Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5415FA38017F11F08C6EBD92762E951A.roa
File: 5415FA38017F11F08C6EBD92762E951A.roa (raw, json)
Hash identifier: Z92w04ab6h5TqS0rgXPUtklM11EApPGeIUQ3wvYdMYo=
Subject key identifier: DC:22:A2:8E:13:C9:F1:84:88:A2:3E:46:4A:06:91:D7:A9:9B:C2:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01745D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5415FA38017F11F08C6EBD92762E951A.roa
Signing time: Sat 15 Mar 2025 09:24:43 +0000
ROA not before: Sat 15 Mar 2025 09:24:40 +0000
ROA not after: Tue 02 Sep 2025 09:24:40 +0000
asID: 400999
IP address blocks: 154.88.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95325 (0x1745d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 15 09:24:40 2025 GMT
Not After : Sep 2 09:24:40 2025 GMT
Subject: CN=67d5475b-c59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:ce:ec:12:ac:3e:30:02:68:f6:ba:eb:3a:
24:0a:1b:9f:19:02:fa:c5:65:54:57:24:9e:56:21:
31:51:29:df:95:b5:a7:ef:fb:be:4b:69:3e:0d:3f:
d1:18:8e:b0:83:42:96:4a:fb:c8:c7:55:aa:a3:76:
5d:46:c4:b5:7f:b5:cc:b9:8a:5b:39:f3:24:bc:9e:
94:7a:e5:49:97:e5:1c:6c:75:58:2a:f4:02:e4:c2:
1c:fa:34:d5:43:f5:f3:a8:db:3e:f7:8e:e6:a9:8f:
cd:5e:5e:c3:71:41:c5:99:e3:a4:8e:eb:34:67:08:
cd:e5:c1:4f:4a:52:d0:38:df:b5:33:64:a7:95:d9:
30:df:4e:b5:06:2c:39:cb:ea:28:1f:97:57:fd:90:
55:42:52:e6:ff:f5:a2:9b:35:1c:75:69:f1:94:1b:
ac:7b:1f:79:34:ab:9b:dd:98:e9:1f:96:0f:38:e1:
8f:ec:c7:17:a8:50:a9:b7:30:ff:01:19:df:e8:51:
2a:66:e4:4a:a9:1a:2b:8e:f0:f0:4d:bd:39:d8:8b:
b0:ca:c8:ca:c1:49:9c:61:9c:9d:4c:98:78:ce:a9:
cb:cf:d5:8e:7c:a7:87:06:5b:a9:d7:10:d9:f7:6c:
5f:fa:2c:66:25:51:85:07:9a:44:0a:d3:ae:f1:e6:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:22:A2:8E:13:C9:F1:84:88:A2:3E:46:4A:06:91:D7:A9:9B:C2:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5415FA38017F11F08C6EBD92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:09:4b:9d:4e:45:cc:21:7f:de:b1:02:d6:a8:3f:16:f2:ee:
8c:4d:d3:b1:5d:c1:01:60:58:06:01:55:82:15:84:6b:d4:f5:
b7:d0:55:a2:f5:ea:fd:7e:8b:ab:c5:06:18:72:4f:1b:74:6f:
c3:58:14:5d:42:cb:8b:9f:e2:4a:4c:e7:31:06:53:f7:eb:e2:
8b:6c:ad:28:14:6f:53:d8:63:d4:62:97:17:a7:21:c9:c4:cb:
72:e7:93:20:16:a6:31:0b:52:bd:1c:4d:69:45:73:14:a1:f5:
b9:eb:68:cb:cc:8d:c1:67:c4:63:8f:1b:dc:1b:6a:49:4a:89:
74:7e:2c:3c:21:5e:cb:fe:ad:fc:9a:3a:06:3d:72:b7:39:75:
6f:c3:20:16:d4:34:12:19:51:f2:ac:4d:80:a3:2c:ef:5b:4b:
0d:4c:7a:bc:be:a5:59:bc:69:40:02:04:66:71:8e:d9:81:40:
8f:ec:ab:cc:9b:b0:f1:cd:22:bc:f2:d0:8f:86:d2:b9:94:d3:
f1:56:33:00:77:1d:51:91:99:07:d8:ca:7a:23:ef:a8:70:d2:
01:7d:a0:91:d9:e0:7c:7d:86:b8:31:52:f0:ec:93:f9:43:fa:
6c:27:d9:fe:2b:5b:d1:80:de:cf:b8:f5:d7:c0:ad:04:65:77:
7e:08:6d:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXRdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE1MDkyNDQwWhcNMjUwOTAyMDkyNDQwWjAYMRYw
FAYDVQQDEw02N2Q1NDc1Yi1jNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu07O7BKsPjACaPa66zokChufGQL6xWVUVySeViExUSnflbWn7/u+S2k+
DT/RGI6wg0KWSvvIx1Wqo3ZdRsS1f7XMuYpbOfMkvJ6UeuVJl+UcbHVYKvQC5MIc
+jTVQ/XzqNs+947mqY/NXl7DcUHFmeOkjus0ZwjN5cFPSlLQON+1M2Snldkw3061
Biw5y+ooH5dX/ZBVQlLm//WimzUcdWnxlBusex95NKub3ZjpH5YPOOGP7McXqFCp
tzD/ARnf6FEqZuRKqRorjvDwTb052IuwysjKwUmcYZydTJh4zqnLz9WOfKeHBlup
1xDZ92xf+ixmJVGFB5pECtOu8eZgfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNwi
oo4TyfGEiKI+RkoGkdepm8IGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDE1RkEzODAxN0YxMUYwOEM2RUJEOTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgDMA0GCSqGSIb3DQEB
CwUAA4IBAQCzCUudTkXMIX/esQLWqD8W8u6MTdOxXcEBYFgGAVWCFYRr1PW30FWi
9er9fourxQYYck8bdG/DWBRdQsuLn+JKTOcxBlP36+KLbK0oFG9T2GPUYpcXpyHJ
xMty55MgFqYxC1K9HE1pRXMUofW562jLzI3BZ8RjjxvcG2pJSol0fiw8IV7L/q38
mjoGPXK3OXVvwyAW1DQSGVHyrE2AoyzvW0sNTHq8vqVZvGlAAgRmcY7ZgUCP7KvM
m7DxzSK88tCPhtK5lNPxVjMAdx1RkZkH2Mp6I++ocNIBfaCR2eB8fYa4MVLw7JP5
Q/psJ9n+K1vRgN7PuPXXwK0EZXd+CG20
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:48 2025 by rpki-client