Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025B63FCE2CD11EF86539897762E951A.roa
File: 025B63FCE2CD11EF86539897762E951A.roa (raw, json)
Hash identifier: Gtr1sM8JGiEtF5j1j/UZt5NmpukW2dmUvETD2o1sbt8=
Subject key identifier: F5:68:7F:25:20:0B:43:BF:87:77:53:EC:72:B2:7B:A3:52:5B:45:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01508A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025B63FCE2CD11EF86539897762E951A.roa
Signing time: Tue 04 Feb 2025 07:52:41 +0000
ROA not before: Tue 04 Feb 2025 07:52:37 +0000
ROA not after: Wed 30 Apr 2025 07:52:37 +0000
asID: 18229
IP address blocks: 154.210.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86154 (0x1508a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 07:52:37 2025 GMT
Not After : Apr 30 07:52:37 2025 GMT
Subject: CN=67a1c749-fe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:78:0a:0c:f5:e3:11:07:07:ce:57:68:d3:
ef:54:73:95:81:e0:13:ae:56:99:20:87:57:b8:f2:
97:b0:81:58:7a:35:ff:1e:4d:ea:f1:88:cc:41:61:
9a:7d:70:c5:c5:74:02:d5:f4:66:e5:ae:b4:f7:f8:
53:02:40:97:43:ae:6f:40:73:e9:56:04:ee:85:62:
7a:8f:e6:cc:d5:60:2d:9e:52:ca:0d:39:34:b6:f9:
3c:5e:be:42:16:9b:03:c5:fe:45:e7:f7:ca:ae:e4:
d1:45:3f:2e:67:b6:15:fa:6e:18:34:1a:6e:f8:e9:
10:48:5b:80:26:52:c7:db:79:ed:7a:2e:7c:cb:5a:
b8:c0:29:d0:74:cd:b5:2c:d3:1a:76:28:59:2e:2d:
86:ed:ad:7d:b6:0e:5f:4b:20:3d:c2:46:e0:30:80:
ef:fe:3f:80:54:39:1c:14:d7:e4:3e:14:97:da:69:
d2:85:dc:a5:05:c3:cc:a2:ce:b4:8d:80:6d:ee:fc:
a0:7e:0a:31:33:b8:27:db:e3:3f:36:e5:b3:19:85:
a0:02:06:aa:c7:14:5a:01:15:a6:99:9c:d9:9b:58:
de:5e:c7:92:9d:8c:75:30:8d:8e:36:51:ce:65:57:
4f:c7:2e:05:54:4d:8b:64:17:3f:21:74:e6:f9:f3:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:7F:25:20:0B:43:BF:87:77:53:EC:72:B2:7B:A3:52:5B:45:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/025B63FCE2CD11EF86539897762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c7:86:fd:05:0f:c4:79:d7:f8:76:56:5c:c6:8e:cc:4f:31:
98:9c:c9:ec:25:c7:24:db:66:0c:e9:a1:4a:b8:54:28:d4:6c:
b1:1e:d9:4f:7b:96:79:b4:7a:4f:65:c9:38:23:2b:c3:ad:22:
88:6d:44:d3:20:a3:96:1e:08:12:39:94:66:6a:54:bc:0b:10:
4f:7d:c8:1a:cf:e5:36:de:74:b6:17:7a:7c:46:76:b7:5f:c4:
00:69:c8:d6:5c:75:69:d4:8e:16:10:b1:4b:8c:fd:54:fa:0a:
e2:d8:eb:19:28:de:70:98:91:86:b6:38:6b:7f:44:f7:dd:b7:
13:b1:42:a6:27:74:34:d9:a2:55:fc:75:26:b8:74:4b:80:34:
c6:f8:71:aa:7b:86:86:63:9b:7b:3e:ed:4b:56:03:f0:42:91:
7b:85:fa:c1:d3:09:62:61:00:3b:2c:2d:47:5a:a5:6a:b7:94:
78:cc:40:12:fd:16:f0:bf:39:f6:5d:6d:b4:bc:1e:7e:65:dd:
b7:5f:63:8b:44:00:ea:94:92:76:86:6b:d9:9d:f1:24:e9:18:
61:cf:a8:ca:32:e7:ac:ec:d0:00:53:d9:6b:4d:99:44:5d:f8:
33:d8:be:b4:29:13:fb:07:b4:2d:5b:a2:19:3c:f9:4a:b9:f8:
72:00:d6:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVCKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MDc1MjM3WhcNMjUwNDMwMDc1MjM3WjAYMRYw
FAYDVQQDEw02N2ExYzc0OS1mZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3PZ4Cgz14xEHB85XaNPvVHOVgeATrlaZIIdXuPKXsIFYejX/Hk3q8YjM
QWGafXDFxXQC1fRm5a609/hTAkCXQ65vQHPpVgTuhWJ6j+bM1WAtnlLKDTk0tvk8
Xr5CFpsDxf5F5/fKruTRRT8uZ7YV+m4YNBpu+OkQSFuAJlLH23ntei58y1q4wCnQ
dM21LNMadihZLi2G7a19tg5fSyA9wkbgMIDv/j+AVDkcFNfkPhSX2mnShdylBcPM
os60jYBt7vygfgoxM7gn2+M/NuWzGYWgAgaqxxRaARWmmZzZm1jeXseSnYx1MI2O
NlHOZVdPxy4FVE2LZBc/IXTm+fMaoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPVo
fyUgC0O/h3dT7HKye6NSW0VcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMjVCNjNGQ0UyQ0QxMUVGODY1Mzk4OTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtK2MA0GCSqGSIb3DQEB
CwUAA4IBAQB+x4b9BQ/Eedf4dlZcxo7MTzGYnMnsJcck22YM6aFKuFQo1GyxHtlP
e5Z5tHpPZck4IyvDrSKIbUTTIKOWHggSOZRmalS8CxBPfcgaz+U23nS2F3p8Rna3
X8QAacjWXHVp1I4WELFLjP1U+gri2OsZKN5wmJGGtjhrf0T33bcTsUKmJ3Q02aJV
/HUmuHRLgDTG+HGqe4aGY5t7Pu1LVgPwQpF7hfrB0wliYQA7LC1HWqVqt5R4zEAS
/Rbwvzn2XW20vB5+Zd23X2OLRADqlJJ2hmvZnfEk6Rhhz6jKMues7NAAU9lrTZlE
Xfgz2L60KRP7B7QtW6IZPPlKufhyANbS
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:51:52 2025 by rpki-client