Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E207680D58A11EF8EB4ECBE762E951A.roa
File: 2E207680D58A11EF8EB4ECBE762E951A.roa (raw, json)
Hash identifier: knIVHRcUK8m2XToDtdzf06+1AvXKsAVA5h5f9HEHlmk=
Subject key identifier: 21:8B:95:DF:C3:28:03:B7:18:EC:1B:C3:9C:B8:23:85:98:F8:00:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E207680D58A11EF8EB4ECBE762E951A.roa
Signing time: Sat 18 Jan 2025 10:51:33 +0000
ROA not before: Sat 18 Jan 2025 10:51:29 +0000
ROA not after: Thu 22 Jan 2026 10:51:29 +0000
asID: 63199
IP address blocks: 154.209.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81396 (0x13df4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 10:51:29 2025 GMT
Not After : Jan 22 10:51:29 2026 GMT
Subject: CN=678b87b5-651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:01:a3:d8:19:ad:51:47:13:17:a3:78:eb:
5b:fc:74:31:84:1a:94:02:d0:fb:27:24:1e:34:1c:
59:a8:e1:c2:1d:f9:b4:f4:5a:ff:ab:c3:ba:56:26:
29:4b:ac:38:61:18:67:c8:16:d9:5b:a0:77:0e:0d:
0f:c4:1d:7a:49:fc:26:d1:4c:99:60:bf:27:1a:1b:
c6:f8:4c:0e:54:94:49:39:25:23:ad:90:b2:62:16:
ab:09:a4:a0:fa:62:c5:fb:5c:a3:ab:7c:d3:cf:12:
dd:42:e3:ec:3b:75:e0:00:81:b6:57:fa:99:1d:be:
8a:63:82:3d:a7:44:f8:62:46:a3:2f:b5:35:a9:a9:
d1:68:0e:bf:8f:66:d2:d1:1e:85:91:aa:48:95:54:
ce:8b:bb:a6:79:92:d4:16:62:4a:06:07:a7:36:c7:
f0:b6:5b:b1:d7:ac:67:5a:3d:d7:08:17:80:82:a7:
7c:53:d3:b2:55:6f:f0:2f:7f:a7:a2:62:c3:23:de:
b6:6b:a6:46:2f:dc:8a:22:ba:14:66:56:e0:a4:41:
73:a4:b4:97:71:43:10:a8:db:ad:ee:05:0e:4e:c6:
53:62:0e:9a:5b:c6:54:af:9e:6a:81:c5:ee:d4:53:
ea:02:b0:8a:93:8c:50:f2:84:10:43:d5:67:96:b9:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:95:DF:C3:28:03:B7:18:EC:1B:C3:9C:B8:23:85:98:F8:00:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E207680D58A11EF8EB4ECBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:8a:db:0f:cf:cf:cc:39:84:96:b2:1c:dd:1b:33:8b:40:7e:
3a:6b:b7:03:2a:2d:ce:9f:33:fc:e3:e4:7b:34:c6:b6:ef:27:
1e:b8:75:28:b0:0a:b3:b4:22:0b:1f:95:e1:1a:79:5f:8e:52:
08:49:77:29:4f:9a:04:b6:a0:1f:77:54:1c:ef:a9:25:9d:9a:
44:93:24:61:86:c0:56:f4:e1:fb:01:36:a0:02:ac:b8:0d:ed:
4f:c3:ba:78:fa:ea:62:62:58:4b:71:41:28:4b:10:8f:86:fa:
a8:a9:80:2d:ec:21:9c:da:51:fe:38:7a:39:33:99:cd:97:9c:
d3:17:1c:1a:32:9c:5d:1c:d1:a7:9c:c2:a0:d7:91:f8:7a:5e:
ff:70:f0:49:a9:44:8c:8c:2b:00:c3:fe:ea:0c:90:55:0c:c1:
e6:b5:01:99:49:0c:01:d5:d7:7c:84:52:3a:64:34:2a:83:f9:
6f:62:93:9e:c9:1c:54:b4:55:59:30:8a:f9:34:5b:d6:0a:5b:
d7:a0:e4:da:0b:57:26:c6:dd:15:e5:84:f0:9c:da:d8:b2:01:
a1:df:9b:7e:ec:f6:2e:f8:a4:bd:76:83:79:d6:e1:63:00:42:
b9:59:bc:ae:56:76:34:28:86:45:ba:a2:79:2e:1c:4c:d8:10:
b8:5c:8b:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT30MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MTA1MTI5WhcNMjYwMTIyMTA1MTI5WjAYMRYw
FAYDVQQDEw02NzhiODdiNS02NTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv/kBo9gZrVFHExejeOtb/HQxhBqUAtD7JyQeNBxZqOHCHfm09Fr/q8O6
ViYpS6w4YRhnyBbZW6B3Dg0PxB16Sfwm0UyZYL8nGhvG+EwOVJRJOSUjrZCyYhar
CaSg+mLF+1yjq3zTzxLdQuPsO3XgAIG2V/qZHb6KY4I9p0T4YkajL7U1qanRaA6/
j2bS0R6FkapIlVTOi7umeZLUFmJKBgenNsfwtlux16xnWj3XCBeAgqd8U9OyVW/w
L3+nomLDI962a6ZGL9yKIroUZlbgpEFzpLSXcUMQqNut7gUOTsZTYg6aW8ZUr55q
gcXu1FPqArCKk4xQ8oQQQ9VnlrnPgwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCGL
ld/DKAO3GOwbw5y4I4WY+ADNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTIwNzY4MEQ1OEExMUVGOEVCNEVDQkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtFYMA0GCSqGSIb3DQEB
CwUAA4IBAQB+itsPz8/MOYSWshzdGzOLQH46a7cDKi3OnzP84+R7NMa27yceuHUo
sAqztCILH5XhGnlfjlIISXcpT5oEtqAfd1Qc76klnZpEkyRhhsBW9OH7ATagAqy4
De1Pw7p4+upiYlhLcUEoSxCPhvqoqYAt7CGc2lH+OHo5M5nNl5zTFxwaMpxdHNGn
nMKg15H4el7/cPBJqUSMjCsAw/7qDJBVDMHmtQGZSQwB1dd8hFI6ZDQqg/lvYpOe
yRxUtFVZMIr5NFvWClvXoOTaC1cmxt0V5YTwnNrYsgGh35t+7PYu+KS9doN51uFj
AEK5WbyuVnY0KIZFuqJ5LhxM2BC4XIv3
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:42 2025 by rpki-client