:67:
37:0a:89:9f:cd:24:7c:74:fa:a4:ad:f6:ca:6d:bb:
ee:c2:ab:96:b5:77:60:a7:ab:9e:4b:63:8b:67:53:
d9:3c:bc:d4:65:30:12:5d:e4:58:78:b0:3f:f8:f9:
b3:17:39:44:26:2e:b2:5a:dc:25:bb:bc:3d:5a:85:
86:e9:9a:97:81:87:fa:09:ee:1a:00:95:83:bf:af:
5a:92:ff:cf:82:f6:1b:98:74:f4:79:35:ea:ff:55:
f7:c9:c2:bf:d4:f0:8a:73:fb:98:05:df:6f:75:25:
9d:83:2f:72:d4:bd:5e:66:f3:87:39:44:57:90:77:
37:fb:f3:c9:1b:9c:5f:48:f2:d1:48:2d:4b:d4:2e:
f5:55:ee:24:46:ee:31:b2:94:fe:8b:11:ec:ee:5c:
41:b0:c3:f2:82:ec:40:ac:99:b8:c1:3c:41:23:3d:
7e:48:89:9f:0a:48:0e:76:40:3e:cb:70:cf:a1:af:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:DB:D7:17:1B:20:B4:BD:A7:F6:2B:C4:EE:DE:43:2E:94:29:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC198DE8C1B411EF90B61D59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.138.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c1:a4:0e:c6:8b:3f:99:8d:57:7c:11:e3:d2:04:a2:f8:ff:
69:4d:f0:cc:5b:bc:81:ea:30:3a:10:a3:5b:ff:6e:ea:53:63:
fd:7e:ba:d6:38:30:16:73:96:df:ae:d8:af:2c:58:7d:9b:ef:
08:f6:62:47:63:5e:a2:6b:b5:e6:b5:ed:85:dc:08:24:d9:44:
1e:38:df:79:c2:80:53:5a:83:fc:36:05:7b:57:34:57:e5:93:
fb:39:75:35:3b:39:58:11:59:d9:30:ae:1c:ea:4c:35:49:97:
77:a0:86:4e:d0:3c:75:23:8b:23:70:25:00:d9:cb:95:76:80:
4e:f2:a2:8b:58:3c:43:6a:74:23:67:1b:09:f2:44:b4:1d:71:
3a:67:d0:12:b3:a6:ab:d4:4a:fc:d3:db:06:74:72:35:51:e0:
d2:b2:10:28:12:ce:10:30:98:8c:12:3d:08:eb:f2:bd:bb:01:
b7:c4:ed:0b:3b:29:d0:aa:d6:e6:4b:80:4d:cb:cf:80:15:04:
e3:1e:9e:52:e1:d0:c8:66:ac:73:19:64:17:e9:d7:63:74:1c:
9a:d9:a0:f7:be:5c:e3:06:0e:2f:ae:68:55:05:b7:86:5b:c9:
2a:90:74:d2:df:82:57:53:6f:75:60:64:48:38:8e:72:4d:79:
3d:c6:59:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASGhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDUwNjEwWhcNMjUxMjEwMDUwNjEwWjAYMRYw
FAYDVQQDEw02NzZhNDE0NS1jNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnDor8cL11Vhpb1g2HdGxkMUu+Q2pWgFqqjFi5GvHA9gQRcQTFWnUnCTI
TFj4E830Ign+SM7NPbVMLMVznUueYrs+GdqIC3T45Wc3ComfzSR8dPqkrfbKbbvu
wquWtXdgp6ueS2OLZ1PZPLzUZTASXeRYeLA/+PmzFzlEJi6yWtwlu7w9WoWG6ZqX
gYf6Ce4aAJWDv69akv/PgvYbmHT0eTXq/1X3ycK/1PCKc/uYBd9vdSWdgy9y1L1e
ZvOHOURXkHc3+/PJG5xfSPLRSC1L1C71Ve4kRu4xspT+ixHs7lxBsMPyguxArJm4
wTxBIz1+SImfCkgOdkA+y3DPoa+rPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPoZ
29cXGyC0vaf2K8Tu3kMulCnzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQzE5OERFOEMxQjQxMUVGOTBCNjFENTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGKMA0GCSqGSIb3DQEB
CwUAA4IBAQCIwaQOxos/mY1XfBHj0gSi+P9pTfDMW7yB6jA6EKNb/27qU2P9frrW
ODAWc5bfrtivLFh9m+8I9mJHY16ia7Xmte2F3Agk2UQeON95woBTWoP8NgV7VzRX
5ZP7OXU1OzlYEVnZMK4c6kw1SZd3oIZO0Dx1I4sjcCUA2cuVdoBO8qKLWDxDanQj
ZxsJ8kS0HXE6Z9ASs6ar1Er809sGdHI1UeDSshAoEs4QMJiMEj0I6/K9uwG3xO0L
OynQqtbmS4BNy8+AFQTjHp5S4dDIZqxzGWQX6ddjdBya2aD3vlzjBg4vrmhVBbeG
W8kqkHTS34JXU291YGRIOI5yTXk9xlkE
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:01 2025 by rpki-client