Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF01C0AECE5011EF97F1D89B762E951A.roa
File: CF01C0AECE5011EF97F1D89B762E951A.roa (raw, json)
Hash identifier: 8fkN6zDs11ldfxcwkfIlOu1MuyUjg6emh9mmNbZlYNc=
Subject key identifier: 48:8D:E2:55:3D:5A:FA:B1:E9:CB:1C:C3:81:5D:2E:9A:58:C5:DC:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013844
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF01C0AECE5011EF97F1D89B762E951A.roa
Signing time: Thu 09 Jan 2025 06:13:14 +0000
ROA not before: Thu 09 Jan 2025 06:13:10 +0000
ROA not after: Fri 09 Jan 2026 06:13:10 +0000
asID: 17561
IP address blocks: 154.220.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 12:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79940 (0x13844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 9 06:13:10 2025 GMT
Not After : Jan 9 06:13:10 2026 GMT
Subject: CN=677f68fa-d75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:44:6c:56:44:b7:d1:f9:4f:dd:ac:68:7a:
2a:71:04:87:1f:bd:4d:5f:f6:3e:3e:20:5e:c5:2e:
4b:c0:4f:e1:cb:09:cc:7b:87:54:b2:83:7b:43:6a:
a8:a3:d6:3a:bb:4b:cf:45:5a:12:a9:cf:84:a2:f5:
77:4a:38:c4:35:e6:a4:82:16:b2:a6:6a:ec:02:eb:
4f:ad:d4:46:ae:9f:98:b6:23:9f:3d:d8:20:f1:08:
66:a4:09:6e:1d:f4:f6:3f:6b:d2:a2:17:3b:b9:a9:
fb:12:ba:68:4b:51:76:00:b1:c1:5d:8d:1f:14:69:
c3:ab:a0:e2:d9:e8:d0:69:d0:93:e4:8b:94:52:22:
7e:b6:83:d0:ba:37:7a:ad:78:a1:b2:ac:c5:8a:cd:
c2:9e:9a:08:3e:38:6d:0d:0d:6f:c1:ef:2b:d9:88:
ee:00:51:f9:5a:6e:ea:d9:54:cb:a8:a6:e3:eb:ba:
ef:04:f0:80:fb:28:80:13:5f:0d:e2:22:d7:15:e0:
96:05:45:81:f0:fd:0d:b0:52:0d:b3:98:32:57:fe:
b5:71:69:35:a8:23:4d:40:3a:74:c9:c7:43:7c:78:
ca:11:4b:68:a8:60:f2:dc:02:6c:b1:e4:6f:ff:28:
2b:93:50:09:3a:c3:7b:9f:e7:6f:53:e4:99:31:f7:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:E2:55:3D:5A:FA:B1:E9:CB:1C:C3:81:5D:2E:9A:58:C5:DC:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF01C0AECE5011EF97F1D89B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.230.0/24
Signature Algorithm: sha256WithRSAEncryption
29:01:c1:c2:a3:2b:a1:4b:17:d0:40:a6:f8:11:a6:29:13:9c:
b6:1e:66:b3:6d:5e:82:5b:a9:51:6a:53:6b:c2:56:8e:52:a7:
f6:7a:91:6c:2c:1e:82:d5:6d:c7:96:3d:97:f8:59:f0:42:c3:
09:49:a1:f8:ea:e6:df:6a:4a:60:f2:9a:05:09:fd:2e:38:ae:
a8:d5:04:1f:17:ce:66:a2:38:e2:ec:59:85:93:89:df:96:5a:
b1:e4:23:9f:94:90:8f:fd:cd:49:07:59:71:7b:9a:63:4d:17:
c3:27:d0:0e:a0:3f:90:98:71:5e:76:7d:0d:16:28:82:79:3c:
f4:06:dd:00:ae:c9:4b:2d:fd:0d:6b:f6:77:c9:77:b4:e2:15:
06:b8:64:09:0b:6d:90:a8:47:d2:c6:fb:71:31:db:c3:48:4d:
9a:10:48:ed:9f:4c:9d:5a:cd:b5:c7:82:3d:82:21:b1:08:35:
d4:80:09:a9:41:2b:df:50:e4:cb:46:36:c4:d7:7c:1b:11:62:
1d:fe:05:ff:ab:d2:ab:90:10:18:11:b1:3f:49:c2:6d:64:18:
f8:57:d5:a6:df:33:db:9f:78:0a:4a:7e:0f:bc:be:95:7c:00:
9c:d0:31:98:00:72:62:70:e5:fc:86:b0:93:e0:b4:e3:2e:09:
bc:f5:79:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAThEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA5MDYxMzEwWhcNMjYwMTA5MDYxMzEwWjAYMRYw
FAYDVQQDEw02NzdmNjhmYS1kNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzblEbFZEt9H5T92saHoqcQSHH71NX/Y+PiBexS5LwE/hywnMe4dUsoN7
Q2qoo9Y6u0vPRVoSqc+EovV3SjjENeakghaypmrsAutPrdRGrp+YtiOfPdgg8Qhm
pAluHfT2P2vSohc7uan7ErpoS1F2ALHBXY0fFGnDq6Di2ejQadCT5IuUUiJ+toPQ
ujd6rXihsqzFis3CnpoIPjhtDQ1vwe8r2YjuAFH5Wm7q2VTLqKbj67rvBPCA+yiA
E18N4iLXFeCWBUWB8P0NsFINs5gyV/61cWk1qCNNQDp0ycdDfHjKEUtoqGDy3AJs
seRv/ygrk1AJOsN7n+dvU+SZMffBdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEiN
4lU9Wvqx6cscw4FdLppYxdxYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRjAxQzBBRUNFNTAxMUVGOTdGMUQ4OUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtzmMA0GCSqGSIb3DQEB
CwUAA4IBAQApAcHCoyuhSxfQQKb4EaYpE5y2HmazbV6CW6lRalNrwlaOUqf2epFs
LB6C1W3Hlj2X+FnwQsMJSaH46ubfakpg8poFCf0uOK6o1QQfF85mojji7FmFk4nf
llqx5COflJCP/c1JB1lxe5pjTRfDJ9AOoD+QmHFedn0NFiiCeTz0Bt0ArslLLf0N
a/Z3yXe04hUGuGQJC22QqEfSxvtxMdvDSE2aEEjtn0ydWs21x4I9giGxCDXUgAmp
QSvfUOTLRjbE13wbEWId/gX/q9KrkBAYEbE/ScJtZBj4V9Wm3zPbn3gKSn4PvL6V
fACc0DGYAHJicOX8hrCT4LTjLgm89XkQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:35 2025 by rpki-client