Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E005B0F47B11EFBA1AF768762E951A.roa
File: D0E005B0F47B11EFBA1AF768762E951A.roa (raw, json)
Hash identifier: 2Ip5U4BxIieTa6fx4IlMpwORzXOgDZNuRsDOfceGkRM=
Subject key identifier: CD:32:00:C6:61:B4:F4:8B:8D:5D:5F:B1:C3:B9:30:C2:3A:3B:F9:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E005B0F47B11EFBA1AF768762E951A.roa
Signing time: Wed 26 Feb 2025 19:56:50 +0000
ROA not before: Wed 26 Feb 2025 19:56:46 +0000
ROA not after: Sat 19 Feb 2028 19:56:46 +0000
asID: 17561
IP address blocks: 154.94.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91601 (0x165d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:56:46 2025 GMT
Not After : Feb 19 19:56:46 2028 GMT
Subject: CN=67bf7201-2325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:8b:ee:44:b5:00:fb:cb:be:20:46:67:d8:
a9:78:1f:f0:e1:0e:1b:ff:7c:2d:3f:ca:b8:83:a7:
14:e2:65:30:d6:08:f2:0e:29:01:dc:6f:e9:5c:e7:
8a:e1:9a:bd:48:a0:b5:1a:eb:b2:b7:ee:90:fe:a7:
e0:b4:1c:f8:80:ec:8d:a0:5f:3c:68:22:31:e8:2c:
4b:51:b6:c1:c5:11:0b:98:de:3a:b6:0c:cb:3e:fe:
5c:08:60:76:91:0e:e8:62:c2:d3:80:fe:eb:80:f5:
33:ac:63:93:bf:5e:48:7f:cd:08:a6:98:7b:bf:9a:
ae:78:f2:56:ac:cd:69:cc:f4:2a:09:b7:87:33:33:
40:69:bc:54:97:71:8c:27:34:30:9c:f2:8b:d9:e7:
40:e2:38:67:7f:6a:65:74:d4:e8:a0:22:53:90:44:
a9:47:c4:47:33:1a:6a:18:9f:c4:95:ac:70:e3:c4:
85:08:d5:12:b4:bb:21:e2:b0:6c:c9:3c:09:d6:2d:
67:d7:87:82:74:a2:94:37:a0:37:e0:52:81:19:a2:
8f:18:39:d2:50:9a:0a:b2:df:ec:85:e4:d1:46:65:
a1:cc:5a:52:d7:12:b1:98:3c:73:85:ca:a4:36:e9:
6c:6a:49:fc:72:0d:57:09:1e:e9:6c:17:20:ae:2d:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:32:00:C6:61:B4:F4:8B:8D:5D:5F:B1:C3:B9:30:C2:3A:3B:F9:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0E005B0F47B11EFBA1AF768762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.61.0/24
Signature Algorithm: sha256WithRSAEncryption
44:27:10:50:9d:c8:b0:27:ee:f8:82:0e:4f:fa:aa:9f:74:32:
f8:fe:3d:39:3c:20:f3:44:65:5d:d1:f4:9d:f7:e4:86:36:d5:
b5:58:c8:5a:48:40:91:7e:82:9e:01:f9:04:fd:51:8b:df:39:
f8:cc:c9:8a:cb:33:42:8a:1d:fb:fc:0d:d3:ce:14:73:82:0f:
2a:3d:b0:a6:0c:e6:c9:4b:ed:32:76:6a:cb:3b:f3:cc:ab:02:
57:9b:3d:3e:e1:c8:ab:bd:f7:11:4a:6e:3c:da:0a:c2:e1:e7:
be:44:79:e6:29:f9:dd:0b:89:69:3e:de:1a:4b:e6:fc:d4:f2:
4a:48:ac:bd:2c:1e:b6:81:f5:3f:cf:88:6b:3a:3c:79:5f:e9:
b2:2d:90:61:b1:81:64:4b:98:bc:b4:fa:63:5f:bc:fc:cb:42:
8f:a1:62:10:fc:9a:80:07:59:f3:d5:ef:17:d5:a3:a6:89:55:
4e:15:63:49:02:69:6d:70:66:fc:42:e1:c2:86:34:f5:c9:ea:
b9:11:94:e4:3d:0b:f8:87:07:78:63:c8:01:36:36:07:55:eb:
95:b2:70:2e:06:32:90:75:79:74:01:11:a7:3d:d7:18:be:c7:
97:9f:5d:40:e1:78:cb:31:36:2d:e1:06:cf:82:ea:1b:7d:77:
96:5d:4b:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWXRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTk1NjQ2WhcNMjgwMjE5MTk1NjQ2WjAYMRYw
FAYDVQQDEw02N2JmNzIwMS0yMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnWKL7kS1APvLviBGZ9ipeB/w4Q4b/3wtP8q4g6cU4mUw1gjyDikB3G/p
XOeK4Zq9SKC1Guuyt+6Q/qfgtBz4gOyNoF88aCIx6CxLUbbBxRELmN46tgzLPv5c
CGB2kQ7oYsLTgP7rgPUzrGOTv15If80Ipph7v5quePJWrM1pzPQqCbeHMzNAabxU
l3GMJzQwnPKL2edA4jhnf2pldNTooCJTkESpR8RHMxpqGJ/Elaxw48SFCNUStLsh
4rBsyTwJ1i1n14eCdKKUN6A34FKBGaKPGDnSUJoKst/sheTRRmWhzFpS1xKxmDxz
hcqkNulsakn8cg1XCR7pbBcgri3cBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM0y
AMZhtPSLjV1fscO5MMI6O/naMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMEUwMDVCMEY0N0IxMUVGQkExQUY3Njg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml49MA0GCSqGSIb3DQEB
CwUAA4IBAQBEJxBQnciwJ+74gg5P+qqfdDL4/j05PCDzRGVd0fSd9+SGNtW1WMha
SECRfoKeAfkE/VGL3zn4zMmKyzNCih37/A3TzhRzgg8qPbCmDObJS+0ydmrLO/PM
qwJXmz0+4cirvfcRSm482grC4ee+RHnmKfndC4lpPt4aS+b81PJKSKy9LB62gfU/
z4hrOjx5X+myLZBhsYFkS5i8tPpjX7z8y0KPoWIQ/JqAB1nz1e8X1aOmiVVOFWNJ
AmltcGb8QuHChjT1yeq5EZTkPQv4hwd4Y8gBNjYHVeuVsnAuBjKQdXl0ARGnPdcY
vseXn11A4XjLMTYt4QbPguobfXeWXUuT
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:48 2025 by rpki-client