Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB4A4BCC40711EF92E8DBB4762E951A.roa
File: FFB4A4BCC40711EF92E8DBB4762E951A.roa (raw, json)
Hash identifier: Cc/4zg0snKHOtTAS5HMTINEff1e9fdVIawcfkINNDmM=
Subject key identifier: 45:00:34:F7:6F:D9:21:6C:84:50:62:93:46:52:5A:66:25:41:9E:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB4A4BCC40711EF92E8DBB4762E951A.roa
Signing time: Fri 27 Dec 2024 04:06:51 +0000
ROA not before: Fri 27 Dec 2024 04:06:47 +0000
ROA not after: Sun 12 Dec 2027 04:06:47 +0000
asID: 17561
IP address blocks: 154.195.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76021 (0x128f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:06:47 2024 GMT
Not After : Dec 12 04:06:47 2027 GMT
Subject: CN=676e27da-631b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:6d:22:12:32:81:f4:aa:b3:c5:73:8a:f1:
5f:2d:20:7e:4e:7b:43:3d:98:e7:12:55:74:b0:cf:
68:0b:2a:b6:b0:05:2d:22:e7:f1:10:3c:3e:81:95:
10:3d:94:9a:5d:34:e4:f1:73:94:8d:bb:4b:05:9c:
e6:38:8f:1c:03:14:cd:0d:e1:61:00:ac:60:f7:a2:
e3:eb:1c:1e:1d:3e:49:a6:69:56:0b:19:73:1a:cb:
26:49:78:be:db:8c:92:08:37:11:e2:2f:99:de:54:
8b:e5:22:59:45:2b:b5:76:3e:c9:8f:93:d4:9d:22:
19:90:d5:0c:b8:4e:58:72:56:8f:8b:b5:50:5b:83:
72:87:e4:90:fb:dc:5f:29:ab:10:8e:9b:12:50:0c:
e8:2e:e2:c6:4f:c9:b0:8b:3d:1a:7c:12:5d:9c:70:
a0:4f:a2:f4:d8:0c:7c:5f:20:d9:35:7f:e9:dd:ed:
72:27:8c:1a:7a:19:f1:33:46:fe:3b:10:77:34:dd:
64:bb:7a:5b:36:09:2c:a3:18:4d:b1:d6:52:dd:34:
9d:78:60:1d:27:b4:bc:b5:65:9a:e6:5d:2a:b6:09:
d1:f3:7a:e1:0b:19:22:ac:f8:b1:11:41:c6:9e:ea:
2a:e4:d4:f2:79:b0:1a:71:ab:92:76:fe:81:06:b9:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:34:F7:6F:D9:21:6C:84:50:62:93:46:52:5A:66:25:41:9E:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFB4A4BCC40711EF92E8DBB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.34.0/24
Signature Algorithm: sha256WithRSAEncryption
95:70:35:5b:56:44:30:04:44:05:bd:cf:b0:e7:9c:8e:c3:a3:
b9:4a:8b:64:0f:a4:ee:1b:e3:ae:bd:4c:86:b0:92:7d:e3:7a:
a4:4e:2a:21:3c:a1:53:d6:e4:65:5d:81:b6:9d:be:2f:10:3b:
1d:ee:9d:46:6b:28:55:01:9d:f9:a7:40:de:e1:65:61:0b:54:
79:b7:cb:05:6d:cd:44:22:6d:31:83:9d:37:f3:c4:c6:69:33:
bf:00:33:dd:6c:f8:b7:14:0d:93:39:12:ef:72:2f:68:9b:b3:
be:69:87:05:9c:85:b4:bc:63:f3:63:47:ff:aa:3d:e2:af:fb:
df:b6:f2:10:f5:50:39:9d:dd:df:9c:61:65:62:c6:e1:bb:9a:
e0:77:08:af:02:5b:a6:93:1c:13:ce:b3:06:71:12:08:65:7e:
40:cd:a8:5c:1b:23:c7:41:5d:d8:08:bc:eb:57:dd:ba:8f:8c:
b1:5d:b2:6f:4d:34:8f:64:86:4d:50:60:f5:13:87:04:19:90:
e4:75:46:ec:db:73:90:73:94:3f:6b:f4:1e:77:54:46:38:4f:
a8:53:c7:12:1b:62:b4:e5:05:53:3c:79:21:f6:47:ed:d1:e5:
9b:3a:c5:a1:7d:c5:21:fe:fb:e7:ff:78:4a:5a:e7:52:bf:ae:
2c:61:19:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASj1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDQwNjQ3WhcNMjcxMjEyMDQwNjQ3WjAYMRYw
FAYDVQQDEw02NzZlMjdkYS02MzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsT1tIhIygfSqs8VzivFfLSB+TntDPZjnElV0sM9oCyq2sAUtIufxEDw+
gZUQPZSaXTTk8XOUjbtLBZzmOI8cAxTNDeFhAKxg96Lj6xweHT5JpmlWCxlzGssm
SXi+24ySCDcR4i+Z3lSL5SJZRSu1dj7Jj5PUnSIZkNUMuE5YclaPi7VQW4Nyh+SQ
+9xfKasQjpsSUAzoLuLGT8mwiz0afBJdnHCgT6L02Ax8XyDZNX/p3e1yJ4waehnx
M0b+OxB3NN1ku3pbNgksoxhNsdZS3TSdeGAdJ7S8tWWa5l0qtgnR83rhCxkirPix
EUHGnuoq5NTyebAacauSdv6BBrlA1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEUA
NPdv2SFshFBik0ZSWmYlQZ4iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRkI0QTRCQ0M0MDcxMUVGOTJFOERCQjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMiMA0GCSqGSIb3DQEB
CwUAA4IBAQCVcDVbVkQwBEQFvc+w55yOw6O5SotkD6TuG+OuvUyGsJJ943qkTioh
PKFT1uRlXYG2nb4vEDsd7p1GayhVAZ35p0De4WVhC1R5t8sFbc1EIm0xg50388TG
aTO/ADPdbPi3FA2TORLvci9om7O+aYcFnIW0vGPzY0f/qj3ir/vftvIQ9VA5nd3f
nGFlYsbhu5rgdwivAlumkxwTzrMGcRIIZX5AzahcGyPHQV3YCLzrV926j4yxXbJv
TTSPZIZNUGD1E4cEGZDkdUbs23OQc5Q/a/Qed1RGOE+oU8cSG2K05QVTPHkh9kft
0eWbOsWhfcUh/vvn/3hKWudSv64sYRl6
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:24 2025 by rpki-client