Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54926DCE114311F0882C2393762E951A.roa
File: 54926DCE114311F0882C2393762E951A.roa (raw, json)
Hash identifier: nPfqw1+AP+Ppaqx/4/bw9WAD7W9KCwN+DDmPS1YyFFE=
Subject key identifier: 65:6D:AA:BD:54:EB:1F:49:2C:49:FF:0C:7E:9F:C8:3E:51:14:10:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54926DCE114311F0882C2393762E951A.roa
Signing time: Fri 04 Apr 2025 10:55:33 +0000
ROA not before: Fri 04 Apr 2025 10:55:29 +0000
ROA not after: Mon 14 Apr 2025 10:55:29 +0000
asID: 132513
IP address blocks: 154.84.180.0/24 maxlen: 24
154.85.98.0/24 maxlen: 24
154.91.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 10:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96188 (0x177bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 10:55:29 2025 GMT
Not After : Apr 14 10:55:29 2025 GMT
Subject: CN=67efbaa5-e753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:5c:a1:60:15:3d:aa:c0:66:f6:d1:c8:5d:
b1:1f:cc:0d:e3:16:9d:e3:4b:0a:6f:2e:ee:4f:58:
93:04:20:4c:79:f1:30:72:65:49:9e:54:e7:ff:4d:
a3:cf:94:c2:e0:2a:6e:da:e9:84:4c:26:db:27:97:
68:2f:0d:f6:ab:4d:98:e9:85:68:7f:59:d9:2c:12:
54:ba:86:d5:5f:59:35:0a:43:47:27:72:49:16:75:
f3:08:0e:6c:f3:01:6d:4d:36:7f:de:dc:b0:ba:cc:
67:ab:9e:2f:8f:1f:bf:b4:a7:9a:33:da:f2:83:dc:
ef:82:f3:42:09:ad:f0:c4:cc:6b:a8:77:61:ee:b9:
0c:b3:29:10:e9:d2:a4:2a:f8:3f:7e:9d:16:29:59:
c1:ba:e3:58:bc:a9:9a:77:ea:a1:a6:09:e6:c1:ed:
4e:54:9e:7b:ee:64:2f:08:a6:89:ab:89:66:46:84:
57:27:df:cb:8b:38:77:df:f3:e2:65:1f:d7:36:c1:
2a:bf:fb:78:2d:80:b7:19:02:24:de:a1:20:b2:40:
cc:45:99:46:7c:eb:f3:95:7d:e5:be:2b:f1:b9:82:
bb:3e:43:82:cc:20:ab:9c:26:e8:0b:40:c1:67:12:
3c:e6:f5:70:f1:e4:e2:19:24:0e:72:5f:85:7e:f1:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6D:AA:BD:54:EB:1F:49:2C:49:FF:0C:7E:9F:C8:3E:51:14:10:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54926DCE114311F0882C2393762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.180.0/24
154.85.98.0/24
154.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
14:38:54:90:88:77:a8:d1:31:5d:0d:33:f8:af:a9:48:11:06:
80:54:ef:1f:1e:66:60:7e:c3:2a:72:24:0d:e6:d0:97:c7:b3:
f6:15:6f:aa:9b:78:29:9d:3b:1b:90:49:0c:45:d1:7a:31:96:
2f:2f:b8:23:f7:eb:98:9a:1d:73:ec:1a:d8:e3:48:4f:31:3c:
30:9a:f1:14:3d:9a:fa:e8:f7:42:a7:54:93:4f:3b:ff:5c:bf:
ac:c2:84:1c:85:0b:87:d5:78:a8:0d:2a:8b:74:b9:22:23:d1:
7d:37:de:d9:1f:18:f1:d1:ab:f7:08:93:a1:90:00:c5:fc:d4:
a4:03:9d:f5:0b:21:1d:69:76:74:0f:29:07:28:42:1b:00:fa:
9b:41:ae:20:89:0f:13:11:b3:5c:16:b1:13:5a:bf:c9:62:ef:
21:89:a2:4e:c6:84:16:97:71:d9:fd:a4:ef:31:ea:46:92:e0:
a8:88:e5:3e:cf:3e:76:d2:9e:06:82:07:32:63:7c:ec:57:fc:
a2:cb:11:43:5c:a6:9b:07:a6:91:df:9d:1f:6b:05:a5:01:32:
96:a2:11:fe:f7:cc:e7:b3:65:38:32:50:e7:c9:06:03:1e:ca:
e8:ca:b1:48:11:14:9e:a6:de:58:11:ee:c0:07:51:ec:a5:09:
2c:2f:ec:31
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXe8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA0MTA1NTI5WhcNMjUwNDE0MTA1NTI5WjAYMRYw
FAYDVQQDEw02N2VmYmFhNS1lNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuoZcoWAVParAZvbRyF2xH8wN4xad40sKby7uT1iTBCBMefEwcmVJnlTn
/02jz5TC4Cpu2umETCbbJ5doLw32q02Y6YVof1nZLBJUuobVX1k1CkNHJ3JJFnXz
CA5s8wFtTTZ/3tywusxnq54vjx+/tKeaM9ryg9zvgvNCCa3wxMxrqHdh7rkMsykQ
6dKkKvg/fp0WKVnBuuNYvKmad+qhpgnmwe1OVJ577mQvCKaJq4lmRoRXJ9/Lizh3
3/PiZR/XNsEqv/t4LYC3GQIk3qEgskDMRZlGfOvzlX3lvivxuYK7PkOCzCCrnCbo
C0DBZxI85vVw8eTiGSQOcl+FfvEn2wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFGVt
qr1U6x9JLEn/DH6fyD5RFBCuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDkyNkRDRTExNDMxMUYwODgyQzIzOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmlS0AwQAmlViAwQAmluL
MA0GCSqGSIb3DQEBCwUAA4IBAQAUOFSQiHeo0TFdDTP4r6lIEQaAVO8fHmZgfsMq
ciQN5tCXx7P2FW+qm3gpnTsbkEkMRdF6MZYvL7gj9+uYmh1z7BrY40hPMTwwmvEU
PZr66PdCp1STTzv/XL+swoQchQuH1XioDSqLdLkiI9F9N97ZHxjx0av3CJOhkADF
/NSkA531CyEdaXZ0DykHKEIbAPqbQa4giQ8TEbNcFrETWr/JYu8hiaJOxoQWl3HZ
/aTvMepGkuCoiOU+zz520p4GggcyY3zsV/yiyxFDXKabB6aR350fawWlATKWohH+
98zns2U4MlDnyQYDHsroyrFIERSept5YEe7AB1HspQksL+wx
-----END CERTIFICATE-----
Generated at Mon Apr 14 09:47:11 2025 by rpki-client