Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D8E6048F44D11EF862244A3762E951A.roa
File: 1D8E6048F44D11EF862244A3762E951A.roa (raw, json)
Hash identifier: 6hhiwqyW+EqV+SyhUHpVNgoYVsDc1IXgq9vQ43c/Tc4=
Subject key identifier: D5:B7:7E:90:F7:C6:89:77:61:F1:C7:B8:04:99:AC:8B:B2:BE:A1:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01643F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D8E6048F44D11EF862244A3762E951A.roa
Signing time: Wed 26 Feb 2025 14:22:32 +0000
ROA not before: Wed 26 Feb 2025 14:22:28 +0000
ROA not after: Thu 19 Feb 2026 14:22:28 +0000
asID: 984
IP address blocks: 154.210.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91199 (0x1643f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:22:28 2025 GMT
Not After : Feb 19 14:22:28 2026 GMT
Subject: CN=67bf23a8-12d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:38:5f:6a:ff:0b:b1:fa:f5:48:c7:37:b3:
b8:2c:67:50:9a:3a:d6:dc:14:13:a2:47:90:56:2c:
ae:82:e5:7d:b6:f0:37:be:0d:97:ef:2e:7d:de:d1:
de:e0:28:84:cf:8f:4e:6c:5f:c5:94:90:58:25:4c:
0a:20:ff:0b:53:f2:5e:11:ff:5b:40:aa:32:eb:ad:
cd:67:eb:dd:db:47:f0:95:d1:01:25:03:5c:e4:56:
6f:21:b1:3a:25:c4:42:ed:e3:25:ee:60:d3:45:8b:
4a:a6:5d:e9:e9:e7:fb:f1:98:e4:08:61:2e:6b:aa:
7e:9e:6d:e0:f3:52:65:3b:10:96:1b:f9:24:5f:93:
85:ed:c5:e0:bf:3e:1e:25:81:ae:62:b3:4c:9f:3e:
1c:e9:cb:1b:48:c3:d1:3d:3a:82:2d:4b:02:72:1d:
5a:93:84:aa:83:45:b5:3a:ed:08:90:ac:28:0a:26:
fe:81:d9:e7:0c:b9:7b:d0:8b:38:1b:82:98:70:6f:
a3:97:e7:fc:32:63:0a:eb:a7:ae:bd:a3:5a:66:f3:
7d:67:29:68:b3:ea:66:b3:59:42:27:62:bd:b5:17:
9a:12:70:23:eb:c8:16:40:e3:47:c6:3f:66:0e:99:
2d:ba:6a:79:b0:92:55:b2:f4:ca:6b:f1:8c:bd:a3:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B7:7E:90:F7:C6:89:77:61:F1:C7:B8:04:99:AC:8B:B2:BE:A1:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D8E6048F44D11EF862244A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3a:ed:45:53:c8:a3:39:df:fa:9a:b6:56:ff:36:f9:bd:27:
72:69:22:f3:bd:a1:7c:93:77:8d:14:40:0b:bb:01:5f:66:fe:
a5:74:89:9d:8f:56:8f:38:2c:78:c4:31:61:8e:e8:b1:61:28:
97:43:ac:90:68:7f:0d:87:d5:b9:24:57:3a:da:8b:ea:6b:7d:
cb:65:6e:de:55:fd:5e:45:c1:3c:03:3d:ff:de:56:ae:c2:86:
8a:cd:12:de:f6:25:2e:e1:4f:08:7d:c7:8c:18:1c:a7:d4:e9:
61:d7:9b:d8:e3:78:2b:24:a9:45:2a:c7:c2:ec:74:74:bc:f2:
b0:df:75:9f:51:76:8d:c8:be:d1:33:d6:11:f6:5d:65:c7:32:
af:d1:ec:a1:b1:fa:d6:0d:f1:4c:e4:5e:80:2e:48:41:12:ef:
3c:d5:0d:01:08:ef:df:50:9e:f4:1e:ae:2c:9c:d6:d2:e2:47:
04:df:86:3c:d8:35:fc:66:16:6a:07:65:8b:6c:52:63:bf:2a:
6a:79:3a:59:1a:fa:22:f5:b6:11:c9:68:bc:a6:72:7f:13:52:
c4:c3:d1:ae:8d:32:2e:8d:88:9a:66:4a:61:a5:e9:34:57:47:
51:b0:0f:92:24:91:ad:df:52:0e:be:5c:38:8a:1b:7a:16:94:
28:1d:80:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWQ/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTQyMjI4WhcNMjYwMjE5MTQyMjI4WjAYMRYw
FAYDVQQDEw02N2JmMjNhOC0xMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu9I4X2r/C7H69UjHN7O4LGdQmjrW3BQTokeQViyuguV9tvA3vg2X7y59
3tHe4CiEz49ObF/FlJBYJUwKIP8LU/JeEf9bQKoy663NZ+vd20fwldEBJQNc5FZv
IbE6JcRC7eMl7mDTRYtKpl3p6ef78ZjkCGEua6p+nm3g81JlOxCWG/kkX5OF7cXg
vz4eJYGuYrNMnz4c6csbSMPRPTqCLUsCch1ak4Sqg0W1Ou0IkKwoCib+gdnnDLl7
0Is4G4KYcG+jl+f8MmMK66euvaNaZvN9Zylos+pms1lCJ2K9tReaEnAj68gWQONH
xj9mDpktump5sJJVsvTKa/GMvaNrtQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNW3
fpD3xol3YfHHuASZrIuyvqEiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRDhFNjA0OEY0NEQxMUVGODYyMjQ0QTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtIzMA0GCSqGSIb3DQEB
CwUAA4IBAQAqOu1FU8ijOd/6mrZW/zb5vSdyaSLzvaF8k3eNFEALuwFfZv6ldImd
j1aPOCx4xDFhjuixYSiXQ6yQaH8Nh9W5JFc62ovqa33LZW7eVf1eRcE8Az3/3lau
woaKzRLe9iUu4U8IfceMGByn1Olh15vY43grJKlFKsfC7HR0vPKw33WfUXaNyL7R
M9YR9l1lxzKv0eyhsfrWDfFM5F6ALkhBEu881Q0BCO/fUJ70Hq4snNbS4kcE34Y8
2DX8ZhZqB2WLbFJjvypqeTpZGvoi9bYRyWi8pnJ/E1LEw9GujTIujYiaZkphpek0
V0dRsA+SJJGt31IOvlw4iht6FpQoHYAD
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:29 2025 by rpki-client