Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24A986AE2C811EFB1A61E7B762E951A.roa
File: F24A986AE2C811EFB1A61E7B762E951A.roa (raw, json)
Hash identifier: Gm2nv0LM+5JFkdkyqdTPaKozGCI9/5zta+jTw6LvY2U=
Subject key identifier: AE:45:20:31:D9:51:74:2B:FB:1C:44:16:90:7D:A4:02:EB:4A:F8:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015072
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24A986AE2C811EFB1A61E7B762E951A.roa
Signing time: Tue 04 Feb 2025 07:23:36 +0000
ROA not before: Tue 04 Feb 2025 07:23:32 +0000
ROA not after: Wed 30 Apr 2025 07:23:32 +0000
asID: 150008
IP address blocks: 154.206.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86130 (0x15072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 07:23:32 2025 GMT
Not After : Apr 30 07:23:32 2025 GMT
Subject: CN=67a1c078-ea81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:47:b1:dc:55:d6:0a:42:ff:68:71:66:e7:e0:
02:df:5e:07:c5:c0:26:2c:31:b3:ee:16:cb:bf:ff:
be:30:39:bf:30:3b:43:2f:7c:4f:dd:15:88:ec:0e:
df:f1:4b:2f:d6:e1:40:b1:dd:af:f0:a8:c9:4a:df:
94:a2:07:13:90:14:d3:5f:6a:95:0b:50:b9:2e:d4:
55:0f:75:ac:08:68:0c:7d:92:aa:6e:03:99:de:58:
62:25:85:54:bb:05:d1:ed:f1:09:dd:a7:a3:84:6b:
af:00:de:92:35:d8:ee:15:59:cd:c3:6e:34:f8:2c:
93:42:9b:f7:b4:2e:f8:c7:40:b9:1d:ca:ab:94:4e:
39:b0:ba:ab:12:97:4b:b4:12:ee:90:aa:bc:ef:25:
3a:5b:98:26:76:2b:22:ea:b8:92:95:26:ec:d7:c9:
24:e3:ec:a5:fd:6e:89:72:b4:1b:a5:4d:68:90:45:
a3:a4:d8:94:7f:b1:1b:ac:8e:fd:63:a5:4e:57:01:
c0:53:ac:24:76:8e:86:52:b5:fe:d2:e2:a5:33:62:
f1:33:cb:24:71:06:d6:bd:f2:5a:99:d1:99:4e:62:
23:98:73:4e:87:21:31:ae:de:8c:f2:7a:22:3c:a0:
49:6e:bf:0b:09:5c:6d:ce:e8:f8:38:2a:c8:46:e0:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:20:31:D9:51:74:2B:FB:1C:44:16:90:7D:A4:02:EB:4A:F8:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24A986AE2C811EFB1A61E7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.18.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9b:ea:f9:43:ae:b3:d1:d7:29:0a:53:da:1c:38:60:3b:4c:
09:04:02:69:0c:7f:db:f6:ab:c6:c0:5a:82:18:3f:aa:76:d5:
a3:28:42:a9:1f:97:2c:57:b5:66:4f:07:40:34:b0:7c:c2:33:
52:84:b9:0e:18:ee:00:9f:8d:95:11:89:86:74:a5:6a:44:87:
2c:58:66:fd:d8:8b:73:10:ae:f4:6f:ed:11:8e:29:d7:4b:ac:
ed:2a:1b:bc:ef:66:3a:85:d0:5b:de:a6:9e:b7:5a:ac:5b:63:
28:b8:8a:71:f0:af:73:1b:10:c6:17:68:db:b2:0e:70:24:63:
44:56:84:1a:1a:3e:57:c9:c0:f4:27:81:4f:ae:67:3b:55:a8:
cd:54:8b:8e:b9:07:f6:e8:3f:1f:af:48:37:02:fc:c4:0e:be:
56:8f:49:1a:f4:0c:39:50:56:16:1f:12:01:3d:a9:c9:e8:73:
3c:57:f3:5c:4f:90:30:2b:45:60:cb:79:8e:83:e3:ba:ac:a5:
96:22:e5:87:e5:10:ea:a3:65:62:3d:a5:0b:b4:8f:d1:3d:c2:
3a:4e:18:15:ed:5b:1f:89:30:84:58:4c:2f:72:58:60:e4:21:
2f:f5:ee:0a:33:87:1f:5d:28:b3:d5:1c:3b:12:5a:2d:94:3d:
bd:75:b4:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVByMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MDcyMzMyWhcNMjUwNDMwMDcyMzMyWjAYMRYw
FAYDVQQDEw02N2ExYzA3OC1lYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9Eex3FXWCkL/aHFm5+AC314HxcAmLDGz7hbLv/++MDm/MDtDL3xP3RWI
7A7f8Usv1uFAsd2v8KjJSt+UogcTkBTTX2qVC1C5LtRVD3WsCGgMfZKqbgOZ3lhi
JYVUuwXR7fEJ3aejhGuvAN6SNdjuFVnNw240+CyTQpv3tC74x0C5HcqrlE45sLqr
EpdLtBLukKq87yU6W5gmdisi6riSlSbs18kk4+yl/W6JcrQbpU1okEWjpNiUf7Eb
rI79Y6VOVwHAU6wkdo6GUrX+0uKlM2LxM8skcQbWvfJamdGZTmIjmHNOhyExrt6M
8noiPKBJbr8LCVxtzuj4OCrIRuAwsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK5F
IDHZUXQr+xxEFpB9pALrSvjRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMjRBOTg2QUUyQzgxMUVGQjFBNjFFN0I3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4SMA0GCSqGSIb3DQEB
CwUAA4IBAQCRm+r5Q66z0dcpClPaHDhgO0wJBAJpDH/b9qvGwFqCGD+qdtWjKEKp
H5csV7VmTwdANLB8wjNShLkOGO4An42VEYmGdKVqRIcsWGb92ItzEK70b+0RjinX
S6ztKhu872Y6hdBb3qaet1qsW2MouIpx8K9zGxDGF2jbsg5wJGNEVoQaGj5XycD0
J4FPrmc7VajNVIuOuQf26D8fr0g3AvzEDr5Wj0ka9Aw5UFYWHxIBPanJ6HM8V/Nc
T5AwK0Vgy3mOg+O6rKWWIuWH5RDqo2ViPaULtI/RPcI6ThgV7VsfiTCEWEwvclhg
5CEv9e4KM4cfXSiz1Rw7ElotlD29dbSs
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:51 2025 by rpki-client