Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BB7148EF47811EF87462951762E951A.roa
File: 5BB7148EF47811EF87462951762E951A.roa (raw, json)
Hash identifier: 2Zc3znvFhj8cifzgcJk0wSajSbVS+mxASoIzW5YrYiU=
Subject key identifier: 0D:4D:28:D8:64:73:10:C7:82:B5:FB:7D:1F:B1:0C:50:84:6C:70:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BB7148EF47811EF87462951762E951A.roa
Signing time: Wed 26 Feb 2025 19:32:04 +0000
ROA not before: Wed 26 Feb 2025 19:32:01 +0000
ROA not after: Sat 19 Feb 2028 19:32:01 +0000
asID: 17561
IP address blocks: 154.82.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91559 (0x165a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:32:01 2025 GMT
Not After : Feb 19 19:32:01 2028 GMT
Subject: CN=67bf6c34-bd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:bd:99:e3:0b:0a:80:e4:e9:38:c5:6b:86:
47:66:7b:ce:c0:4c:ce:7d:67:5e:29:8c:01:94:65:
93:3f:86:4d:7d:64:a2:13:91:ed:be:d2:b6:87:4c:
dc:9a:d8:be:25:1e:1e:17:9f:97:d9:1f:3c:f3:09:
4e:4f:28:da:27:44:af:4c:06:19:30:50:73:b0:45:
30:34:0f:7d:9a:87:8a:ff:42:7c:3d:07:6b:96:ea:
c6:f0:63:30:9c:53:24:37:96:f6:2a:1b:65:a2:db:
11:3e:16:4a:74:25:9d:75:95:62:5a:ac:42:39:b2:
d2:64:ee:c9:be:23:72:0a:f4:d0:5d:2d:13:cd:e8:
40:9f:b5:04:20:32:93:f1:9f:f6:4f:42:16:1f:2d:
f6:53:61:65:1b:54:78:9b:53:9c:0e:79:9b:d4:86:
d5:4f:1d:0b:2f:ef:df:92:80:81:b8:61:cf:2d:28:
0f:17:99:36:86:cd:18:2d:47:1a:2b:24:40:99:69:
01:42:ca:aa:f9:d0:5d:64:b3:64:ee:af:57:2a:ac:
b3:ca:9c:0e:5f:8a:61:62:30:b3:f3:cd:e4:75:2e:
fd:31:0d:16:8f:a0:d6:21:5b:92:ec:9d:18:ad:cd:
9e:c1:e6:da:a9:62:17:df:ed:f8:4c:14:93:8d:a6:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:28:D8:64:73:10:C7:82:B5:FB:7D:1F:B1:0C:50:84:6C:70:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BB7148EF47811EF87462951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9e:1e:b8:14:37:62:be:8e:fb:67:8d:e6:69:f8:18:32:f4:
84:ef:91:4b:6a:55:40:d6:dc:d5:57:63:98:f0:ce:09:81:da:
28:91:ea:7e:48:95:80:04:f6:71:69:83:bf:e8:5a:91:86:3e:
36:e4:5f:03:3c:e7:50:dc:22:4e:ef:90:50:96:88:87:30:f6:
29:e8:63:b7:e9:f6:9c:e7:c4:33:37:0d:fd:90:b4:8c:5b:2d:
43:ac:46:58:54:b9:16:1d:47:d7:bc:64:46:38:03:46:a1:fd:
06:e6:53:06:35:29:25:4e:8d:df:22:a7:49:13:ea:f4:65:97:
e1:81:ec:fd:21:1f:ff:99:9d:43:76:87:97:1e:df:ba:bd:1f:
af:a3:c6:ef:18:17:a9:01:11:7e:6c:44:09:23:e9:da:6b:a5:
56:9e:cf:de:72:fc:2a:30:97:cf:2e:14:6f:ea:df:31:96:42:
81:02:a3:9d:b1:64:0e:25:d4:31:f3:05:49:74:76:0e:dd:0a:
bb:92:ce:18:2a:eb:2d:aa:08:4b:ef:27:f1:fd:2e:20:d6:6f:
c0:99:3f:ec:d7:6b:cb:9e:f1:00:0b:a7:4f:a2:5c:8f:c3:62:
e7:07:8b:27:ce:41:eb:7c:48:a6:1a:f3:9c:d0:d8:0c:48:4e:
9c:85:d5:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWWnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTkzMjAxWhcNMjgwMjE5MTkzMjAxWjAYMRYw
FAYDVQQDEw02N2JmNmMzNC1iZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqCu9meMLCoDk6TjFa4ZHZnvOwEzOfWdeKYwBlGWTP4ZNfWSiE5HtvtK2
h0zcmti+JR4eF5+X2R888wlOTyjaJ0SvTAYZMFBzsEUwNA99moeK/0J8PQdrlurG
8GMwnFMkN5b2KhtlotsRPhZKdCWddZViWqxCObLSZO7JviNyCvTQXS0TzehAn7UE
IDKT8Z/2T0IWHy32U2FlG1R4m1OcDnmb1IbVTx0LL+/fkoCBuGHPLSgPF5k2hs0Y
LUcaKyRAmWkBQsqq+dBdZLNk7q9XKqyzypwOX4phYjCz883kdS79MQ0Wj6DWIVuS
7J0Yrc2ewebaqWIX3+34TBSTjaaZQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA1N
KNhkcxDHgrX7fR+xDFCEbHDZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QkI3MTQ4RUY0NzgxMUVGODc0NjI5NTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlIeMA0GCSqGSIb3DQEB
CwUAA4IBAQAqnh64FDdivo77Z43mafgYMvSE75FLalVA1tzVV2OY8M4Jgdookep+
SJWABPZxaYO/6FqRhj425F8DPOdQ3CJO75BQloiHMPYp6GO36fac58QzNw39kLSM
Wy1DrEZYVLkWHUfXvGRGOANGof0G5lMGNSklTo3fIqdJE+r0ZZfhgez9IR//mZ1D
doeXHt+6vR+vo8bvGBepARF+bEQJI+naa6VWns/ecvwqMJfPLhRv6t8xlkKBAqOd
sWQOJdQx8wVJdHYO3Qq7ks4YKustqghL7yfx/S4g1m/AmT/s12vLnvEAC6dPolyP
w2LnB4snzkHrfEimGvOc0NgMSE6chdVh
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:53 2025 by rpki-client