Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/613B815EF43911EF9D4CDB94762E951A.roa
File: 613B815EF43911EF9D4CDB94762E951A.roa (raw, json)
Hash identifier: GJbtcWAxWc6CwdjpOAs6CpZd8jgCtHCZDyhRGxSPgmk=
Subject key identifier: 10:18:F2:7C:98:EA:8A:74:B0:57:B3:7E:2B:76:EB:67:10:7B:6B:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/613B815EF43911EF9D4CDB94762E951A.roa
Signing time: Wed 26 Feb 2025 12:01:15 +0000
ROA not before: Wed 26 Feb 2025 12:01:12 +0000
ROA not after: Thu 19 Feb 2026 12:01:12 +0000
asID: 984
IP address blocks: 154.208.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90852 (0x162e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:01:12 2025 GMT
Not After : Feb 19 12:01:12 2026 GMT
Subject: CN=67bf028b-3230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:67:ff:eb:86:31:ab:7c:2e:09:c6:8a:6e:
6e:18:1f:12:0c:d6:91:a4:5f:ce:fa:13:04:8c:8a:
ff:20:cf:33:aa:3f:a5:8a:dd:ce:54:d0:b0:89:7c:
72:cb:fb:fa:8c:d4:12:b9:31:50:fa:1e:99:75:9a:
53:e4:c7:5d:b6:d3:c7:43:05:54:a8:27:1d:43:6c:
54:f8:4e:f3:db:db:cc:bf:5e:37:77:c5:d1:e7:fb:
48:7f:a9:c5:90:27:6c:49:b8:c0:27:1d:56:45:bd:
43:96:cb:82:67:8c:31:51:73:6d:ea:54:30:ba:b6:
bd:3f:60:2d:4b:e7:4a:d1:33:0f:b3:5d:52:cf:a1:
a1:79:92:2d:57:a2:32:25:87:9c:f7:f4:f2:1e:2f:
70:76:7c:43:3c:ef:be:41:3e:6b:fa:9f:e1:f4:c6:
0c:26:68:b8:c1:7f:01:5f:4d:46:9b:ae:0f:16:64:
19:74:a0:a1:0e:79:20:ae:f9:dc:9b:43:8d:68:0f:
d3:5a:07:ae:47:5f:7a:db:cf:af:63:c6:70:3d:b8:
c9:a3:87:66:f2:6b:bc:49:02:e0:92:6e:7a:b0:c0:
b2:10:e5:d7:47:2d:83:d7:e3:aa:64:d8:ce:f0:ad:
99:27:49:b4:ff:92:d3:75:73:8f:21:e1:44:5d:55:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:F2:7C:98:EA:8A:74:B0:57:B3:7E:2B:76:EB:67:10:7B:6B:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/613B815EF43911EF9D4CDB94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.110.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9f:68:14:f2:4a:76:0a:f8:1f:ea:e0:12:53:7c:c5:68:2f:
a9:ff:37:63:51:7c:ee:75:d4:fb:84:fa:52:a6:c7:8d:fa:90:
4b:f2:3f:42:0a:38:30:e5:0d:82:f7:44:14:1b:ec:64:71:0b:
55:77:46:d1:c0:ff:71:47:68:0d:87:f9:9e:64:25:da:93:43:
16:c3:79:09:a9:b1:5e:44:5c:2e:30:b7:26:44:ad:be:55:21:
65:99:19:3a:b0:57:a7:fa:71:c6:3c:1b:b8:4d:f9:f5:ab:4d:
82:8e:19:f4:9f:95:75:93:3d:5a:f8:18:6f:95:a4:6e:2e:b3:
de:b2:c9:97:81:e4:a4:ea:7b:13:54:b4:d3:1d:00:d4:d4:72:
73:8f:7a:ea:e2:34:8b:cd:ae:c4:fa:f8:67:f2:3f:83:00:05:
9a:3d:3c:3d:f9:9e:1e:52:be:2d:7a:24:65:29:d6:74:2b:99:
36:df:d1:d1:77:b9:17:1e:e0:ae:a3:c3:22:c0:77:55:50:4b:
9b:32:4c:2c:8f:22:11:cf:e7:de:66:b4:03:63:4b:18:5c:36:
43:f5:e7:7f:fd:2a:2d:8e:e6:98:2e:77:14:ef:aa:c2:1b:84:
65:71:40:54:8c:75:3b:8f:e8:1d:75:f9:0f:7c:4c:ea:5a:47:
23:de:42:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWLkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTIwMTEyWhcNMjYwMjE5MTIwMTEyWjAYMRYw
FAYDVQQDEw02N2JmMDI4Yi0zMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxc5n/+uGMat8LgnGim5uGB8SDNaRpF/O+hMEjIr/IM8zqj+lit3OVNCw
iXxyy/v6jNQSuTFQ+h6ZdZpT5MddttPHQwVUqCcdQ2xU+E7z29vMv143d8XR5/tI
f6nFkCdsSbjAJx1WRb1DlsuCZ4wxUXNt6lQwura9P2AtS+dK0TMPs11Sz6GheZIt
V6IyJYec9/TyHi9wdnxDPO++QT5r+p/h9MYMJmi4wX8BX01Gm64PFmQZdKChDnkg
rvncm0ONaA/TWgeuR19628+vY8ZwPbjJo4dm8mu8SQLgkm56sMCyEOXXRy2D1+Oq
ZNjO8K2ZJ0m0/5LTdXOPIeFEXVUTlwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBAY
8nyY6op0sFezfit262cQe2vCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTNCODE1RUY0MzkxMUVGOUQ0Q0RCOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtBuMA0GCSqGSIb3DQEB
CwUAA4IBAQAan2gU8kp2Cvgf6uASU3zFaC+p/zdjUXzuddT7hPpSpseN+pBL8j9C
Cjgw5Q2C90QUG+xkcQtVd0bRwP9xR2gNh/meZCXak0MWw3kJqbFeRFwuMLcmRK2+
VSFlmRk6sFen+nHGPBu4Tfn1q02Cjhn0n5V1kz1a+BhvlaRuLrPessmXgeSk6nsT
VLTTHQDU1HJzj3rq4jSLza7E+vhn8j+DAAWaPTw9+Z4eUr4teiRlKdZ0K5k239HR
d7kXHuCuo8MiwHdVUEubMkwsjyIRz+feZrQDY0sYXDZD9ed//SotjuaYLncU76rC
G4RlcUBUjHU7j+gddfkPfEzqWkcj3kJg
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:44 2025 by rpki-client