Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9AF83E0FF2511EFB9B73477762E951A.roa
File: E9AF83E0FF2511EFB9B73477762E951A.roa (raw, json)
Hash identifier: JIQ6PwxBE4JTCZ7e5G94zPRxGyaH02bn9v0lhaDkIDQ=
Subject key identifier: 48:B5:9F:1C:C1:04:D5:22:95:3B:52:2C:DA:EA:ED:C0:4F:D2:6D:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9AF83E0FF2511EFB9B73477762E951A.roa
Signing time: Wed 12 Mar 2025 09:39:37 +0000
ROA not before: Wed 12 Mar 2025 09:39:33 +0000
ROA not after: Thu 24 Apr 2025 09:39:33 +0000
asID: 18013
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95187 (0x173d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 09:39:33 2025 GMT
Not After : Apr 24 09:39:33 2025 GMT
Subject: CN=67d15659-ca6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:4a:0e:0f:c6:bb:4a:3b:7e:bf:98:7f:a8:
88:68:6e:ee:2d:30:5d:b3:fd:a3:3e:a6:ae:15:34:
34:2d:f8:a1:a3:d0:2c:f3:16:db:c9:39:f0:b4:ad:
d0:50:dd:dd:32:63:ff:41:f2:75:68:9f:7b:25:ea:
c2:ba:45:60:ea:e5:f9:0c:f0:21:47:40:b3:91:c5:
4c:ab:76:a0:1a:48:22:c7:53:21:1a:69:da:7a:78:
1e:a7:c7:0f:34:3b:8f:37:7f:a9:57:df:6d:17:21:
d1:7a:54:5f:9a:a5:48:e3:90:31:4f:ab:80:2e:fe:
4d:7d:c0:21:99:64:ff:08:00:bc:fb:73:d7:d7:ad:
b8:14:e4:68:a8:69:c3:d7:81:72:a1:d4:8e:b1:fe:
99:23:04:be:f6:27:d9:13:cd:78:29:ea:82:55:f1:
8f:74:03:6b:0a:01:08:15:c2:9b:17:82:f3:6b:a9:
6c:2a:f4:68:0e:f4:78:7c:93:63:80:80:a6:13:e0:
57:44:a1:bc:0e:99:33:7c:2c:0d:8a:5d:f8:ef:24:
3e:c2:39:94:98:36:c2:e4:18:c0:8e:00:92:39:7d:
71:6e:a3:19:17:1b:e6:be:80:7f:1b:b6:03:74:3e:
0c:da:b6:16:f6:36:62:80:0e:5c:e4:8c:b2:4d:a6:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B5:9F:1C:C1:04:D5:22:95:3B:52:2C:DA:EA:ED:C0:4F:D2:6D:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9AF83E0FF2511EFB9B73477762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0a:42:2a:b0:cc:ea:61:cf:8d:5c:9c:7e:78:39:c0:6c:dd:
31:a4:23:a9:37:53:9d:75:61:bf:c1:cf:f8:50:c3:43:5f:8f:
b2:1f:84:a2:94:54:2b:98:b8:04:45:9c:87:3a:b7:27:12:f1:
8e:7d:46:e4:fd:e8:0b:22:16:59:98:1f:18:30:b4:d3:fc:8b:
8c:ba:64:83:27:f1:09:46:93:af:ab:1c:23:68:df:cc:c0:93:
cd:75:f2:fe:83:39:2b:90:8f:56:89:7b:66:5f:49:cc:59:96:
49:45:e0:d4:39:65:65:df:88:8a:ca:cd:9b:f1:31:7e:5e:63:
55:09:f0:cf:c5:1e:41:47:7e:91:66:b3:c3:8a:44:86:5b:c7:
cf:22:7d:76:59:c4:85:7f:79:68:da:46:15:53:06:25:b5:7f:
46:8f:8a:f0:fa:05:28:f1:0a:01:f3:fa:b2:71:47:65:ea:e3:
ea:c5:e7:ca:54:ab:4e:b6:32:fb:a9:83:7d:01:8a:da:f2:76:
88:aa:0f:d9:12:cb:6b:16:08:df:e3:e4:35:a4:9a:a9:54:38:
f4:a9:50:d4:17:45:2b:1b:49:be:35:00:6f:e5:be:3d:6a:40:
79:1c:91:94:e2:c5:d5:d9:17:b7:1c:3e:c6:cc:df:e0:11:e2:
9e:95:f4:7d
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAXPTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEyMDkzOTMzWhcNMjUwNDI0MDkzOTMzWjAYMRYw
FAYDVQQDEw02N2QxNTY1OS1jYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwztKDg/Gu0o7fr+Yf6iIaG7uLTBds/2jPqauFTQ0Lfiho9As8xbbyTnw
tK3QUN3dMmP/QfJ1aJ97JerCukVg6uX5DPAhR0CzkcVMq3agGkgix1MhGmnaenge
p8cPNDuPN3+pV99tFyHRelRfmqVI45AxT6uALv5NfcAhmWT/CAC8+3PX1624FORo
qGnD14FyodSOsf6ZIwS+9ifZE814KeqCVfGPdANrCgEIFcKbF4Lza6lsKvRoDvR4
fJNjgICmE+BXRKG8DpkzfCwNil347yQ+wjmUmDbC5BjAjgCSOX1xbqMZFxvmvoB/
G7YDdD4M2rYW9jZigA5c5IyyTabotQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFEi1
nxzBBNUilTtSLNrq7cBP0m3uMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOUFGODNFMEZGMjUxMUVGQjlCNzM0Nzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASaWZADBASaWcADBACa
XxgwDQYJKoZIhvcNAQELBQADggEBAI8KQiqwzOphz41cnH54OcBs3TGkI6k3U511
Yb/Bz/hQw0Nfj7IfhKKUVCuYuARFnIc6tycS8Y59RuT96AsiFlmYHxgwtNP8i4y6
ZIMn8QlGk6+rHCNo38zAk8118v6DOSuQj1aJe2ZfScxZlklF4NQ5ZWXfiIrKzZvx
MX5eY1UJ8M/FHkFHfpFms8OKRIZbx88ifXZZxIV/eWjaRhVTBiW1f0aPivD6BSjx
CgHz+rJxR2Xq4+rF58pUq062Mvupg30BitrydoiqD9kSy2sWCN/j5DWkmqlUOPSp
UNQXRSsbSb41AG/lvj1qQHkckZTixdXZF7ccPsbM3+AR4p6V9H0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:41 2025 by rpki-client