Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/358919CC023511F084B1BBA8762E951A.roa
File: 358919CC023511F084B1BBA8762E951A.roa (raw, json)
Hash identifier: r+h3p0svL1sQf0siQZVibkly8GOakx+3V1haTH6hjXc=
Subject key identifier: 1E:E8:0F:A0:02:89:EB:D0:5C:11:2B:84:1A:28:FC:B7:79:55:41:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01746C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/358919CC023511F084B1BBA8762E951A.roa
Signing time: Sun 16 Mar 2025 07:06:40 +0000
ROA not before: Sun 16 Mar 2025 07:06:36 +0000
ROA not after: Fri 11 Apr 2025 07:06:36 +0000
asID: 211590
IP address blocks: 154.83.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 07:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95340 (0x1746c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 16 07:06:36 2025 GMT
Not After : Apr 11 07:06:36 2025 GMT
Subject: CN=67d67880-5805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:27:07:49:12:37:af:88:b9:d4:52:e9:87:
cc:00:b6:86:84:8d:bc:ab:20:6d:7a:dd:48:16:f8:
14:96:32:24:7e:96:3c:08:d5:46:ad:d4:77:44:ca:
b6:c4:73:44:5c:62:b4:47:f0:02:0d:1a:62:c1:5a:
ba:66:01:00:d5:cf:1c:f1:3e:77:90:55:3c:bd:63:
66:68:0a:97:2e:3d:01:19:78:f8:e9:d9:76:f6:08:
8f:33:bf:8f:f8:c0:c0:13:8e:13:ed:c7:01:8b:f0:
5e:62:4b:85:68:e4:6a:42:a7:95:35:91:8b:08:b6:
47:ea:f6:82:76:be:c5:ca:ef:22:54:7c:ba:36:8a:
8f:5e:08:10:df:9b:5f:a4:b0:bd:4e:73:a9:26:73:
3f:d5:b3:40:74:1f:d1:cc:c4:7d:c5:ea:b9:4b:c1:
93:c6:65:49:23:5c:04:e7:6f:ee:1e:c1:03:40:58:
c0:75:05:e1:aa:63:70:04:3a:50:da:b4:91:cf:9c:
a6:1f:97:da:98:ce:35:47:ec:45:d9:81:c3:f9:1e:
ec:76:11:64:dd:94:b5:c5:ec:e1:c7:4e:34:d6:de:
76:d3:1f:95:a1:6e:b7:79:28:ca:c8:dd:a5:0f:9e:
12:18:25:1b:a9:b8:84:2b:1e:c1:1c:71:6d:c0:75:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E8:0F:A0:02:89:EB:D0:5C:11:2B:84:1A:28:FC:B7:79:55:41:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/358919CC023511F084B1BBA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.103.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b3:96:16:4d:dc:cc:fa:3e:b8:67:b1:39:26:4b:cd:e2:f9:
9c:6d:db:14:7a:2c:10:98:ea:b2:ce:da:63:3c:88:95:c9:07:
8e:1c:55:50:b8:42:59:8d:e3:6e:70:8b:49:c3:41:0a:c7:b3:
08:1e:d8:91:20:42:ef:8c:90:44:90:d1:0e:d4:13:cd:25:2f:
27:76:bb:81:01:f2:6a:54:8c:36:3a:67:ee:ae:b5:b1:4b:b7:
0e:f7:b0:18:b4:1f:72:2a:9f:b2:b4:92:e6:42:df:93:b4:aa:
a4:95:42:cb:11:e6:8c:58:9e:ce:2b:54:0b:a0:38:d4:53:c0:
14:4b:2e:f3:20:5e:fb:cd:85:d0:02:83:c7:4a:bc:b2:90:89:
46:f5:d3:b0:cc:83:09:59:9f:89:c6:57:25:4c:1a:66:99:69:
eb:d9:39:64:91:b7:cf:6a:5a:b7:5d:57:c5:62:3e:e0:7f:b5:
48:44:7a:c0:e4:b2:95:14:64:e5:29:67:9f:67:cd:b6:8d:c0:
5c:0a:fb:ad:4e:f1:9d:7b:3a:06:82:24:67:01:fd:df:b2:a3:
65:15:63:a3:63:03:46:25:6b:df:fb:e0:4c:66:4b:36:bd:5b:
8e:d3:07:5c:a8:b0:29:11:de:3a:5c:63:f7:38:80:fc:82:d5:
22:f5:3e:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXRsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE2MDcwNjM2WhcNMjUwNDExMDcwNjM2WjAYMRYw
FAYDVQQDEw02N2Q2Nzg4MC01ODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuGknB0kSN6+IudRS6YfMALaGhI28qyBtet1IFvgUljIkfpY8CNVGrdR3
RMq2xHNEXGK0R/ACDRpiwVq6ZgEA1c8c8T53kFU8vWNmaAqXLj0BGXj46dl29giP
M7+P+MDAE44T7ccBi/BeYkuFaORqQqeVNZGLCLZH6vaCdr7Fyu8iVHy6NoqPXggQ
35tfpLC9TnOpJnM/1bNAdB/RzMR9xeq5S8GTxmVJI1wE52/uHsEDQFjAdQXhqmNw
BDpQ2rSRz5ymH5famM41R+xF2YHD+R7sdhFk3ZS1xezhx0401t520x+VoW63eSjK
yN2lD54SGCUbqbiEKx7BHHFtwHW6xQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB7o
D6ACievQXBErhBoo/Ld5VUFeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNTg5MTlDQzAyMzUxMUYwODRCMUJCQTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlNnMA0GCSqGSIb3DQEB
CwUAA4IBAQARs5YWTdzM+j64Z7E5JkvN4vmcbdsUeiwQmOqyztpjPIiVyQeOHFVQ
uEJZjeNucItJw0EKx7MIHtiRIELvjJBEkNEO1BPNJS8ndruBAfJqVIw2OmfurrWx
S7cO97AYtB9yKp+ytJLmQt+TtKqklULLEeaMWJ7OK1QLoDjUU8AUSy7zIF77zYXQ
AoPHSryykIlG9dOwzIMJWZ+JxlclTBpmmWnr2TlkkbfPalq3XVfFYj7gf7VIRHrA
5LKVFGTlKWefZ822jcBcCvutTvGdezoGgiRnAf3fsqNlFWOjYwNGJWvf++BMZks2
vVuO0wdcqLApEd46XGP3OID8gtUi9T59
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:39 2025 by rpki-client