Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8543584F56C11EF9F5AC05A762E951A.roa
File: F8543584F56C11EF9F5AC05A762E951A.roa (raw, json)
Hash identifier: VJcvi6K2I9R03kEvhQFdTdkwKu9z3U3oWus4fg8JsSQ=
Subject key identifier: 3C:7D:86:AF:97:11:88:60:F9:7F:71:AE:0A:BE:14:60:46:00:FE:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8543584F56C11EF9F5AC05A762E951A.roa
Signing time: Fri 28 Feb 2025 00:43:04 +0000
ROA not before: Fri 28 Feb 2025 00:00:00 +0000
ROA not after: Sat 19 Feb 2028 00:00:00 +0000
asID: 17561
IP address blocks: 154.209.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92588 (0x169ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 00:00:00 2025 GMT
Not After : Feb 19 00:00:00 2028 GMT
Subject: CN=67c10698-0e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:45:15:cf:a1:08:bc:51:51:a7:91:e8:c8:
98:d4:aa:ff:43:d3:ee:4a:ad:4a:21:94:fc:d8:dd:
69:e4:2b:b1:f4:c7:d3:86:0a:73:b5:f5:15:08:31:
7c:c8:8a:1d:30:e9:94:31:fd:d1:12:9a:22:42:1b:
11:5b:c4:1c:71:82:b9:93:71:b3:9f:35:67:86:e8:
64:e9:8d:e9:62:3f:05:a4:a4:e7:0c:85:e5:0f:17:
ff:6e:ca:02:92:1f:3d:ff:65:68:d2:e1:b6:84:36:
6b:0b:91:49:45:84:f2:94:b5:76:49:4e:56:b8:60:
63:fa:54:59:f9:bc:fb:cc:37:db:04:c0:fc:d1:af:
18:eb:d7:71:6f:05:cd:22:1a:d9:85:46:7f:35:b0:
20:e4:43:b6:79:11:ce:a1:1b:bb:05:7b:ab:0d:b9:
23:f2:a0:c0:de:e7:20:ac:82:da:87:91:d3:2d:e8:
68:bb:16:7e:79:de:94:04:7b:43:b5:9f:06:74:f1:
64:49:bb:a2:c8:ca:b2:24:35:eb:46:a9:03:bc:fd:
01:14:04:5e:60:5f:3d:1b:43:29:8e:df:40:04:6b:
f3:51:0e:77:ac:2e:c3:23:cd:ec:d9:2d:8c:a9:f1:
8e:de:cd:e7:97:c6:5e:02:87:c2:61:a0:db:5b:88:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:86:AF:97:11:88:60:F9:7F:71:AE:0A:BE:14:60:46:00:FE:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8543584F56C11EF9F5AC05A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.251.0/24
Signature Algorithm: sha256WithRSAEncryption
82:45:16:d2:ea:4a:c9:9d:60:c6:37:e7:13:21:43:8f:31:04:
8a:70:06:fd:df:96:39:ba:5f:4d:e7:32:61:2b:9f:e6:d0:1f:
e3:e3:dc:2d:8b:14:76:9f:4c:04:8b:14:51:58:96:c3:43:70:
9e:28:02:b2:f0:43:9e:13:04:c3:d0:e0:61:92:5e:07:03:65:
52:24:0e:05:64:8d:7b:13:83:05:a5:aa:59:58:90:c3:d8:c8:
41:b2:3a:01:db:fb:f1:4d:77:9c:2d:b6:aa:17:70:86:1a:d2:
21:4b:7d:80:45:80:f7:2d:af:ea:9d:dc:03:33:5e:e4:55:28:
84:85:6e:9b:bd:22:1a:10:46:e2:4e:4c:83:be:46:69:ac:d3:
63:69:ca:45:2b:6b:fa:3f:ca:45:c5:fd:75:68:58:03:5c:f9:
5f:8d:0e:2a:c1:05:a2:fd:4a:91:b5:46:c7:c2:da:af:d3:8a:
67:b3:d8:c6:a0:ac:28:b2:83:92:db:2d:8e:a5:e1:c9:2a:61:
43:9a:c8:ec:fe:49:64:b8:22:39:02:5d:36:08:20:40:32:13:
e6:4b:00:4b:74:5d:c4:46:eb:91:53:c7:11:35:06:c3:68:f1:
60:9c:da:a0:08:2e:c3:ca:c5:69:da:7e:5c:43:de:79:19:80:
fd:25:71:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWmsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MDAwMDAwWhcNMjgwMjE5MDAwMDAwWjAYMRYw
FAYDVQQDEw02N2MxMDY5OC0wZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuRVFFc+hCLxRUaeR6MiY1Kr/Q9PuSq1KIZT82N1p5Cux9MfThgpztfUV
CDF8yIodMOmUMf3REpoiQhsRW8QccYK5k3GznzVnhuhk6Y3pYj8FpKTnDIXlDxf/
bsoCkh89/2Vo0uG2hDZrC5FJRYTylLV2SU5WuGBj+lRZ+bz7zDfbBMD80a8Y69dx
bwXNIhrZhUZ/NbAg5EO2eRHOoRu7BXurDbkj8qDA3ucgrILah5HTLehouxZ+ed6U
BHtDtZ8GdPFkSbuiyMqyJDXrRqkDvP0BFAReYF89G0Mpjt9ABGvzUQ53rC7DI83s
2S2MqfGO3s3nl8ZeAofCYaDbW4ixAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDx9
hq+XEYhg+X9xrgq+FGBGAP4sMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GODU0MzU4NEY1NkMxMUVGOUY1QUMwNUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtH7MA0GCSqGSIb3DQEB
CwUAA4IBAQCCRRbS6krJnWDGN+cTIUOPMQSKcAb935Y5ul9N5zJhK5/m0B/j49wt
ixR2n0wEixRRWJbDQ3CeKAKy8EOeEwTD0OBhkl4HA2VSJA4FZI17E4MFpapZWJDD
2MhBsjoB2/vxTXecLbaqF3CGGtIhS32ARYD3La/qndwDM17kVSiEhW6bvSIaEEbi
TkyDvkZprNNjacpFK2v6P8pFxf11aFgDXPlfjQ4qwQWi/UqRtUbHwtqv04pns9jG
oKwosoOS2y2OpeHJKmFDmsjs/klkuCI5Al02CCBAMhPmSwBLdF3ERuuRU8cRNQbD
aPFgnNqgCC7DysVp2n5cQ955GYD9JXHz
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:40 2025 by rpki-client