Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4208D98F81211EFBC466F73762E951A.roa
File: F4208D98F81211EFBC466F73762E951A.roa (raw, json)
Hash identifier: i2d3EGxv99c3/08Z83JChHoHZ5CbxSnfai/eLzM8Olc=
Subject key identifier: FE:34:9A:DE:9C:35:B1:83:F2:7C:2B:7F:5E:23:1C:A7:30:FE:A4:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4208D98F81211EFBC466F73762E951A.roa
Signing time: Mon 03 Mar 2025 09:36:16 +0000
ROA not before: Mon 03 Mar 2025 09:36:12 +0000
ROA not after: Wed 30 Apr 2025 09:36:12 +0000
asID: 63139
IP address blocks: 154.94.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94148 (0x16fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:36:12 2025 GMT
Not After : Apr 30 09:36:12 2025 GMT
Subject: CN=67c57810-f913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:3e:a4:b3:38:36:36:59:ac:28:f4:7d:d4:
e4:ce:a4:e0:86:24:a7:b0:6f:5e:b2:4a:77:43:94:
bc:c8:d7:2d:75:0e:00:fb:35:0d:7a:fd:b0:e4:b8:
30:3b:03:a9:ee:c4:c9:c3:4c:62:f6:ca:48:f1:6d:
63:3c:54:dd:ca:28:09:86:13:58:1d:4d:8d:9f:73:
82:47:ad:8f:e4:13:2f:39:59:ce:f3:2d:6e:49:be:
43:48:c0:7a:6f:38:f2:d2:4c:e0:03:0f:8f:bb:70:
77:d1:03:08:71:10:0f:af:0f:e6:1a:18:63:94:3a:
cf:b8:3a:09:9e:8b:93:e1:ed:c0:d1:ed:7f:08:1c:
2a:e9:cd:00:b1:46:db:af:01:e5:d6:4f:8b:c9:a3:
1c:3a:8e:74:bc:5f:a2:47:b9:32:4f:d7:46:d4:2f:
0b:36:52:94:39:32:21:c6:23:43:f2:7d:24:b5:79:
21:a1:49:bb:48:24:3e:09:7e:ca:28:4d:a5:d2:b6:
35:9e:6a:af:29:4f:0d:b3:06:56:a5:79:dd:50:0a:
cf:c1:eb:69:56:3e:89:3d:39:61:c1:fa:a5:84:87:
e7:08:ba:fa:19:d3:dc:ff:ef:67:17:15:6a:5a:28:
98:e2:b0:4b:e5:c3:f6:d1:44:80:bc:16:35:17:b5:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:34:9A:DE:9C:35:B1:83:F2:7C:2B:7F:5E:23:1C:A7:30:FE:A4:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4208D98F81211EFBC466F73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.110.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3f:bd:de:4e:94:a2:79:bb:e4:2b:5e:70:36:61:fd:a9:53:
ba:9c:e7:70:2d:70:cd:6e:b5:84:1f:29:87:94:18:d4:98:ce:
d8:1a:25:55:10:c6:a6:2a:41:0d:e3:8f:6f:a2:53:43:1b:b0:
d7:52:04:b1:d4:8c:ff:18:48:b4:53:53:ef:da:d6:fa:c9:5f:
8c:e9:3c:7b:09:92:ad:e7:58:ea:3f:c1:0a:49:e4:7b:7d:57:
0a:45:93:f2:c3:f2:4c:bd:26:7e:ce:95:50:7b:34:1f:6c:ea:
7b:02:a4:14:7e:e1:f4:15:60:bd:8f:c0:5c:a6:f9:c9:e7:ba:
61:52:4c:ed:93:14:9a:8f:bb:be:37:89:8c:c1:c6:51:fa:51:
b2:72:63:b9:0e:94:fc:a9:5b:e9:59:65:60:75:85:cc:82:ca:
18:32:b2:14:83:2f:32:55:43:9b:95:9a:3c:c1:19:24:b8:ce:
c7:5d:21:9e:9c:02:a8:61:d0:b3:03:1f:d5:6d:97:ac:60:55:
10:0e:87:4b:ea:32:7d:f2:50:53:48:59:ea:eb:d0:8c:cd:7d:
87:00:c5:d2:ea:53:71:96:81:a2:8e:a4:45:b2:04:03:7d:be:
47:bd:db:a4:8e:22:39:9a:13:c7:f2:4b:2c:6d:da:86:3e:13:
c2:b0:f4:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW/EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMDkzNjEyWhcNMjUwNDMwMDkzNjEyWjAYMRYw
FAYDVQQDEw02N2M1NzgxMC1mOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtz4+pLM4NjZZrCj0fdTkzqTghiSnsG9eskp3Q5S8yNctdQ4A+zUNev2w
5LgwOwOp7sTJw0xi9spI8W1jPFTdyigJhhNYHU2Nn3OCR62P5BMvOVnO8y1uSb5D
SMB6bzjy0kzgAw+Pu3B30QMIcRAPrw/mGhhjlDrPuDoJnouT4e3A0e1/CBwq6c0A
sUbbrwHl1k+LyaMcOo50vF+iR7kyT9dG1C8LNlKUOTIhxiND8n0ktXkhoUm7SCQ+
CX7KKE2l0rY1nmqvKU8NswZWpXndUArPwetpVj6JPTlhwfqlhIfnCLr6GdPc/+9n
FxVqWiiY4rBL5cP20USAvBY1F7X+pwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP40
mt6cNbGD8nwrf14jHKcw/qT5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNDIwOEQ5OEY4MTIxMUVGQkM0NjZGNzM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5uMA0GCSqGSIb3DQEB
CwUAA4IBAQBDP73eTpSiebvkK15wNmH9qVO6nOdwLXDNbrWEHymHlBjUmM7YGiVV
EMamKkEN449volNDG7DXUgSx1Iz/GEi0U1Pv2tb6yV+M6Tx7CZKt51jqP8EKSeR7
fVcKRZPyw/JMvSZ+zpVQezQfbOp7AqQUfuH0FWC9j8BcpvnJ57phUkztkxSaj7u+
N4mMwcZR+lGycmO5DpT8qVvpWWVgdYXMgsoYMrIUgy8yVUOblZo8wRkkuM7HXSGe
nAKoYdCzAx/VbZesYFUQDodL6jJ98lBTSFnq69CMzX2HAMXS6lNxloGijqRFsgQD
fb5HvdukjiI5mhPH8kssbdqGPhPCsPRk
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:39 2025 by rpki-client