Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524E60BE37C111F0A06F50D7DAE4EC9C.roa
File: 524E60BE37C111F0A06F50D7DAE4EC9C.roa (raw, json)
Hash identifier: Ko3esdmwEbGeuI+nMewiEdy+Iy5me5lPalHyNuqHfwY=
Subject key identifier: 16:D5:13:DE:58:33:D8:97:9C:F3:11:FA:FB:EB:F0:5F:25:47:CD:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524E60BE37C111F0A06F50D7DAE4EC9C.roa
Signing time: Fri 23 May 2025 10:33:10 +0000
ROA not before: Fri 23 May 2025 10:33:05 +0000
ROA not after: Fri 01 May 2026 10:33:05 +0000
asID: 328608
IP address blocks: 154.88.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98802 (0x181f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 10:33:05 2025 GMT
Not After : May 1 10:33:05 2026 GMT
Subject: CN=68304ee6-f46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:4a:59:08:42:16:8b:14:fb:c8:e4:0c:8f:
a7:8d:55:63:22:07:f6:56:45:12:80:2a:e2:af:8c:
e6:1d:99:41:5d:2b:8b:ae:5d:55:c0:7f:5e:de:40:
ab:52:19:9e:33:19:2a:3b:9d:5a:9f:f0:ce:a0:5d:
8a:04:69:76:5c:48:85:93:09:93:b3:85:74:ed:d0:
eb:d3:17:90:03:b6:96:e0:8d:4f:e0:42:a2:7e:39:
09:ac:fc:f8:1c:61:ae:42:c6:33:b0:f2:09:74:df:
cf:e6:da:83:71:e7:56:54:93:b4:29:2d:fe:50:20:
29:6f:41:c5:d4:38:b2:aa:4a:fa:f4:6d:91:7c:01:
8b:19:1f:5b:9a:fa:44:26:38:b9:21:db:3d:9e:c9:
56:2f:c9:72:a8:e1:6a:7d:32:c1:8e:0d:37:02:fc:
1a:54:e5:07:9b:05:03:72:7b:66:a1:86:30:6e:6c:
ab:f6:1d:5d:8a:49:fd:32:0f:83:d6:91:fb:4c:3e:
9a:b6:6c:0b:e8:d9:6a:ac:38:ac:40:bd:43:2d:d8:
b5:f9:56:50:f8:80:70:39:0f:1d:f0:7f:11:10:b6:
64:17:b1:8f:66:ee:63:a7:cf:fa:1e:43:14:cf:2c:
2b:c6:5d:5f:9f:7e:24:d9:a9:74:c4:69:40:96:7e:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:13:DE:58:33:D8:97:9C:F3:11:FA:FB:EB:F0:5F:25:47:CD:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524E60BE37C111F0A06F50D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.36.0/22
Signature Algorithm: sha256WithRSAEncryption
30:45:65:b6:5b:c1:b3:24:5c:b0:2c:5a:56:4f:35:4b:1a:95:
f0:ea:c8:82:18:bb:39:a0:41:e8:00:d9:05:34:bb:7f:30:7e:
4a:58:85:57:de:fa:4d:f4:90:cf:ab:5e:7d:14:f8:95:65:ef:
c0:2a:45:10:61:c8:0e:e7:21:aa:83:63:0e:e0:ce:fa:14:5f:
49:a8:82:40:09:6a:0b:e5:2e:f3:a9:2b:82:c6:5c:d5:08:14:
f9:f0:7c:71:04:74:4d:81:f7:f2:06:2a:01:1e:96:7b:7c:e5:
d7:5c:db:b1:18:a7:fe:ef:aa:94:7b:54:fe:f4:d8:a6:dd:a4:
6b:d8:45:cc:5f:f5:cd:01:f3:bb:1f:6a:57:07:01:65:c9:bf:
ca:6b:38:7e:b4:75:e3:62:cb:98:fa:62:f7:b2:83:7e:8d:f4:
bc:c9:04:a6:d7:32:73:6a:f1:2c:12:d8:45:35:b2:a7:07:41:
5a:4e:e8:6a:d6:eb:a5:29:df:31:ff:2b:a9:0f:67:e8:ad:6f:
99:02:78:ef:08:bc:dc:2a:9b:0e:2d:88:4d:16:3f:1e:ed:f7:
25:60:0d:e3:90:4d:32:12:82:c1:9d:cf:8f:1b:24:3c:de:a5:
af:bc:cd:37:5c:19:5a:5d:05:f5:9e:b4:d7:7d:04:fb:b6:56:
7d:f0:1b:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYHyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIzMTAzMzA1WhcNMjYwNTAxMTAzMzA1WjAYMRYw
FAYDVQQDEw02ODMwNGVlNi1mNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoRpKWQhCFosU+8jkDI+njVVjIgf2VkUSgCrir4zmHZlBXSuLrl1VwH9e
3kCrUhmeMxkqO51an/DOoF2KBGl2XEiFkwmTs4V07dDr0xeQA7aW4I1P4EKifjkJ
rPz4HGGuQsYzsPIJdN/P5tqDcedWVJO0KS3+UCApb0HF1Diyqkr69G2RfAGLGR9b
mvpEJji5Ids9nslWL8lyqOFqfTLBjg03AvwaVOUHmwUDcntmoYYwbmyr9h1dikn9
Mg+D1pH7TD6atmwL6NlqrDisQL1DLdi1+VZQ+IBwOQ8d8H8RELZkF7GPZu5jp8/6
HkMUzywrxl1fn34k2al0xGlAln74LQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBbV
E95YM9iXnPMR+vvr8F8lR82QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MjRFNjBCRTM3QzExMUYwQTA2RjUwRDdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlgkMA0GCSqGSIb3DQEB
CwUAA4IBAQAwRWW2W8GzJFywLFpWTzVLGpXw6siCGLs5oEHoANkFNLt/MH5KWIVX
3vpN9JDPq159FPiVZe/AKkUQYcgO5yGqg2MO4M76FF9JqIJACWoL5S7zqSuCxlzV
CBT58HxxBHRNgffyBioBHpZ7fOXXXNuxGKf+76qUe1T+9Nim3aRr2EXMX/XNAfO7
H2pXBwFlyb/Kazh+tHXjYsuY+mL3soN+jfS8yQSm1zJzavEsEthFNbKnB0FaTuhq
1uulKd8x/yupD2forW+ZAnjvCLzcKpsOLYhNFj8e7fclYA3jkE0yEoLBnc+PGyQ8
3qWvvM03XBlaXQX1nrTXfQT7tlZ98Btn
-----END CERTIFICATE-----
Generated at Fri Jun 6 14:02:17 2025 by rpki-client