Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61BCFFEAE2D211EF88EE7FB8762E951A.roa
File: 61BCFFEAE2D211EF88EE7FB8762E951A.roa (raw, json)
Hash identifier: 4Y9gD3NeV51uLDi7l7yZXRV5hqVhajl3fQMH1VJljHc=
Subject key identifier: E3:00:99:ED:DE:A8:29:AD:7A:7E:66:DE:9F:FE:40:94:67:8A:B6:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61BCFFEAE2D211EF88EE7FB8762E951A.roa
Signing time: Tue 04 Feb 2025 08:31:08 +0000
ROA not before: Tue 04 Feb 2025 08:31:05 +0000
ROA not after: Wed 30 Apr 2025 08:31:05 +0000
asID: 18229
IP address blocks: 154.210.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86184 (0x150a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:31:05 2025 GMT
Not After : Apr 30 08:31:05 2025 GMT
Subject: CN=67a1d04c-588b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:5e:ec:d8:24:39:9b:51:84:57:42:d2:90:
21:57:7b:7d:14:d0:50:19:fb:b4:42:b8:ef:06:cc:
f4:2e:2a:a9:6f:0f:a6:43:f9:40:74:78:97:aa:36:
54:3c:e6:03:4c:b5:b0:26:7f:1e:7b:30:25:48:72:
5e:d0:5d:c0:a9:9b:4c:31:00:87:ef:23:6d:8f:6b:
c5:69:11:10:2e:a0:79:7c:1e:47:40:e1:f7:d9:ad:
0a:04:23:a1:6c:7c:a9:80:85:df:b2:2c:1f:eb:31:
81:37:12:34:f7:7d:c5:81:fa:d7:cf:14:d5:d2:55:
8a:3d:a5:22:d8:04:cb:19:ad:a7:5a:c3:da:4e:41:
76:10:21:8f:92:c4:65:54:75:4f:e7:b3:9a:16:95:
da:77:4d:ba:ae:f3:db:a9:73:0f:d9:5f:12:57:ed:
2f:1d:9d:13:30:24:3e:c0:64:1f:4b:2d:f8:e9:36:
a8:32:fd:89:9b:94:86:2f:d2:a2:6d:8f:a6:a0:a7:
a7:e4:60:1a:d4:54:8b:95:0a:b5:f1:62:99:2d:b8:
bb:8e:49:c5:fd:bb:e6:0c:bb:8a:02:3b:5b:16:e2:
c4:08:84:dd:37:f1:df:78:1e:c1:37:18:0e:21:4d:
04:1b:c8:9c:e9:c5:38:26:61:c4:8c:c6:4b:fa:18:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:99:ED:DE:A8:29:AD:7A:7E:66:DE:9F:FE:40:94:67:8A:B6:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61BCFFEAE2D211EF88EE7FB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.178.0/24
Signature Algorithm: sha256WithRSAEncryption
57:97:d8:c9:f7:d4:86:e5:a3:02:0c:b5:e7:cc:88:48:a0:f4:
d1:9c:a0:fe:e8:45:d5:fe:4f:e9:2d:c0:ea:3c:7b:a8:47:10:
bb:04:ba:64:52:22:ad:32:82:65:36:dd:da:d0:ee:b2:5f:11:
dc:da:14:05:ad:3b:63:ea:a4:6a:81:44:45:70:cf:66:49:70:
4b:5f:76:2e:ff:0c:37:d0:ae:03:43:56:ba:eb:ac:5f:91:eb:
c1:5f:87:a6:24:31:21:7b:38:36:02:5a:61:67:de:dc:2e:e6:
3d:8b:01:c2:7b:37:87:70:fe:cf:3e:2d:29:84:2a:94:a8:66:
06:37:d7:a2:40:0f:ce:7b:7a:0a:94:a2:c8:1c:7f:ca:da:a6:
01:64:3c:03:12:ab:e1:66:6f:04:9f:c6:86:ba:7e:d5:a7:41:
02:e8:93:4d:90:30:f3:78:45:49:24:c2:e7:b6:d4:b4:84:1a:
34:d1:ed:3d:6f:88:6e:40:98:23:2c:6b:b3:3a:aa:b0:75:d2:
a6:fe:f1:85:26:ba:42:3f:0e:db:4a:d6:e9:82:e5:49:ab:cd:
43:ff:81:29:86:89:fb:7b:13:3a:f1:b8:af:b9:f5:e1:83:15:
39:a7:57:bd:4e:7b:a5:91:ce:7c:a2:1e:62:40:83:27:b2:23:
c5:fa:5b:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVCoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MDgzMTA1WhcNMjUwNDMwMDgzMTA1WjAYMRYw
FAYDVQQDEw02N2ExZDA0Yy01ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn+9e7NgkOZtRhFdC0pAhV3t9FNBQGfu0QrjvBsz0Liqpbw+mQ/lAdHiX
qjZUPOYDTLWwJn8eezAlSHJe0F3AqZtMMQCH7yNtj2vFaREQLqB5fB5HQOH32a0K
BCOhbHypgIXfsiwf6zGBNxI0933FgfrXzxTV0lWKPaUi2ATLGa2nWsPaTkF2ECGP
ksRlVHVP57OaFpXad026rvPbqXMP2V8SV+0vHZ0TMCQ+wGQfSy346TaoMv2Jm5SG
L9KibY+moKen5GAa1FSLlQq18WKZLbi7jknF/bvmDLuKAjtbFuLECITdN/HfeB7B
NxgOIU0EG8ic6cU4JmHEjMZL+hiZAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOMA
me3eqCmten5m3p/+QJRnirYzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MUJDRkZFQUUyRDIxMUVGODhFRTdGQjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKyMA0GCSqGSIb3DQEB
CwUAA4IBAQBXl9jJ99SG5aMCDLXnzIhIoPTRnKD+6EXV/k/pLcDqPHuoRxC7BLpk
UiKtMoJlNt3a0O6yXxHc2hQFrTtj6qRqgURFcM9mSXBLX3Yu/ww30K4DQ1a666xf
kevBX4emJDEhezg2AlphZ97cLuY9iwHCezeHcP7PPi0phCqUqGYGN9eiQA/Oe3oK
lKLIHH/K2qYBZDwDEqvhZm8En8aGun7Vp0EC6JNNkDDzeEVJJMLnttS0hBo00e09
b4huQJgjLGuzOqqwddKm/vGFJrpCPw7bStbpguVJq81D/4Ephon7exM68bivufXh
gxU5p1e9Tnulkc58oh5iQIMnsiPF+lvS
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:48:27 2025 by rpki-client