Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE203310F61611EFA58EC86D762E951A.roa
File: EE203310F61611EFA58EC86D762E951A.roa (raw, json)
Hash identifier: gYzUPuqP3yV/YuspeVMgyrQi2HQYp/0ShU0ac2xTYXw=
Subject key identifier: 3F:3D:44:5C:1B:E4:86:60:45:CF:FC:DE:F8:31:A0:FC:81:AC:65:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE203310F61611EFA58EC86D762E951A.roa
Signing time: Fri 28 Feb 2025 20:59:42 +0000
ROA not before: Fri 28 Feb 2025 20:59:38 +0000
ROA not after: Sun 13 Apr 2025 20:59:38 +0000
asID: 138915
IP address blocks: 154.206.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93209 (0x16c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:59:38 2025 GMT
Not After : Apr 13 20:59:38 2025 GMT
Subject: CN=67c223be-2645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:ae:c9:6b:8b:67:7b:c3:53:04:77:de:37:
a7:4c:fe:43:5f:98:4a:14:25:5e:06:b1:9c:f7:25:
63:a2:d3:bf:d8:dd:83:8b:61:55:97:63:23:e5:87:
7d:f1:df:d6:82:8b:0f:b5:35:a7:65:81:65:7a:32:
d3:db:22:c0:7c:96:6b:a3:93:16:17:34:d2:1d:73:
97:2b:5e:61:ed:fb:a1:26:9a:6d:74:de:6a:11:db:
ff:c0:89:cc:bc:17:c3:86:cb:d3:f5:d7:e1:4f:be:
24:48:b2:ae:b2:04:c7:f9:62:f2:d0:72:3e:83:3d:
36:68:cc:15:d9:02:c6:41:fd:98:6a:83:e6:a9:ff:
f7:07:4e:e4:a6:39:cd:56:41:f4:92:e2:b6:17:71:
03:47:d0:3c:6f:02:97:e1:e5:84:d8:f1:c4:dc:28:
07:9b:d1:b3:ac:9b:74:e5:ae:aa:c0:8c:d2:c2:d0:
17:aa:29:37:8b:a8:d8:61:67:d4:e2:ac:d0:f7:e5:
59:63:f3:68:bc:51:58:ae:55:eb:51:fa:69:86:7e:
28:9d:68:34:d5:c6:62:f3:38:4f:49:33:1e:a9:54:
cf:4f:ea:0f:2c:34:eb:a1:15:47:e5:99:f8:95:47:
39:df:fc:cb:4c:32:17:62:a9:2f:1f:23:58:c3:bc:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:44:5C:1B:E4:86:60:45:CF:FC:DE:F8:31:A0:FC:81:AC:65:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE203310F61611EFA58EC86D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.64.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:fc:79:85:06:0d:74:2b:be:93:f4:b4:b2:35:0d:0b:10:2f:
a3:92:97:3c:25:93:ec:9c:6a:91:61:8c:52:64:6e:d7:e3:86:
f1:ea:6f:3d:b3:09:6a:05:82:01:6c:8a:59:5c:8d:1f:ed:e0:
11:01:9c:58:4c:33:bc:2f:55:ce:a2:69:23:97:4b:44:71:28:
d4:fd:0d:48:bb:bc:3f:5a:94:a9:9d:3c:e1:16:f8:0e:19:d8:
a7:d9:0a:5f:37:1d:74:56:60:16:33:b1:f3:1d:c2:12:5b:be:
69:69:b6:69:c3:37:cb:21:97:62:5d:90:f8:1f:15:8e:33:0d:
30:3f:14:a6:28:d5:56:f3:44:d0:5e:52:a5:81:a1:02:d7:4b:
9c:e1:e3:46:5f:38:50:c6:9d:2a:ea:92:96:1e:5b:ad:60:85:
76:eb:06:ba:2e:c2:b7:fa:32:92:06:e0:f8:3f:16:82:32:74:
a0:9d:d9:0c:05:06:32:df:41:52:be:f2:1f:a6:f9:0c:f7:2f:
e5:60:7b:2c:71:62:8c:49:ac:d8:28:08:d0:22:66:46:17:7d:
78:24:13:7f:41:9b:5e:ba:24:f1:d0:ec:73:97:62:3c:65:31:
37:20:93:04:99:d8:29:ca:32:e7:55:5b:8f:7f:36:5c:80:41:
40:c8:cb:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWwZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjA1OTM4WhcNMjUwNDEzMjA1OTM4WjAYMRYw
FAYDVQQDEw02N2MyMjNiZS0yNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqq+uyWuLZ3vDUwR33jenTP5DX5hKFCVeBrGc9yVjotO/2N2Di2FVl2Mj
5Yd98d/WgosPtTWnZYFlejLT2yLAfJZro5MWFzTSHXOXK15h7fuhJpptdN5qEdv/
wInMvBfDhsvT9dfhT74kSLKusgTH+WLy0HI+gz02aMwV2QLGQf2YaoPmqf/3B07k
pjnNVkH0kuK2F3EDR9A8bwKX4eWE2PHE3CgHm9GzrJt05a6qwIzSwtAXqik3i6jY
YWfU4qzQ9+VZY/NovFFYrlXrUfpphn4onWg01cZi8zhPSTMeqVTPT+oPLDTroRVH
5Zn4lUc53/zLTDIXYqkvHyNYw7w62wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD89
RFwb5IZgRc/83vgxoPyBrGXdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRTIwMzMxMEY2MTYxMUVGQTU4RUM4NkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms5AMA0GCSqGSIb3DQEB
CwUAA4IBAQDM/HmFBg10K76T9LSyNQ0LEC+jkpc8JZPsnGqRYYxSZG7X44bx6m89
swlqBYIBbIpZXI0f7eARAZxYTDO8L1XOomkjl0tEcSjU/Q1Iu7w/WpSpnTzhFvgO
Gdin2QpfNx10VmAWM7HzHcISW75pabZpwzfLIZdiXZD4HxWOMw0wPxSmKNVW80TQ
XlKlgaEC10uc4eNGXzhQxp0q6pKWHlutYIV26wa6LsK3+jKSBuD4PxaCMnSgndkM
BQYy30FSvvIfpvkM9y/lYHsscWKMSazYKAjQImZGF314JBN/QZteuiTx0Oxzl2I8
ZTE3IJMEmdgpyjLnVVuPfzZcgEFAyMtZ
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:48:27 2025 by rpki-client