Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6706496C8B111EF96990E50762E951A.roa
File: F6706496C8B111EF96990E50762E951A.roa (raw, json)
Hash identifier: zvs9oYUAwOwMczWGbPqNA78KzzSjo6XD1hMvnC4OQcQ=
Subject key identifier: 7E:AB:EA:F2:23:EA:59:88:21:7A:B0:8B:F4:1D:AC:A2:1B:56:7B:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6706496C8B111EF96990E50762E951A.roa
Signing time: Thu 02 Jan 2025 02:33:34 +0000
ROA not before: Thu 02 Jan 2025 02:33:30 +0000
ROA not after: Sat 13 Dec 2025 02:33:30 +0000
asID: 984
IP address blocks: 154.220.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78256 (0x131b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:33:30 2025 GMT
Not After : Dec 13 02:33:30 2025 GMT
Subject: CN=6775fafe-d68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:be:d4:02:8c:09:e7:75:d6:a4:45:0d:74:
bb:e5:e9:e3:2a:ab:0e:68:9d:46:f3:69:ae:0e:30:
80:dd:47:63:05:c3:70:7c:96:a9:4b:12:1e:ea:7d:
90:ba:1a:e7:2d:2d:2c:ee:8a:31:08:7a:a6:53:c5:
25:40:f5:d5:d4:df:08:da:0b:c4:be:d4:4e:27:20:
94:35:f2:3e:c4:43:31:dd:d8:b5:74:fd:5f:77:51:
a1:82:ca:ab:65:99:89:de:2c:5f:7b:2d:3c:ba:fa:
82:14:46:ac:9d:fb:1b:46:67:3a:e1:a1:1b:3e:dd:
8f:c5:70:45:eb:73:46:35:45:9a:4e:16:00:ae:dc:
a8:8c:9e:8b:fb:f8:2e:7e:5e:a3:9a:dd:ab:7e:53:
47:4a:3e:13:13:e4:cf:86:68:07:38:55:21:a2:68:
36:b5:5b:b4:32:2c:3a:e4:4e:51:6b:25:24:80:bb:
4b:25:53:f0:05:7b:07:b0:20:44:b6:4e:ba:d8:c4:
d8:ad:43:66:a1:89:d1:05:80:9d:54:e8:95:4c:45:
1e:2d:67:31:a8:8f:65:7f:fe:cf:aa:99:ca:ec:8d:
0e:4e:40:1e:21:7a:fe:56:c0:1b:f6:c5:e1:87:a4:
cb:be:09:28:75:56:f2:44:53:13:dd:2b:ce:d1:b5:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AB:EA:F2:23:EA:59:88:21:7A:B0:8B:F4:1D:AC:A2:1B:56:7B:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6706496C8B111EF96990E50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.180.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9b:38:e4:ed:ce:fd:0d:a0:c0:03:44:08:03:07:83:04:b5:
fd:b0:b3:22:e6:ea:bc:84:de:53:59:e1:d1:43:a9:f0:50:51:
e3:d0:3e:98:d3:93:5a:b7:c9:e5:71:b0:2f:74:ad:c4:28:cb:
91:c8:e7:dd:ea:7b:d0:e4:dc:3f:7e:41:89:e9:7f:b5:60:49:
a7:1a:72:35:e6:24:91:28:4d:15:6f:89:18:c1:8c:b7:61:2d:
c2:d4:bb:e7:47:5f:ec:58:1a:22:59:50:e6:b4:d3:72:18:99:
26:77:4e:02:8c:1e:e8:c2:70:11:af:db:ee:08:7d:58:93:58:
e9:95:64:89:4d:7c:39:ed:8e:11:de:e0:46:0b:b0:39:4e:95:
f4:95:d3:2b:75:b0:35:44:32:a1:c6:47:76:54:78:dd:44:dd:
f5:36:5f:7a:30:e1:94:e9:79:56:1b:f5:64:4b:1a:9c:61:26:
9a:bc:8e:46:df:63:52:da:f5:b0:8d:65:e6:e6:7d:3e:b5:d9:
90:e3:52:dc:e9:4d:4f:80:a3:cd:0f:8d:25:15:94:59:21:79:
65:eb:d8:88:7d:65:81:14:7b:d9:b2:2f:15:43:39:55:cf:57:
25:25:8d:15:2a:a7:64:87:84:b9:70:fe:47:13:b8:b1:22:bd:
8d:d2:85:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATGwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDIzMzMwWhcNMjUxMjEzMDIzMzMwWjAYMRYw
FAYDVQQDEw02Nzc1ZmFmZS1kNjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyDO+1AKMCed11qRFDXS75enjKqsOaJ1G82muDjCA3UdjBcNwfJapSxIe
6n2QuhrnLS0s7ooxCHqmU8UlQPXV1N8I2gvEvtROJyCUNfI+xEMx3di1dP1fd1Gh
gsqrZZmJ3ixfey08uvqCFEasnfsbRmc64aEbPt2PxXBF63NGNUWaThYArtyojJ6L
+/gufl6jmt2rflNHSj4TE+TPhmgHOFUhomg2tVu0Miw65E5RayUkgLtLJVPwBXsH
sCBEtk662MTYrUNmoYnRBYCdVOiVTEUeLWcxqI9lf/7PqpnK7I0OTkAeIXr+VsAb
9sXhh6TLvgkodVbyRFMT3SvO0bV5lQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH6r
6vIj6lmIIXqwi/QdrKIbVntQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNjcwNjQ5NkM4QjExMUVGOTY5OTBFNTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmty0MA0GCSqGSIb3DQEB
CwUAA4IBAQAjmzjk7c79DaDAA0QIAweDBLX9sLMi5uq8hN5TWeHRQ6nwUFHj0D6Y
05Nat8nlcbAvdK3EKMuRyOfd6nvQ5Nw/fkGJ6X+1YEmnGnI15iSRKE0Vb4kYwYy3
YS3C1LvnR1/sWBoiWVDmtNNyGJkmd04CjB7ownARr9vuCH1Yk1jplWSJTXw57Y4R
3uBGC7A5TpX0ldMrdbA1RDKhxkd2VHjdRN31Nl96MOGU6XlWG/VkSxqcYSaavI5G
32NS2vWwjWXm5n0+tdmQ41Lc6U1PgKPND40lFZRZIXll69iIfWWBFHvZsi8VQzlV
z1clJY0VKqdkh4S5cP5HE7ixIr2N0oUD
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:55 2025 by rpki-client