Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC3C5AAAC54A11EF897B8EA6762E951A.roa
File: CC3C5AAAC54A11EF897B8EA6762E951A.roa (raw, json)
Hash identifier: pMCzVvstvYRwt0FsbrdxPlLG3qE3F31SU7UVxnYo7Po=
Subject key identifier: DD:A4:79:34:5D:AE:86:7F:AF:E2:B3:74:65:26:B0:F5:DB:E2:56:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC3C5AAAC54A11EF897B8EA6762E951A.roa
Signing time: Sat 28 Dec 2024 18:37:32 +0000
ROA not before: Sat 28 Dec 2024 18:37:28 +0000
ROA not after: Sun 12 Dec 2027 18:37:28 +0000
asID: 17561
IP address blocks: 154.209.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77015 (0x12cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:37:28 2024 GMT
Not After : Dec 12 18:37:28 2027 GMT
Subject: CN=6770456c-20ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:c9:d6:10:af:25:9f:7e:9b:d1:6d:f5:3a:
3b:45:63:7b:9a:d6:e0:7a:a2:e7:09:40:0b:6d:c5:
91:3c:af:b5:dc:8c:6a:de:da:3e:dd:ec:38:f1:4c:
4e:b5:de:db:ee:dc:81:a3:59:af:c5:22:2e:40:c9:
c2:be:2c:bd:92:0e:31:59:a7:8f:97:36:f8:db:8f:
ec:4d:dc:84:f9:50:b7:96:5d:38:47:2c:74:6b:1a:
6c:79:e3:ef:67:0d:8b:c8:21:82:79:9d:72:e0:1a:
a3:38:6f:e6:52:61:38:64:a6:07:43:e7:a1:a8:00:
d5:cd:64:50:90:a9:01:d3:7a:41:b7:d8:15:a5:be:
09:58:18:e0:47:ba:de:78:a4:f2:19:e8:97:15:69:
ac:3d:99:f8:03:c0:bc:ca:2e:d4:e2:1f:ea:df:8d:
8b:37:7b:f9:58:f2:17:1d:be:b2:16:f1:7c:96:53:
bc:43:d7:8c:d0:fe:4c:a0:b9:4e:0a:59:bc:18:44:
a3:23:ca:91:27:64:e8:00:30:b2:1b:e7:84:a7:cc:
89:ec:e4:cb:e6:62:54:ec:b2:c3:5c:ef:b2:c2:73:
c4:bc:62:db:cb:e5:6b:e7:ff:67:76:6c:fc:68:44:
06:db:1e:79:4d:87:b7:68:2e:10:f2:c3:4c:51:18:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:79:34:5D:AE:86:7F:AF:E2:B3:74:65:26:B0:F5:DB:E2:56:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC3C5AAAC54A11EF897B8EA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.72.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ca:73:46:11:23:7d:9b:3a:35:ab:6f:9e:54:96:bc:e4:07:
d0:05:8c:49:22:7d:77:59:2d:ca:7f:c9:3f:b9:c0:71:2b:f0:
cd:53:f4:70:51:82:56:05:c6:ba:5b:dc:8a:00:25:28:79:5b:
4c:e0:17:fa:32:d1:a8:55:05:99:02:2d:14:b9:65:40:e9:97:
f8:0b:74:b0:b5:e5:49:d2:65:8e:f4:8c:6c:54:5e:4c:14:ed:
53:f0:13:72:cb:cf:b8:49:c6:a4:a5:a3:c6:1d:a4:ef:06:0b:
dd:77:ee:28:a2:31:59:8b:30:a2:30:67:79:bc:3a:73:83:6e:
a1:17:90:36:46:96:50:18:ec:bb:75:49:15:81:c3:01:01:eb:
13:b3:09:bb:e3:b0:b3:59:f3:3e:58:6e:09:39:bc:7f:32:4e:
04:b4:b1:b4:a7:dd:ae:11:e3:75:a4:7e:39:9f:da:90:e4:22:
d2:83:b1:d0:0f:6b:ac:88:5d:e7:c7:d6:da:34:93:db:f5:c6:
5f:de:36:e0:8d:33:20:33:eb:37:b1:dd:ce:a7:12:38:21:e4:
00:71:8e:92:59:28:85:35:03:dd:ef:15:5e:13:48:2e:69:8d:
87:25:13:3b:c7:0f:a1:ee:d6:52:d3:b6:25:1e:42:44:0e:e8:
21:d8:49:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASzXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTgzNzI4WhcNMjcxMjEyMTgzNzI4WjAYMRYw
FAYDVQQDEw02NzcwNDU2Yy0yMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApEHJ1hCvJZ9+m9Ft9To7RWN7mtbgeqLnCUALbcWRPK+13Ixq3to+3ew4
8UxOtd7b7tyBo1mvxSIuQMnCviy9kg4xWaePlzb424/sTdyE+VC3ll04Ryx0axps
eePvZw2LyCGCeZ1y4BqjOG/mUmE4ZKYHQ+ehqADVzWRQkKkB03pBt9gVpb4JWBjg
R7reeKTyGeiXFWmsPZn4A8C8yi7U4h/q342LN3v5WPIXHb6yFvF8llO8Q9eM0P5M
oLlOClm8GESjI8qRJ2ToADCyG+eEp8yJ7OTL5mJU7LLDXO+ywnPEvGLby+Vr5/9n
dmz8aEQG2x55TYe3aC4Q8sNMURiQowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN2k
eTRdroZ/r+KzdGUmsPXb4lbEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQzNDNUFBQUM1NEExMUVGODk3QjhFQTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtFIMA0GCSqGSIb3DQEB
CwUAA4IBAQDQynNGESN9mzo1q2+eVJa85AfQBYxJIn13WS3Kf8k/ucBxK/DNU/Rw
UYJWBca6W9yKACUoeVtM4Bf6MtGoVQWZAi0UuWVA6Zf4C3SwteVJ0mWO9IxsVF5M
FO1T8BNyy8+4ScakpaPGHaTvBgvdd+4oojFZizCiMGd5vDpzg26hF5A2RpZQGOy7
dUkVgcMBAesTswm747CzWfM+WG4JObx/Mk4EtLG0p92uEeN1pH45n9qQ5CLSg7HQ
D2usiF3nx9baNJPb9cZf3jbgjTMgM+s3sd3OpxI4IeQAcY6SWSiFNQPd7xVeE0gu
aY2HJRM7xw+h7tZS07YlHkJEDugh2EkO
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:30 2025 by rpki-client