Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD22A5A4C36F11EF954F3B63762E951A.roa
File: DD22A5A4C36F11EF954F3B63762E951A.roa (raw, json)
Hash identifier: AOtmcTXjQFe6OSlTBKYdmngLUcHRFz6FQNhmBIrm8c0=
Subject key identifier: 8A:16:8A:26:C4:22:93:95:89:5A:5F:CC:51:62:2E:08:21:D0:CC:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01271E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD22A5A4C36F11EF954F3B63762E951A.roa
Signing time: Thu 26 Dec 2024 09:57:49 +0000
ROA not before: Thu 26 Dec 2024 09:57:45 +0000
ROA not after: Fri 12 Dec 2025 09:57:45 +0000
asID: 984
IP address blocks: 154.94.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75550 (0x1271e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:57:45 2024 GMT
Not After : Dec 12 09:57:45 2025 GMT
Subject: CN=676d289d-635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:52:29:a2:9e:7a:cc:5e:50:ae:5a:c3:d6:
72:cc:a5:ef:58:44:92:b7:ac:61:8c:ad:65:36:45:
ce:18:af:4d:15:97:ab:0f:b7:d2:26:fe:5c:79:5c:
83:e6:d1:56:79:e1:ad:de:92:06:ee:53:21:34:b8:
d7:9c:47:60:30:46:a3:76:e2:7a:1d:a0:ad:2e:00:
37:a4:b0:48:c4:f9:6f:d0:bd:62:28:90:dd:5b:77:
2a:99:23:70:c3:74:61:c8:49:dc:50:45:ff:67:e1:
9c:9f:eb:b7:bd:b1:b3:f5:43:5f:3b:11:10:b4:71:
dd:c3:0f:a7:b0:59:85:60:f1:7d:e9:5a:3c:96:98:
22:c3:68:74:3b:2e:c0:9f:cf:04:c3:b4:ac:22:68:
c1:71:0c:71:66:81:2e:4c:9e:5e:1b:05:00:e2:d0:
f7:66:8d:a6:59:8f:e7:c9:48:f7:b2:e3:0b:31:60:
76:50:b9:76:53:98:ec:31:7e:3b:b5:63:22:2c:eb:
df:d5:d4:b4:8d:bb:63:79:06:63:85:82:fe:99:dd:
74:97:24:b3:85:e9:48:c1:90:e4:41:cc:40:74:98:
67:89:9d:d6:be:f9:1d:25:1d:68:38:20:6a:fb:81:
71:7b:a6:cb:04:2c:2a:1a:81:0b:a2:40:a2:8a:ce:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:8A:26:C4:22:93:95:89:5A:5F:CC:51:62:2E:08:21:D0:CC:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD22A5A4C36F11EF954F3B63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.166.0/24
Signature Algorithm: sha256WithRSAEncryption
88:54:17:1d:3b:d8:48:cd:13:c1:7e:c2:01:00:d8:b8:88:67:
d7:6a:50:ff:e3:09:8e:41:bf:f9:37:df:e5:92:b2:e3:28:04:
f5:19:ba:4a:37:bc:18:9b:6d:b6:d1:27:f8:c0:d7:dc:27:40:
6c:0f:08:62:93:56:af:4c:bb:84:09:d8:7c:fe:f3:93:af:fb:
da:ae:73:39:d3:c6:39:4e:89:5f:76:62:a9:e2:51:80:b0:45:
c5:7a:3a:4b:c7:23:11:21:91:df:49:a9:08:63:1e:8c:e7:1c:
f4:86:33:66:90:c9:06:ed:74:90:8e:f6:01:29:be:fa:36:76:
86:35:eb:bb:e9:11:f5:4f:3b:89:08:5d:81:14:a3:60:23:21:
e4:28:58:86:fb:c8:7b:2e:9f:1b:72:a2:b3:6e:b2:1e:27:91:
8f:3f:80:22:d4:7b:53:07:6b:a5:8f:ec:2d:48:bc:1a:6a:95:
97:46:96:15:9f:27:6b:a7:2e:d3:52:ec:98:6e:41:23:be:93:
68:3d:c3:8f:52:8c:c6:54:8f:50:3e:8e:03:da:2d:7d:58:04:
66:ea:67:82:a0:00:16:2b:73:2d:92:e9:3f:c2:08:21:ed:80:
aa:2b:cd:27:44:cd:e2:d1:9c:7d:bd:d3:4b:28:4e:dc:c0:42:
06:a5:0b:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASceMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDk1NzQ1WhcNMjUxMjEyMDk1NzQ1WjAYMRYw
FAYDVQQDEw02NzZkMjg5ZC02MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr+lSKaKeesxeUK5aw9ZyzKXvWESSt6xhjK1lNkXOGK9NFZerD7fSJv5c
eVyD5tFWeeGt3pIG7lMhNLjXnEdgMEajduJ6HaCtLgA3pLBIxPlv0L1iKJDdW3cq
mSNww3RhyEncUEX/Z+Gcn+u3vbGz9UNfOxEQtHHdww+nsFmFYPF96Vo8lpgiw2h0
Oy7An88Ew7SsImjBcQxxZoEuTJ5eGwUA4tD3Zo2mWY/nyUj3suMLMWB2ULl2U5js
MX47tWMiLOvf1dS0jbtjeQZjhYL+md10lySzhelIwZDkQcxAdJhniZ3WvvkdJR1o
OCBq+4Fxe6bLBCwqGoELokCiis64LwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIoW
iibEIpOViVpfzFFiLggh0MxTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERDIyQTVBNEMzNkYxMUVGOTU0RjNCNjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml6mMA0GCSqGSIb3DQEB
CwUAA4IBAQCIVBcdO9hIzRPBfsIBANi4iGfXalD/4wmOQb/5N9/lkrLjKAT1GbpK
N7wYm2220Sf4wNfcJ0BsDwhik1avTLuECdh8/vOTr/varnM508Y5TolfdmKp4lGA
sEXFejpLxyMRIZHfSakIYx6M5xz0hjNmkMkG7XSQjvYBKb76NnaGNeu76RH1TzuJ
CF2BFKNgIyHkKFiG+8h7Lp8bcqKzbrIeJ5GPP4Ai1HtTB2ulj+wtSLwaapWXRpYV
nydrpy7TUuyYbkEjvpNoPcOPUozGVI9QPo4D2i19WARm6meCoAAWK3Mtkuk/wggh
7YCqK80nRM3i0Zx9vdNLKE7cwEIGpQsk
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:55 2025 by rpki-client