Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D62E6EF43711EF80F01E88762E951A.roa
File: 51D62E6EF43711EF80F01E88762E951A.roa (raw, json)
Hash identifier: 6CYeKkM0lc7kuCerRt02RKdrTj+Tx28HcEiEANYycRE=
Subject key identifier: 39:9E:B9:49:AF:02:D5:98:58:95:ED:03:8E:73:6D:4A:23:18:F9:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D62E6EF43711EF80F01E88762E951A.roa
Signing time: Wed 26 Feb 2025 11:46:31 +0000
ROA not before: Wed 26 Feb 2025 11:46:27 +0000
ROA not after: Thu 19 Feb 2026 11:46:27 +0000
asID: 984
IP address blocks: 154.207.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90812 (0x162bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:46:27 2025 GMT
Not After : Feb 19 11:46:27 2026 GMT
Subject: CN=67beff16-33e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:86:cb:75:3c:dc:80:04:2b:cb:25:69:51:
b4:22:2b:a7:14:1c:9c:c2:76:be:c5:83:45:4e:a3:
5d:ab:7c:37:aa:c6:76:6b:26:94:50:c7:2d:94:11:
de:59:b3:85:11:29:ff:8a:95:83:c8:f6:8d:4a:c3:
8b:8c:cd:29:38:6f:51:1f:e9:0f:b6:6a:95:c3:bb:
fa:71:b3:01:c0:49:a1:41:a4:84:60:b5:85:14:b6:
97:3c:0c:56:92:6f:1f:e1:d8:3d:e4:ea:54:1f:dd:
c9:65:66:49:8a:f5:88:53:2c:35:80:1e:7c:31:d3:
42:65:40:d3:7b:03:2a:72:aa:77:fc:8d:54:74:66:
87:f1:37:c6:71:db:32:a9:83:b4:c5:b9:9d:b5:27:
f7:b0:3a:d4:80:01:20:c9:40:8c:ab:49:94:b4:8c:
9b:ad:af:85:b4:c9:33:81:c7:ac:63:93:60:ba:a5:
fa:f3:10:e5:26:b9:c1:75:a1:9c:ca:22:4f:94:42:
20:82:fd:35:31:97:49:86:84:2d:33:0b:17:20:e7:
03:93:1f:35:9a:0f:7b:94:84:87:b3:8e:99:fd:98:
b6:87:4f:32:fd:a8:1c:86:7b:23:b5:64:92:80:14:
2c:60:ca:ea:39:d1:b5:af:5d:32:1d:38:2f:5c:66:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:B9:49:AF:02:D5:98:58:95:ED:03:8E:73:6D:4A:23:18:F9:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D62E6EF43711EF80F01E88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:3b:ed:f2:3a:fb:2e:33:60:81:65:47:f3:21:d0:d0:10:fc:
3c:d0:3c:58:19:8e:82:bf:e8:ea:5a:2a:f2:dc:e4:40:ea:b4:
d9:a1:68:ce:dd:e1:4c:16:0f:84:43:f0:2c:b3:ab:09:79:d4:
48:78:18:18:f1:86:da:51:c6:3a:4e:19:1d:08:af:f4:03:57:
82:ed:30:17:86:59:c5:05:a4:6d:58:af:5d:f7:3b:81:cd:cf:
29:66:98:3f:95:9a:36:65:78:f9:92:18:15:5d:9d:6a:57:e6:
19:75:22:f1:fd:31:10:00:5d:c6:52:94:04:ec:ed:2d:95:97:
fc:9e:20:1b:d3:f6:1c:6a:b5:7c:95:6a:e5:da:bc:ca:f5:83:
c9:f4:4c:5b:4d:c7:8c:a0:0b:ea:2d:3a:1b:15:fe:ca:c7:c9:
e1:d7:8c:f2:d9:3f:62:ef:a3:87:2d:84:25:a1:88:a4:41:d8:
24:58:54:2b:2b:66:d1:50:c8:5b:37:a8:37:5a:cb:90:4d:49:
c9:c1:fe:59:f8:10:f8:43:cf:08:52:eb:09:d9:b4:9b:50:41:
e8:38:1f:c7:7b:86:5c:40:be:a3:f1:aa:87:e1:70:35:bb:e9:
b9:95:cf:7b:39:78:00:05:31:a8:20:17:98:39:a9:fb:b8:87:
ff:e7:f3:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWK8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTE0NjI3WhcNMjYwMjE5MTE0NjI3WjAYMRYw
FAYDVQQDEw02N2JlZmYxNi0zM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz52Gy3U83IAEK8slaVG0IiunFBycwna+xYNFTqNdq3w3qsZ2ayaUUMct
lBHeWbOFESn/ipWDyPaNSsOLjM0pOG9RH+kPtmqVw7v6cbMBwEmhQaSEYLWFFLaX
PAxWkm8f4dg95OpUH93JZWZJivWIUyw1gB58MdNCZUDTewMqcqp3/I1UdGaH8TfG
cdsyqYO0xbmdtSf3sDrUgAEgyUCMq0mUtIybra+FtMkzgcesY5NguqX68xDlJrnB
daGcyiJPlEIggv01MZdJhoQtMwsXIOcDkx81mg97lISHs46Z/Zi2h08y/agchnsj
tWSSgBQsYMrqOdG1r10yHTgvXGZRvwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDme
uUmvAtWYWJXtA45zbUojGPkMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MUQ2MkU2RUY0MzcxMUVGODBGMDFFODg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms9sMA0GCSqGSIb3DQEB
CwUAA4IBAQArO+3yOvsuM2CBZUfzIdDQEPw80DxYGY6Cv+jqWiry3ORA6rTZoWjO
3eFMFg+EQ/Ass6sJedRIeBgY8YbaUcY6ThkdCK/0A1eC7TAXhlnFBaRtWK9d9zuB
zc8pZpg/lZo2ZXj5khgVXZ1qV+YZdSLx/TEQAF3GUpQE7O0tlZf8niAb0/YcarV8
lWrl2rzK9YPJ9ExbTceMoAvqLTobFf7Kx8nh14zy2T9i76OHLYQloYikQdgkWFQr
K2bRUMhbN6g3WsuQTUnJwf5Z+BD4Q88IUusJ2bSbUEHoOB/He4ZcQL6j8aqH4XA1
u+m5lc97OXgABTGoIBeYOan7uIf/5/No
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:39 2025 by rpki-client