Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F201ACE4E23D11EFB4CF274D762E951A.roa
File: F201ACE4E23D11EFB4CF274D762E951A.roa (raw, json)
Hash identifier: ZxteZTVSzkJmHVHFbCJMt5kGWgVgLQgbFKPXMPr6aDU=
Subject key identifier: 17:5D:05:0B:13:37:75:B9:93:52:07:47:88:8D:0A:D6:20:AF:B7:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01501B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F201ACE4E23D11EFB4CF274D762E951A.roa
Signing time: Mon 03 Feb 2025 14:48:35 +0000
ROA not before: Mon 03 Feb 2025 14:48:31 +0000
ROA not after: Wed 30 Apr 2025 14:48:31 +0000
asID: 150008
IP address blocks: 154.209.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86043 (0x1501b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:48:31 2025 GMT
Not After : Apr 30 14:48:31 2025 GMT
Subject: CN=67a0d743-0e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:ad:31:88:25:99:54:c9:3c:1e:0c:47:f3:
ea:50:45:eb:11:7c:08:7d:b1:a3:1f:77:09:b2:83:
cb:fe:99:88:70:6e:0c:08:36:b4:ce:1d:a0:df:48:
69:0c:20:2e:84:34:e2:a1:cb:6c:e4:e1:88:3f:cc:
fb:c2:6c:e4:65:5e:2a:c8:c6:b1:c5:fd:b5:df:80:
41:d4:f5:68:3e:59:80:34:70:bc:22:c1:25:0b:7d:
75:54:ac:c7:bc:d9:25:a1:2f:6c:0d:81:64:0f:88:
6f:ed:53:5d:63:54:ad:6d:c7:73:e2:10:cc:67:1c:
47:f4:94:6a:c3:3b:ac:15:29:10:3c:e6:41:fc:6d:
b7:55:21:75:a9:6d:1e:bc:65:97:c6:2b:ac:89:e4:
93:c4:a0:fd:a4:12:7a:64:fe:61:22:c7:59:fd:9c:
de:d2:7e:e0:74:e5:a9:c7:dc:e6:cf:21:8a:b2:93:
b9:5e:75:a1:b6:83:4e:4e:54:2f:c6:a6:7e:78:24:
1b:13:a9:c2:c4:17:ff:cd:d6:b3:9d:25:1a:d5:dc:
49:0a:99:0a:71:82:d9:47:77:39:8f:28:9f:01:da:
6c:34:9f:f5:f2:2f:f9:2c:20:24:48:77:8d:e4:d2:
c9:cc:5d:07:2b:67:e4:f2:08:e3:10:f1:0f:06:98:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:05:0B:13:37:75:B9:93:52:07:47:88:8D:0A:D6:20:AF:B7:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F201ACE4E23D11EFB4CF274D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.252.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1d:c2:5f:dc:14:92:c6:b9:98:8e:d2:11:c7:09:4f:da:c7:
d0:b7:bd:5a:11:8f:68:48:b1:12:7c:bd:cf:4b:9f:97:4a:b3:
f5:07:ee:7d:02:a3:4b:0d:85:4b:89:80:f1:18:13:00:4f:2b:
53:eb:10:9d:d3:94:72:7e:ef:35:2c:42:3a:88:f1:2d:f3:53:
17:b0:83:a9:bd:31:f6:fc:8a:b2:be:48:2f:f1:c0:f7:3c:01:
74:a3:83:4f:f5:ea:ee:7f:31:ac:35:ec:b6:6b:86:ec:ff:4e:
49:2f:fb:3e:81:0d:c0:f9:22:55:3d:41:80:ba:30:10:c3:21:
7e:df:db:a2:a9:26:4b:df:fd:a5:95:0f:62:0d:17:69:cb:2e:
ce:4c:5f:d6:ff:c2:65:17:44:99:db:9a:01:a9:54:e6:f5:c9:
b4:1d:21:e1:14:15:34:2b:5b:10:78:2a:b2:cf:37:3a:96:d9:
87:bd:6b:e1:76:1c:17:57:51:96:3b:ef:3b:de:f6:80:0a:dd:
ad:0d:29:14:32:da:f4:30:24:e0:dd:a7:99:0f:cd:a3:3a:c3:
7c:a9:15:fb:7e:6b:ca:81:d4:e1:24:50:90:ae:7b:36:87:e8:
a3:eb:f1:f4:4d:77:78:04:37:d7:19:72:0d:ce:db:5b:93:8d:
f6:60:19:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVAbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjAzMTQ0ODMxWhcNMjUwNDMwMTQ0ODMxWjAYMRYw
FAYDVQQDEw02N2EwZDc0My0wZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuQytMYglmVTJPB4MR/PqUEXrEXwIfbGjH3cJsoPL/pmIcG4MCDa0zh2g
30hpDCAuhDTiocts5OGIP8z7wmzkZV4qyMaxxf2134BB1PVoPlmANHC8IsElC311
VKzHvNkloS9sDYFkD4hv7VNdY1Stbcdz4hDMZxxH9JRqwzusFSkQPOZB/G23VSF1
qW0evGWXxiusieSTxKD9pBJ6ZP5hIsdZ/Zze0n7gdOWpx9zmzyGKspO5XnWhtoNO
TlQvxqZ+eCQbE6nCxBf/zdaznSUa1dxJCpkKcYLZR3c5jyifAdpsNJ/18i/5LCAk
SHeN5NLJzF0HK2fk8gjjEPEPBpjTMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBdd
BQsTN3W5k1IHR4iNCtYgr7c6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMjAxQUNFNEUyM0QxMUVGQjRDRjI3NEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtH8MA0GCSqGSIb3DQEB
CwUAA4IBAQBjHcJf3BSSxrmYjtIRxwlP2sfQt71aEY9oSLESfL3PS5+XSrP1B+59
AqNLDYVLiYDxGBMATytT6xCd05Ryfu81LEI6iPEt81MXsIOpvTH2/Iqyvkgv8cD3
PAF0o4NP9erufzGsNey2a4bs/05JL/s+gQ3A+SJVPUGAujAQwyF+39uiqSZL3/2l
lQ9iDRdpyy7OTF/W/8JlF0SZ25oBqVTm9cm0HSHhFBU0K1sQeCqyzzc6ltmHvWvh
dhwXV1GWO+873vaACt2tDSkUMtr0MCTg3aeZD82jOsN8qRX7fmvKgdThJFCQrns2
h+ij6/H0TXd4BDfXGXINzttbk432YBkY
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:53 2025 by rpki-client