Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B01D1C8C93511EFB8874F8B762E951A.roa
File: 5B01D1C8C93511EFB8874F8B762E951A.roa (raw, json)
Hash identifier: LNCTbstPSAIxshGdj6Ia5Prlas/V3JBD7OfvxKC12no=
Subject key identifier: E3:6B:CC:1A:5E:78:56:94:42:4E:29:C5:99:3C:B4:42:6D:C6:1B:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B01D1C8C93511EFB8874F8B762E951A.roa
Signing time: Thu 02 Jan 2025 18:14:07 +0000
ROA not before: Thu 02 Jan 2025 18:14:03 +0000
ROA not after: Sat 13 Dec 2025 18:14:03 +0000
asID: 984
IP address blocks: 154.222.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78797 (0x133cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:14:03 2025 GMT
Not After : Dec 13 18:14:03 2025 GMT
Subject: CN=6776d76f-da2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:ff:75:f8:24:a9:b1:66:30:37:e4:59:13:
a8:7e:5d:3a:67:94:30:87:ce:dc:e7:81:4c:59:2f:
e9:bc:88:e7:29:c0:25:39:85:fb:62:71:d4:89:50:
af:e6:20:f7:02:d0:72:62:cf:9d:31:37:3e:fc:9e:
89:06:86:18:d0:a0:b9:e4:d3:51:8c:7c:e7:0f:7a:
82:28:fc:91:5b:3d:ab:99:da:89:f9:4b:77:ab:c3:
6f:38:07:3a:b4:7c:be:e1:68:aa:95:a7:e6:46:e8:
e9:29:fa:aa:fd:5b:7a:fe:e3:29:92:da:27:3f:b5:
59:52:56:1f:a1:f1:84:85:35:77:0a:3f:ab:59:6d:
49:a6:c5:66:8d:c8:61:51:fc:78:ea:53:86:66:a2:
e5:30:48:b9:b0:a9:15:95:6f:93:68:3c:af:97:ad:
d3:1b:d6:e0:43:9c:ee:c8:c7:bf:d5:a3:73:d5:1b:
0d:86:40:62:03:b7:0e:aa:8f:15:00:db:53:34:81:
e5:f0:20:63:0d:1a:e4:58:0e:f2:f9:21:07:8e:9d:
64:ae:f8:13:07:0e:25:cb:7a:a8:33:11:65:c9:4d:
96:8d:b9:40:67:67:e6:58:9c:4d:7d:68:e8:f9:4c:
4b:50:28:34:e0:f8:7e:2f:37:1b:ca:04:f3:1a:f9:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:CC:1A:5E:78:56:94:42:4E:29:C5:99:3C:B4:42:6D:C6:1B:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B01D1C8C93511EFB8874F8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.181.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9c:9a:7e:b6:3d:4e:20:fd:7a:96:13:a9:d4:33:66:5b:6e:
b2:ee:d6:50:0d:1a:04:94:98:c7:1a:50:63:69:26:8a:ed:a8:
b3:b1:12:06:ba:9f:bb:2c:af:3d:c2:7d:fb:1a:64:41:25:2f:
fa:d0:b5:2f:72:e8:13:25:f5:16:fe:f5:c0:fe:de:2e:65:05:
7c:ff:1f:a8:68:c4:c8:3b:81:32:f6:3f:80:62:67:bf:f9:52:
2f:7f:0f:75:a3:55:81:8a:66:49:ee:66:85:2e:f1:23:50:1d:
f4:81:df:07:e1:f3:f9:0b:51:e1:76:55:e9:00:a4:79:aa:a3:
f7:39:79:46:e7:7d:3f:2d:04:dc:1b:a1:fc:56:2d:56:86:96:
e7:6f:e4:0c:2d:ba:94:ba:d2:40:0a:5e:a0:8d:ad:cf:34:74:
ce:14:cc:1b:85:bc:1f:4d:f1:9a:ed:4d:25:1c:ac:bb:08:05:
d9:5f:36:7a:7d:7c:8e:18:63:0a:96:30:b2:7c:77:81:ce:73:
83:87:25:f9:66:6d:72:dc:cd:06:a3:7a:1c:28:28:ea:cc:4f:
1e:ad:dc:eb:6f:62:cd:34:ce:3a:7e:a2:32:86:cf:a9:56:ea:
21:ad:01:f8:a1:5f:6b:4b:24:7e:57:dc:7a:db:01:ec:09:89:
c5:92:31:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATPNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTgxNDAzWhcNMjUxMjEzMTgxNDAzWjAYMRYw
FAYDVQQDEw02Nzc2ZDc2Zi1kYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5Wr/dfgkqbFmMDfkWROofl06Z5Qwh87c54FMWS/pvIjnKcAlOYX7YnHU
iVCv5iD3AtByYs+dMTc+/J6JBoYY0KC55NNRjHznD3qCKPyRWz2rmdqJ+Ut3q8Nv
OAc6tHy+4WiqlafmRujpKfqq/Vt6/uMpktonP7VZUlYfofGEhTV3Cj+rWW1JpsVm
jchhUfx46lOGZqLlMEi5sKkVlW+TaDyvl63TG9bgQ5zuyMe/1aNz1RsNhkBiA7cO
qo8VANtTNIHl8CBjDRrkWA7y+SEHjp1krvgTBw4ly3qoMxFlyU2WjblAZ2fmWJxN
fWjo+UxLUCg04Ph+LzcbygTzGvm8dwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFONr
zBpeeFaUQk4pxZk8tEJtxhtuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QjAxRDFDOEM5MzUxMUVGQjg4NzRGOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt61MA0GCSqGSIb3DQEB
CwUAA4IBAQBknJp+tj1OIP16lhOp1DNmW26y7tZQDRoElJjHGlBjaSaK7aizsRIG
up+7LK89wn37GmRBJS/60LUvcugTJfUW/vXA/t4uZQV8/x+oaMTIO4Ey9j+AYme/
+VIvfw91o1WBimZJ7maFLvEjUB30gd8H4fP5C1HhdlXpAKR5qqP3OXlG530/LQTc
G6H8Vi1Whpbnb+QMLbqUutJACl6gja3PNHTOFMwbhbwfTfGa7U0lHKy7CAXZXzZ6
fXyOGGMKljCyfHeBznODhyX5Zm1y3M0Go3ocKCjqzE8erdzrb2LNNM46fqIyhs+p
VuohrQH4oV9rSyR+V9x62wHsCYnFkjHC
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:03 2025 by rpki-client