Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB94110CC91211EF84699EB2762E951A.roa
File: DB94110CC91211EF84699EB2762E951A.roa (raw, json)
Hash identifier: w/OUgRmtjkg/Ur9WKUkn9pHwlm5BFz18/P8IdHT00ko=
Subject key identifier: B0:B5:34:40:4A:EC:0D:70:2E:EC:0E:EB:CC:13:C0:9E:16:85:6D:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB94110CC91211EF84699EB2762E951A.roa
Signing time: Thu 02 Jan 2025 14:07:10 +0000
ROA not before: Thu 02 Jan 2025 14:07:07 +0000
ROA not after: Sat 13 Dec 2025 14:07:07 +0000
asID: 984
IP address blocks: 154.221.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78519 (0x132b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:07:07 2025 GMT
Not After : Dec 13 14:07:07 2025 GMT
Subject: CN=67769d8e-19d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:30:41:75:a7:e9:8a:53:30:c9:4f:8e:76:
35:5a:b2:eb:6a:6e:53:81:bc:16:51:b5:03:87:f7:
a0:c8:5c:17:44:66:33:a7:fc:8a:7f:61:5f:9e:34:
f8:59:1d:96:e2:83:8f:a2:2c:f2:65:4d:bd:95:72:
1a:7d:e7:c2:e0:b0:e7:ca:cf:67:0f:e1:6d:b5:58:
bd:6e:d9:54:04:9d:fe:8f:93:aa:40:17:9b:cc:c8:
3c:a0:49:bd:b0:71:ef:d7:92:63:c3:e6:d4:84:5f:
f8:ce:45:05:dc:97:7e:84:4a:9a:10:63:a8:e0:98:
c4:3b:39:dc:0c:26:b9:5b:8d:bd:b6:d4:67:14:ee:
03:d3:45:8f:11:20:76:b6:dc:02:84:93:75:87:65:
a9:88:4e:63:26:c1:af:c2:0b:85:e2:50:71:17:34:
55:b5:81:ee:38:22:24:a5:df:c7:51:0b:4b:fd:c9:
11:fc:84:3a:bf:8b:2b:cd:8f:5a:8d:05:0c:bf:a7:
8f:a5:a4:21:52:97:61:a5:63:83:c1:cc:f7:c4:d8:
92:21:5f:fd:b7:ea:0e:f4:39:f8:8c:17:8b:de:f4:
b3:cc:90:4c:a8:ae:1b:7c:53:7f:2c:54:70:4d:a0:
98:17:55:66:1a:53:22:3c:55:72:43:66:bc:65:69:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:34:40:4A:EC:0D:70:2E:EC:0E:EB:CC:13:C0:9E:16:85:6D:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB94110CC91211EF84699EB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.232.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8b:28:38:87:78:c9:51:ce:7a:f2:b9:54:d1:9a:ae:b1:5d:
81:aa:19:af:bc:35:c2:b7:30:2c:23:18:ea:3f:b6:de:6e:53:
ea:65:00:3d:c7:b9:f7:b6:ea:d3:fd:a8:79:71:f8:2d:2c:de:
ad:83:3e:67:89:36:92:32:d6:9c:ed:c9:82:76:7c:82:7e:0a:
ba:46:cc:7d:46:35:ac:65:06:c3:4d:8b:26:3e:01:d1:b6:72:
34:63:b8:2b:9c:5c:32:81:39:76:16:a9:b8:d5:d4:91:78:6e:
4a:f6:1f:46:fc:1a:c0:a8:43:b0:c4:d7:2c:0f:5e:dc:d2:d3:
40:5f:63:6e:e0:d5:94:88:45:26:28:cd:4e:2e:a8:06:a3:c0:
64:b1:46:ab:57:5a:a4:34:b0:51:49:c3:02:a8:a9:88:c7:c2:
0d:c1:5c:78:f7:98:ca:1e:0f:10:ce:da:26:dc:19:b1:49:75:
77:be:9c:80:5b:06:8e:98:d4:94:07:0b:15:53:0b:87:53:b2:
f0:44:fa:79:33:20:be:2c:2d:42:6d:89:13:9e:de:f3:64:af:
90:b5:c0:49:16:8d:44:9a:1c:e5:c3:e3:2e:8b:4d:de:d7:2a:
5f:4a:59:7c:4c:f0:49:96:2f:33:59:88:ac:c8:7b:33:81:2c:
e5:0e:62:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATK3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTQwNzA3WhcNMjUxMjEzMTQwNzA3WjAYMRYw
FAYDVQQDEw02Nzc2OWQ4ZS0xOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtaAwQXWn6YpTMMlPjnY1WrLram5TgbwWUbUDh/egyFwXRGYzp/yKf2Ff
njT4WR2W4oOPoizyZU29lXIafefC4LDnys9nD+FttVi9btlUBJ3+j5OqQBebzMg8
oEm9sHHv15Jjw+bUhF/4zkUF3Jd+hEqaEGOo4JjEOzncDCa5W429ttRnFO4D00WP
ESB2ttwChJN1h2WpiE5jJsGvwguF4lBxFzRVtYHuOCIkpd/HUQtL/ckR/IQ6v4sr
zY9ajQUMv6ePpaQhUpdhpWODwcz3xNiSIV/9t+oO9Dn4jBeL3vSzzJBMqK4bfFN/
LFRwTaCYF1VmGlMiPFVyQ2a8ZWkcEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLC1
NEBK7A1wLuwO68wTwJ4WhW2MMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjk0MTEwQ0M5MTIxMUVGODQ2OTlFQjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3oMA0GCSqGSIb3DQEB
CwUAA4IBAQAjiyg4h3jJUc568rlU0ZqusV2BqhmvvDXCtzAsIxjqP7beblPqZQA9
x7n3turT/ah5cfgtLN6tgz5niTaSMtac7cmCdnyCfgq6Rsx9RjWsZQbDTYsmPgHR
tnI0Y7grnFwygTl2Fqm41dSReG5K9h9G/BrAqEOwxNcsD17c0tNAX2Nu4NWUiEUm
KM1OLqgGo8BksUarV1qkNLBRScMCqKmIx8INwVx495jKHg8Qztom3BmxSXV3vpyA
WwaOmNSUBwsVUwuHU7LwRPp5MyC+LC1CbYkTnt7zZK+QtcBJFo1Emhzlw+Mui03e
1ypfSll8TPBJli8zWYisyHszgSzlDmLW
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:08 2025 by rpki-client