Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AE94BA204C111F0820D1952762E951A.roa
File: 7AE94BA204C111F0820D1952762E951A.roa (raw, json)
Hash identifier: +Ml12x54AysuOQbdx8qdZU2WOtjLEiFJoO0P2Bgqdyc=
Subject key identifier: 38:1D:B9:A9:F9:01:13:93:E5:33:67:27:CB:09:A2:31:AB:21:75:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017514
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AE94BA204C111F0820D1952762E951A.roa
Signing time: Wed 19 Mar 2025 12:55:49 +0000
ROA not before: Wed 19 Mar 2025 12:55:45 +0000
ROA not after: Sun 27 Apr 2025 12:55:45 +0000
asID: 6079
IP address blocks: 154.81.200.0/21 maxlen: 24
154.83.48.0/20 maxlen: 24
154.90.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95508 (0x17514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 12:55:45 2025 GMT
Not After : Apr 27 12:55:45 2025 GMT
Subject: CN=67dabed4-4679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:d1:f7:7b:45:a6:d2:2d:e7:c6:7a:02:bb:
81:4f:cc:f6:b5:e6:0c:2b:57:fc:0f:c8:80:68:3c:
43:df:6a:90:04:3e:c3:6a:a0:22:8c:a1:51:6e:d0:
ea:e5:0a:05:d7:b8:b7:5c:ae:39:a8:67:cb:a4:b0:
38:cb:96:bc:1b:8c:18:2c:78:67:1a:76:42:34:bd:
8b:d4:a9:49:b1:13:3d:e7:62:54:ea:af:b6:44:47:
cc:4e:d1:cd:e5:d3:17:de:84:e7:86:f3:60:0e:bd:
05:38:eb:a5:75:ec:45:ce:52:aa:05:2f:d6:40:47:
e8:4e:38:12:07:cb:24:a3:75:99:cb:3d:75:61:df:
a5:52:39:9d:5f:e6:f7:54:1f:81:4f:fc:42:da:ed:
8e:bd:3a:8d:8e:eb:2f:6c:15:30:39:51:f2:34:26:
8f:9c:2d:c8:ae:95:71:6f:63:98:c1:b0:e1:21:4e:
cb:6a:8c:1f:99:c5:3a:9f:ff:00:f0:ba:b2:47:f9:
9a:e3:a3:b3:87:24:40:5f:d9:a2:f6:00:39:6f:49:
c7:8b:e6:d2:9e:2c:88:35:a3:57:fa:5a:35:ab:03:
4d:9d:b3:4a:0f:90:eb:2b:9a:01:33:b5:c3:5e:14:
d5:4b:ea:29:fe:72:19:2e:03:eb:af:b9:77:ab:4c:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:B9:A9:F9:01:13:93:E5:33:67:27:CB:09:A2:31:AB:21:75:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7AE94BA204C111F0820D1952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.200.0/21
154.83.48.0/20
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
79:de:73:4e:e8:ba:c9:f9:d1:77:75:9b:62:40:e6:b7:cf:5c:
03:b8:76:7b:06:3b:f3:6d:fc:d7:81:11:58:5d:14:fa:88:97:
64:8d:7b:7b:07:8b:0e:65:8f:2b:b9:85:71:2b:35:89:a4:4c:
e3:0f:5f:f3:0b:55:a2:c5:e9:37:27:65:c5:7a:9e:fe:cb:71:
cf:d4:f9:c3:0d:08:40:4b:d6:df:e2:94:d1:f2:63:f8:f4:d5:
5c:29:80:ff:4e:65:42:1d:ce:24:46:b8:c5:5f:09:bb:36:99:
e4:88:1f:ef:79:87:39:97:d0:2a:d9:1f:55:b5:66:a2:27:a8:
e3:05:b8:5a:6e:a2:23:c9:42:4b:12:2d:df:79:e3:5a:7c:d4:
04:9c:b5:66:25:6c:c9:31:b7:c3:a4:6c:08:55:1e:2e:9e:28:
15:92:e5:7f:18:ac:f0:02:18:69:d9:1d:4b:6e:2e:e7:d1:c7:
9d:80:88:40:2e:77:18:51:3f:55:d2:0d:84:f3:89:38:5f:f5:
a6:f6:48:80:80:95:6e:69:a4:2e:e8:2d:54:09:7b:c1:dd:69:
51:86:49:35:df:de:23:3d:26:0f:73:a6:86:ba:00:31:25:41:
18:43:85:ea:7b:19:1e:23:cb:65:a8:5f:e9:ef:7a:9d:bc:c0:
35:c2:46:8c
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAXUUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE5MTI1NTQ1WhcNMjUwNDI3MTI1NTQ1WjAYMRYw
FAYDVQQDEw02N2RhYmVkNC00Njc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAutjR93tFptIt58Z6AruBT8z2teYMK1f8D8iAaDxD32qQBD7DaqAijKFR
btDq5QoF17i3XK45qGfLpLA4y5a8G4wYLHhnGnZCNL2L1KlJsRM952JU6q+2REfM
TtHN5dMX3oTnhvNgDr0FOOuldexFzlKqBS/WQEfoTjgSB8sko3WZyz11Yd+lUjmd
X+b3VB+BT/xC2u2OvTqNjusvbBUwOVHyNCaPnC3IrpVxb2OYwbDhIU7LaowfmcU6
n/8A8LqyR/ma46OzhyRAX9mi9gA5b0nHi+bSniyINaNX+lo1qwNNnbNKD5DrK5oB
M7XDXhTVS+op/nIZLgPrr7l3q0zQNwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFDgd
uan5AROT5TNnJ8sJojGrIXUnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QUU5NEJBMjA0QzExMUYwODIwRDE5NTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlHIAwQEmlMwAwQAmloA
MA0GCSqGSIb3DQEBCwUAA4IBAQB53nNO6LrJ+dF3dZtiQOa3z1wDuHZ7BjvzbfzX
gRFYXRT6iJdkjXt7B4sOZY8ruYVxKzWJpEzjD1/zC1Wixek3J2XFep7+y3HP1PnD
DQhAS9bf4pTR8mP49NVcKYD/TmVCHc4kRrjFXwm7NpnkiB/veYc5l9Aq2R9VtWai
J6jjBbhabqIjyUJLEi3feeNafNQEnLVmJWzJMbfDpGwIVR4unigVkuV/GKzwAhhp
2R1Lbi7n0cedgIhALncYUT9V0g2E84k4X/Wm9kiAgJVuaaQu6C1UCXvB3WlRhkk1
394jPSYPc6aGugAxJUEYQ4XqexkeI8tlqF/p73qdvMA1wkaM
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:26:36 2025 by rpki-client