Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BCFD8AC636EE11F0B3BD3781DAE4EC9C.roa
File: BCFD8AC636EE11F0B3BD3781DAE4EC9C.roa (raw, json)
Hash identifier: MetCSNLdq0An6nXpN/rLiHAdIhvk7z4EMJdRbnLcYqk=
Subject key identifier: CD:B0:FD:11:44:91:1E:6D:D3:0D:09:8E:51:78:1D:AA:52:C7:79:47
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 06E7
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BCFD8AC636EE11F0B3BD3781DAE4EC9C.roa
Signing time: Thu 22 May 2025 09:25:45 +0000
ROA not before: Thu 22 May 2025 09:25:41 +0000
ROA not after: Mon 09 Jun 2025 09:25:41 +0000
asID: 203020
IP address blocks: 102.177.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 02:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: May 22 09:25:41 2025 GMT
Not After : Jun 9 09:25:41 2025 GMT
Subject: CN=682eed99-9627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:3c:da:50:fc:6a:54:da:05:e9:71:c4:61:
a0:6f:c2:0f:24:2b:58:62:15:d6:e3:e6:fd:7c:2d:
3d:ae:f6:70:39:8f:20:42:c2:f6:ed:8a:14:9e:d7:
92:b2:32:03:0a:cf:54:42:a5:ac:af:26:81:7b:b5:
2e:53:3f:00:03:2b:5b:ea:76:bf:63:13:58:3e:17:
cf:7c:4e:58:8b:7d:88:ff:72:aa:06:60:78:0c:08:
38:0f:7e:27:c7:9d:e3:f1:7a:37:9d:6e:19:b1:63:
f1:bb:13:cb:64:12:2c:c5:eb:6d:84:19:0a:61:cd:
83:2f:ef:50:95:27:07:58:59:e4:16:e9:d2:48:b2:
e6:73:53:06:c3:33:3f:1b:be:b3:e6:70:0d:bd:9a:
27:50:37:dc:5b:c2:ac:4c:8b:91:0f:99:75:6e:b0:
06:c1:1c:1b:e8:3d:40:2a:0b:a8:06:e6:8f:dd:43:
75:a8:89:6b:05:29:a9:33:18:41:5d:f6:da:93:99:
84:a0:7e:45:b5:48:07:54:5b:9d:ba:7d:0c:3c:01:
74:dc:e6:1f:21:31:61:39:64:57:e4:d6:e4:46:81:
cf:4a:6e:d7:3d:8d:44:f7:e8:be:40:73:71:00:0f:
34:f0:ae:bf:f8:37:46:ac:62:7c:27:17:84:d2:ec:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:FD:11:44:91:1E:6D:D3:0D:09:8E:51:78:1D:AA:52:C7:79:47
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/BCFD8AC636EE11F0B3BD3781DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5a:94:5c:6e:81:bf:a0:b4:da:7b:6a:cf:a2:aa:0c:a1:16:
74:b3:88:f1:09:4e:8b:7e:4c:72:ed:4d:f7:b4:5f:b3:b1:a8:
e7:28:8c:0c:a8:1f:cf:8c:23:0b:8d:63:1c:0f:ca:2f:28:14:
89:32:54:4b:37:36:a4:2e:8a:11:84:61:c6:c2:40:2a:db:6f:
b7:f2:60:1f:c0:66:dd:88:f3:72:eb:12:96:0a:de:cd:a5:17:
dd:1e:5f:d9:a4:6e:24:58:10:1a:3d:57:9f:06:79:9b:35:d0:
78:91:51:63:99:06:ef:ae:ad:3a:23:6c:44:ac:8c:a4:e5:4b:
c0:ce:12:c8:3e:e0:ca:13:5a:6c:6d:cd:4e:75:14:f4:2a:0b:
db:44:10:43:8e:22:56:e1:59:8c:62:db:7e:0e:eb:f5:1a:48:
62:01:8d:0c:95:24:f8:e9:d7:1d:ec:fd:bb:84:aa:80:ae:a4:
02:87:70:d6:75:79:b1:cf:05:e7:11:b5:dd:74:fa:f0:dc:5f:
29:2d:cc:13:cb:ec:14:43:f4:d9:84:4c:bf:99:4f:23:2f:3f:
21:f4:7f:7f:f7:23:c3:f5:8f:bb:c3:c8:4c:0d:1e:c7:6c:01:
f9:a3:fb:f0:57:4c:dd:2d:46:ed:2f:10:d3:fe:b9:57:c6:ac:
28:bc:8d:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBucwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNTA1MjIwOTI1NDFaFw0yNTA2MDkwOTI1NDFaMBgxFjAU
BgNVBAMTDTY4MmVlZDk5LTk2MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2/zzaUPxqVNoF6XHEYaBvwg8kK1hiFdbj5v18LT2u9nA5jyBCwvbtihSe
15KyMgMKz1RCpayvJoF7tS5TPwADK1vqdr9jE1g+F898TliLfYj/cqoGYHgMCDgP
fifHnePxejedbhmxY/G7E8tkEizF622EGQphzYMv71CVJwdYWeQW6dJIsuZzUwbD
Mz8bvrPmcA29midQN9xbwqxMi5EPmXVusAbBHBvoPUAqC6gG5o/dQ3WoiWsFKakz
GEFd9tqTmYSgfkW1SAdUW526fQw8AXTc5h8hMWE5ZFfk1uRGgc9Kbtc9jUT36L5A
c3EADzTwrr/4N0asYnwnF4TS7BlVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUzbD9
EUSRHm3TDQmOUXgdqlLHeUcwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0JDRkQ4QUM2MzZFRTExRjBCM0JEMzc4MURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsb8wDQYJKoZIhvcNAQEL
BQADggEBAE1alFxugb+gtNp7as+iqgyhFnSziPEJTot+THLtTfe0X7OxqOcojAyo
H8+MIwuNYxwPyi8oFIkyVEs3NqQuihGEYcbCQCrbb7fyYB/AZt2I83LrEpYK3s2l
F90eX9mkbiRYEBo9V58GeZs10HiRUWOZBu+urTojbESsjKTlS8DOEsg+4MoTWmxt
zU51FPQqC9tEEEOOIlbhWYxi234O6/UaSGIBjQyVJPjp1x3s/buEqoCupAKHcNZ1
ebHPBecRtd10+vDcXyktzBPL7BRD9NmETL+ZTyMvPyH0f3/3I8P1j7vDyEwNHsds
Afmj+/BXTN0tRu0vENP+uVfGrCi8jdM=
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:09 2025 by rpki-client