Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7100AFD4F41A11EFAFC690BC762E951A.roa
File: 7100AFD4F41A11EFAFC690BC762E951A.roa (raw, json)
Hash identifier: 6xmBdgLPH53Ec0q1AY7U/VEXHKFEYPQLcbu4i66bGE4=
Subject key identifier: 4B:8C:84:5D:8E:9A:37:EA:8D:62:67:EC:14:82:BB:2D:6D:EA:1A:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016145
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7100AFD4F41A11EFAFC690BC762E951A.roa
Signing time: Wed 26 Feb 2025 08:19:47 +0000
ROA not before: Wed 26 Feb 2025 08:19:44 +0000
ROA not after: Fri 20 Feb 2026 08:19:44 +0000
asID: 984
IP address blocks: 154.89.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90437 (0x16145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:19:44 2025 GMT
Not After : Feb 20 08:19:44 2026 GMT
Subject: CN=67becea3-e531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:ce:d7:99:d2:13:92:81:db:1c:e5:28:2d:
35:dd:55:c1:ae:7b:0d:58:34:11:18:7b:60:c5:d0:
a1:20:02:f7:5f:7f:e7:26:c6:a1:dd:43:c5:62:15:
91:fa:ac:23:d1:3d:c0:04:f4:7a:31:0b:53:2d:b5:
51:38:90:e1:c5:78:73:86:3a:35:de:ec:6a:c6:b0:
64:ae:3b:c4:a4:20:83:f8:49:f6:43:e8:48:e3:aa:
b9:e1:93:d4:c4:c5:e3:c7:48:11:dd:bb:f7:47:67:
b7:fe:75:e2:79:3b:f6:93:a3:61:1a:e4:51:ce:1d:
83:de:95:d5:fa:65:36:1e:ba:83:87:3b:37:e2:96:
d4:11:c2:eb:7a:c5:65:d5:58:fb:61:5e:a3:44:1b:
54:06:70:23:dd:f3:93:74:77:12:7c:3f:00:78:9b:
bb:23:dc:d6:07:27:4d:df:be:09:f3:08:0c:49:db:
79:04:19:cf:56:75:31:c4:46:22:2d:e8:3d:95:52:
3c:00:97:9f:35:aa:9d:3d:c9:34:a4:97:59:70:64:
ae:34:7a:d3:c1:c8:b8:e8:37:37:8b:50:5d:a5:11:
b8:50:2a:59:c5:dc:85:bb:b4:3b:72:ab:03:8c:70:
43:2d:c8:04:4d:42:b9:f4:3f:61:04:ab:84:81:08:
d0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:84:5D:8E:9A:37:EA:8D:62:67:EC:14:82:BB:2D:6D:EA:1A:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7100AFD4F41A11EFAFC690BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.22.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:32:21:d0:3d:45:93:f8:4d:6c:6e:c4:57:e1:e7:22:9b:47:
4d:c6:55:90:4a:fe:f6:8e:a9:2c:0d:8c:b0:69:64:da:2f:e4:
a7:44:72:f0:6b:f6:f2:b9:70:25:bb:9d:40:3d:dc:d3:f5:0e:
3a:f4:07:9d:22:16:f3:03:56:cb:c2:6b:d4:7c:da:6e:0e:19:
df:fc:37:70:f3:1f:04:0f:b0:bf:17:b6:1e:ce:ed:c0:ea:48:
8a:66:88:48:82:2e:32:27:a7:50:3c:79:c3:86:64:25:e3:66:
9c:64:1c:1d:5f:14:86:0d:76:9c:51:29:80:8c:d6:7d:47:fa:
06:f0:d1:29:30:10:14:34:71:e0:76:86:3c:51:a4:8c:e4:99:
38:e8:5c:61:f0:f6:45:7d:f2:47:e2:aa:b8:c6:77:83:e8:4a:
fb:22:13:bc:7f:c5:1e:ee:d4:b8:64:da:ff:17:25:df:10:f4:
d8:23:93:b0:40:e6:2d:8a:c2:8b:26:7d:c6:39:a0:bb:1d:de:
f4:b3:ff:a1:fb:e9:3b:87:65:a3:ea:c8:a4:bf:4a:47:56:21:
63:90:de:d7:06:f6:81:dc:ba:c7:23:98:4b:7a:af:b8:f5:c5:
b1:d9:34:0b:10:06:47:88:df:5f:07:64:a8:c3:dc:b4:a2:7c:
70:1d:31:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWFFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDgxOTQ0WhcNMjYwMjIwMDgxOTQ0WjAYMRYw
FAYDVQQDEw02N2JlY2VhMy1lNTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuz/O15nSE5KB2xzlKC013VXBrnsNWDQRGHtgxdChIAL3X3/nJsah3UPF
YhWR+qwj0T3ABPR6MQtTLbVROJDhxXhzhjo13uxqxrBkrjvEpCCD+En2Q+hI46q5
4ZPUxMXjx0gR3bv3R2e3/nXieTv2k6NhGuRRzh2D3pXV+mU2HrqDhzs34pbUEcLr
esVl1Vj7YV6jRBtUBnAj3fOTdHcSfD8AeJu7I9zWBydN374J8wgMSdt5BBnPVnUx
xEYiLeg9lVI8AJefNaqdPck0pJdZcGSuNHrTwci46Dc3i1BdpRG4UCpZxdyFu7Q7
cqsDjHBDLcgETUK59D9hBKuEgQjQ6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEuM
hF2OmjfqjWJn7BSCuy1t6hp0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MTAwQUZENEY0MUExMUVGQUZDNjkwQkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlkWMA0GCSqGSIb3DQEB
CwUAA4IBAQCaMiHQPUWT+E1sbsRX4ecim0dNxlWQSv72jqksDYywaWTaL+SnRHLw
a/byuXAlu51APdzT9Q469AedIhbzA1bLwmvUfNpuDhnf/Ddw8x8ED7C/F7Yezu3A
6kiKZohIgi4yJ6dQPHnDhmQl42acZBwdXxSGDXacUSmAjNZ9R/oG8NEpMBAUNHHg
doY8UaSM5Jk46Fxh8PZFffJH4qq4xneD6Er7IhO8f8Ue7tS4ZNr/FyXfEPTYI5Ow
QOYtisKLJn3GOaC7Hd70s/+h++k7h2Wj6sikv0pHViFjkN7XBvaB3LrHI5hLeq+4
9cWx2TQLEAZHiN9fB2Sow9y0onxwHTGF
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:52 2025 by rpki-client