Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93159F2C41E11EFA6613A46762E951A.roa
File: F93159F2C41E11EFA6613A46762E951A.roa (raw, json)
Hash identifier: zq5pztB7xbijOCSAABJRkqe5PbwX0SnM0FsisTtP8tc=
Subject key identifier: 05:00:26:B6:20:10:49:8F:8A:36:C9:06:09:E8:D4:F7:1A:09:73:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93159F2C41E11EFA6613A46762E951A.roa
Signing time: Fri 27 Dec 2024 06:51:18 +0000
ROA not before: Fri 27 Dec 2024 06:51:14 +0000
ROA not after: Fri 12 Dec 2025 06:51:14 +0000
asID: 984
IP address blocks: 154.201.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 09 Apr 2025 17:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76203 (0x129ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:51:14 2024 GMT
Not After : Dec 12 06:51:14 2025 GMT
Subject: CN=676e4e66-670b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:85:3d:91:34:37:16:09:9f:02:fe:d8:7d:47:
42:d3:8c:35:61:77:ac:b6:af:ea:61:e7:d3:69:37:
e9:72:87:a9:ef:3a:60:79:91:c9:77:59:20:ca:ec:
31:50:fa:fe:c9:60:f3:2d:0e:8a:26:f4:3c:0e:a0:
ce:4f:50:e7:a7:87:93:ed:ed:6b:5c:30:12:b5:2d:
b5:c7:eb:17:97:0f:c9:f2:0b:00:01:e8:ce:d1:d5:
d7:59:88:38:bf:86:d5:6c:1e:62:2e:9b:95:cc:ec:
3e:20:df:6a:98:08:33:84:6c:e1:80:ee:1e:55:00:
90:3c:b2:1a:aa:95:d5:7d:aa:62:81:b0:33:96:a3:
17:96:7e:a8:00:73:e0:3b:87:cc:54:66:df:55:04:
36:a8:80:bc:45:81:06:4b:cb:3d:a9:24:95:a7:55:
b1:b4:32:a5:44:16:3f:13:0c:db:4d:e8:d0:01:3b:
05:fc:b9:3d:1a:89:8a:1d:ac:2d:cc:00:79:77:47:
8d:c6:99:dc:71:06:fa:c6:80:b4:c2:18:af:f5:e2:
3b:1f:fd:50:84:b8:01:6d:bd:f4:67:13:f9:64:41:
c5:94:cf:89:99:84:99:13:61:cf:d8:96:c7:d4:4e:
7e:86:aa:1a:4d:3d:f7:ca:00:4d:13:f0:13:56:27:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:00:26:B6:20:10:49:8F:8A:36:C9:06:09:E8:D4:F7:1A:09:73:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93159F2C41E11EFA6613A46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.40.0/24
Signature Algorithm: sha256WithRSAEncryption
71:98:82:46:13:85:cb:42:93:5c:75:bb:99:e5:ae:98:9c:11:
c5:66:5d:f4:7b:b1:ee:c6:98:79:ef:bf:79:ab:74:4b:b5:69:
ec:86:29:87:0b:cf:89:61:d0:00:8c:a4:3c:56:05:84:a2:5e:
53:01:55:3f:d0:f3:ba:15:bb:1b:5f:45:f0:d9:c7:b2:61:59:
46:1d:29:6a:1e:29:ae:c1:9b:4c:0e:d5:72:8e:a6:86:6d:41:
e6:d0:ea:a8:84:74:2f:55:7d:65:1e:9a:27:5f:62:5d:48:cc:
79:e3:73:c9:ab:52:bc:ed:ee:e6:7c:26:fe:39:27:fa:2c:01:
91:3f:9d:af:3d:e3:c9:d4:7b:ad:3e:28:06:dc:e8:a3:a5:0f:
0e:ef:8f:56:62:15:fb:3c:8d:eb:e6:af:e4:44:07:81:a7:7d:
54:98:8d:a3:a0:6e:c1:6f:50:79:3b:2d:df:2e:6d:08:31:5d:
09:98:66:20:a4:2d:a5:68:80:35:58:cf:1f:68:de:db:73:54:
91:60:8b:70:15:1f:03:12:1f:42:9e:c0:f7:f1:42:fe:d2:1d:
71:6c:4b:aa:49:56:a9:03:32:da:28:50:53:8f:f5:bf:4d:69:
8d:e9:a1:86:ff:7f:09:f8:9e:03:28:9c:1f:74:50:0a:23:5f:
05:c6:8e:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASmrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDY1MTE0WhcNMjUxMjEyMDY1MTE0WjAYMRYw
FAYDVQQDEw02NzZlNGU2Ni02NzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/IU9kTQ3FgmfAv7YfUdC04w1YXestq/qYefTaTfpcoep7zpgeZHJd1kg
yuwxUPr+yWDzLQ6KJvQ8DqDOT1Dnp4eT7e1rXDAStS21x+sXlw/J8gsAAejO0dXX
WYg4v4bVbB5iLpuVzOw+IN9qmAgzhGzhgO4eVQCQPLIaqpXVfapigbAzlqMXln6o
AHPgO4fMVGbfVQQ2qIC8RYEGS8s9qSSVp1WxtDKlRBY/EwzbTejQATsF/Lk9GomK
HawtzAB5d0eNxpnccQb6xoC0whiv9eI7H/1QhLgBbb30ZxP5ZEHFlM+JmYSZE2HP
2JbH1E5+hqoaTT33ygBNE/ATVid89wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAUA
JrYgEEmPijbJBgno1PcaCXNbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTMxNTlGMkM0MUUxMUVGQTY2MTNBNDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmskoMA0GCSqGSIb3DQEB
CwUAA4IBAQBxmIJGE4XLQpNcdbuZ5a6YnBHFZl30e7Huxph57795q3RLtWnshimH
C8+JYdAAjKQ8VgWEol5TAVU/0PO6FbsbX0Xw2ceyYVlGHSlqHimuwZtMDtVyjqaG
bUHm0OqohHQvVX1lHponX2JdSMx543PJq1K87e7mfCb+OSf6LAGRP52vPePJ1Hut
PigG3OijpQ8O749WYhX7PI3r5q/kRAeBp31UmI2joG7Bb1B5Oy3fLm0IMV0JmGYg
pC2laIA1WM8faN7bc1SRYItwFR8DEh9CnsD38UL+0h1xbEuqSVapAzLaKFBTj/W/
TWmN6aGG/38J+J4DKJwfdFAKI18Fxo7f
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:32:05 2025 by rpki-client