Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F8E842041D11F0AD7D7E4C762E951A.roa
File: 69F8E842041D11F0AD7D7E4C762E951A.roa (raw, json)
Hash identifier: g7IZmP/o5icyMIfXPR4ml8aZ4PyYwlTWW4RrSPegbgA=
Subject key identifier: 71:7E:52:B9:15:8E:7A:A1:67:09:E4:43:E1:0D:1D:F0:40:9F:A2:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F8E842041D11F0AD7D7E4C762E951A.roa
Signing time: Tue 18 Mar 2025 17:21:23 +0000
ROA not before: Tue 18 Mar 2025 17:21:19 +0000
ROA not after: Mon 05 May 2025 17:21:19 +0000
asID: 202656
IP address blocks: 154.219.194.0/24 maxlen: 24
154.219.196.0/24 maxlen: 24
154.219.198.0/24 maxlen: 24
154.219.199.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95448 (0x174d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 17:21:19 2025 GMT
Not After : May 5 17:21:19 2025 GMT
Subject: CN=67d9ab93-2785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:de:5d:fc:72:fc:1f:7b:e0:ee:be:64:42:
2e:69:01:f1:78:cf:d3:20:15:5e:32:80:ff:4d:e6:
71:e5:61:04:ba:ac:5b:e4:5b:56:40:bb:12:3b:67:
0f:ad:c7:ad:f2:7d:2c:97:ed:cb:2c:95:ed:c0:f8:
73:a9:ae:40:ef:ff:7c:17:e1:6a:89:a7:bb:4f:81:
d4:d4:3b:1f:f7:56:29:15:b3:a3:b0:aa:62:e2:dd:
e6:8d:ec:39:0c:48:ce:d2:39:86:2a:fb:83:42:d2:
17:6e:da:ce:50:87:50:24:98:c8:55:67:c3:df:92:
41:60:07:0a:da:4c:be:9a:e1:c6:8d:28:c4:ac:b1:
2a:93:88:31:61:30:86:d3:f4:dc:bd:a9:04:2b:e3:
90:3e:eb:bc:5c:da:05:5c:bf:66:bc:43:8a:ed:3f:
41:8d:ed:32:53:ae:6b:36:e4:f2:d3:e3:8d:08:38:
84:13:11:aa:3d:cd:db:b1:ee:c8:02:a9:52:40:75:
82:f4:3f:a9:11:09:e1:e8:0f:64:72:00:5c:c0:8f:
3b:b1:ab:f1:ad:74:fa:a4:2f:81:68:99:d1:c7:5c:
69:4b:70:84:0e:68:c7:d5:05:e3:31:b7:1b:33:f5:
23:d4:88:09:61:f5:c9:43:86:9c:78:e9:c2:0f:17:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7E:52:B9:15:8E:7A:A1:67:09:E4:43:E1:0D:1D:F0:40:9F:A2:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F8E842041D11F0AD7D7E4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.194.0/24
154.219.196.0/24
154.219.198.0-154.219.205.255
Signature Algorithm: sha256WithRSAEncryption
7c:25:0a:ab:24:f5:8f:e0:d6:ec:30:f0:14:a1:2d:5b:9c:f6:
ac:bc:49:0a:77:d8:1e:36:73:f4:82:1a:1f:f6:f8:57:0a:e7:
91:bd:53:a3:e5:94:13:97:e6:33:e2:bc:75:3d:cb:e9:23:b8:
a0:9a:30:ec:8c:9a:87:bf:75:6c:b9:76:da:53:3a:66:05:72:
3d:27:27:43:b7:47:b8:bf:42:30:70:71:fb:88:b1:9a:c8:8f:
8e:8d:06:f5:a4:83:21:b7:23:3a:7a:5a:84:ff:aa:0a:92:19:
3a:ce:af:d1:1f:a9:ee:fe:0e:13:cc:5d:b5:04:94:a4:b8:5a:
8f:95:f5:0e:40:42:70:df:9f:a9:4e:14:84:ea:e4:b4:f6:0b:
52:23:8c:22:8d:f6:e1:60:bd:70:db:31:25:86:9c:d5:e8:10:
a5:ba:65:73:55:1c:29:bd:74:64:0e:05:9e:99:e8:13:74:08:
cf:bc:16:34:dd:95:f0:f3:ea:33:1b:0b:42:d3:91:93:ec:8b:
0d:49:e2:01:44:c5:bc:49:bf:6e:b7:79:4f:b3:da:ba:aa:f6:
92:80:9c:23:56:d3:ce:d3:e0:f4:f5:f8:9b:50:ca:13:78:e6:
06:90:3e:be:b4:f5:fc:e9:5b:7b:7a:83:24:1e:f6:b2:cb:bc:
33:49:3c:8b
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAXTYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE4MTcyMTE5WhcNMjUwNTA1MTcyMTE5WjAYMRYw
FAYDVQQDEw02N2Q5YWI5My0yNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt0/eXfxy/B974O6+ZEIuaQHxeM/TIBVeMoD/TeZx5WEEuqxb5FtWQLsS
O2cPrcet8n0sl+3LLJXtwPhzqa5A7/98F+Fqiae7T4HU1Dsf91YpFbOjsKpi4t3m
jew5DEjO0jmGKvuDQtIXbtrOUIdQJJjIVWfD35JBYAcK2ky+muHGjSjErLEqk4gx
YTCG0/TcvakEK+OQPuu8XNoFXL9mvEOK7T9Bje0yU65rNuTy0+ONCDiEExGqPc3b
se7IAqlSQHWC9D+pEQnh6A9kcgBcwI87savxrXT6pC+BaJnRx1xpS3CEDmjH1QXj
MbcbM/Uj1IgJYfXJQ4aceOnCDxcL+wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFHF+
UrkVjnqhZwnkQ+ENHfBAn6KIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUY4RTg0MjA0MUQxMUYwQUQ3RDdFNEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmtvCAwQAmtvEMAwDBAGa
28YDBAGa28wwDQYJKoZIhvcNAQELBQADggEBAHwlCqsk9Y/g1uww8BShLVuc9qy8
SQp32B42c/SCGh/2+FcK55G9U6PllBOX5jPivHU9y+kjuKCaMOyMmoe/dWy5dtpT
OmYFcj0nJ0O3R7i/QjBwcfuIsZrIj46NBvWkgyG3Izp6WoT/qgqSGTrOr9Efqe7+
DhPMXbUElKS4Wo+V9Q5AQnDfn6lOFITq5LT2C1IjjCKN9uFgvXDbMSWGnNXoEKW6
ZXNVHCm9dGQOBZ6Z6BN0CM+8FjTdlfDz6jMbC0LTkZPsiw1J4gFExbxJv263eU+z
2rqq9pKAnCNW087T4PT1+JtQyhN45gaQPr609fzpW3t6gyQe9rLLvDNJPIs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:47 2025 by rpki-client