Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F40A1EEF44711EF89C59F7C762E951A.roa
File: 7F40A1EEF44711EF89C59F7C762E951A.roa (raw, json)
Hash identifier: TPGCp4FZ/2Yy1WvQEaPS2ki6OykfWZh22jRP8/PxPqc=
Subject key identifier: 44:70:8F:44:79:D9:FF:3E:FF:C2:0C:D5:A0:4B:30:32:1C:57:5A:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F40A1EEF44711EF89C59F7C762E951A.roa
Signing time: Wed 26 Feb 2025 13:42:19 +0000
ROA not before: Wed 26 Feb 2025 13:42:15 +0000
ROA not after: Thu 19 Feb 2026 13:42:15 +0000
asID: 984
IP address blocks: 154.210.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91109 (0x163e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:42:15 2025 GMT
Not After : Feb 19 13:42:15 2026 GMT
Subject: CN=67bf1a3b-dd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:b3:21:10:e0:54:ed:d2:41:69:80:a4:db:
b7:2e:8e:cc:fa:ae:85:fc:2c:48:58:f6:5e:2e:9f:
f8:04:1a:0d:65:6d:08:b8:f6:16:61:4b:3b:13:c7:
19:16:ee:a3:d6:9d:df:35:68:ae:f4:db:f9:31:14:
e4:bd:26:7c:fc:bc:de:c6:7a:9c:0b:e2:f6:36:52:
3c:78:1f:12:4c:27:34:95:fd:51:fe:0f:2a:34:5f:
a5:7e:6f:fe:f5:52:da:b9:6e:67:c1:46:52:df:b5:
8d:62:27:25:5c:47:a7:8a:32:4e:28:cc:7f:9e:f2:
57:2c:36:ef:e7:19:ab:1b:ba:b8:9b:64:f7:79:bd:
dd:b0:92:c6:92:49:2f:40:b8:7a:ce:a1:e2:6a:0b:
1e:7e:ae:4b:83:fc:77:24:9c:f7:99:6e:92:3b:c7:
c3:39:92:9b:df:fa:1a:aa:eb:d3:51:81:b3:c1:26:
8d:1d:5d:65:e8:e9:ca:b0:0b:d8:a6:09:b9:1e:e0:
d5:34:68:9a:92:06:6d:a2:59:1d:26:7f:3e:3d:77:
ec:c0:b7:92:33:a4:ad:8c:b1:5d:93:63:f0:7b:5a:
eb:8e:25:8b:69:dd:02:04:4e:7d:85:d3:cd:ff:81:
1b:6d:22:ca:4d:b5:41:30:cb:c8:e4:09:db:b4:9d:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:70:8F:44:79:D9:FF:3E:FF:C2:0C:D5:A0:4B:30:32:1C:57:5A:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F40A1EEF44711EF89C59F7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.35.0/24
Signature Algorithm: sha256WithRSAEncryption
00:18:26:eb:0e:8b:3e:7a:ec:0f:6b:6e:3e:8e:5b:45:2e:f9:
62:36:26:bd:ca:7d:6c:d3:92:2d:6f:ce:30:60:48:88:1f:2b:
ae:e2:3a:cb:e7:15:5c:b4:7a:8e:c4:80:8f:78:25:0f:63:e9:
aa:b7:bb:f3:28:40:dc:e6:3b:80:71:4b:46:db:dd:f9:4c:9a:
02:eb:58:33:e3:58:08:0f:f5:e3:78:94:e4:90:dc:39:3d:07:
f9:62:69:a0:30:70:e5:94:fe:57:5c:19:b3:7a:c2:1a:5d:32:
1d:94:5f:ac:53:6f:1f:42:8f:2b:c5:86:3f:fb:ac:3a:16:26:
31:2e:92:78:0d:b7:3e:0e:c8:c2:4d:a4:a6:f9:31:32:be:cd:
5f:6f:a7:e8:6c:7e:42:be:e3:95:ba:d0:cb:00:72:dc:07:34:
f7:55:51:4d:63:65:46:0e:8a:94:3f:61:8b:a1:16:46:ea:df:
94:c6:58:19:5c:79:88:36:ae:bf:7d:68:f2:d4:8c:4d:5b:c5:
46:19:f8:cd:bb:5b:bc:a8:87:9b:40:c9:23:a8:46:0c:5f:19:
c7:c5:a1:82:b4:a8:7c:55:f4:7f:d6:61:15:cf:1b:d6:8d:21:
82:0b:c6:e3:62:c2:0a:db:3d:d5:d4:62:9a:85:06:e2:da:d6:
80:d7:2c:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWPlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTM0MjE1WhcNMjYwMjE5MTM0MjE1WjAYMRYw
FAYDVQQDEw02N2JmMWEzYi1kZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp1ezIRDgVO3SQWmApNu3Lo7M+q6F/CxIWPZeLp/4BBoNZW0IuPYWYUs7
E8cZFu6j1p3fNWiu9Nv5MRTkvSZ8/LzexnqcC+L2NlI8eB8STCc0lf1R/g8qNF+l
fm/+9VLauW5nwUZS37WNYiclXEenijJOKMx/nvJXLDbv5xmrG7q4m2T3eb3dsJLG
kkkvQLh6zqHiagsefq5Lg/x3JJz3mW6SO8fDOZKb3/oaquvTUYGzwSaNHV1l6OnK
sAvYpgm5HuDVNGiakgZtolkdJn8+PXfswLeSM6StjLFdk2Pwe1rrjiWLad0CBE59
hdPN/4EbbSLKTbVBMMvI5AnbtJ2soQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFERw
j0R52f8+/8IM1aBLMDIcV1qJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RjQwQTFFRUY0NDcxMUVGODlDNTlGN0M3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtIjMA0GCSqGSIb3DQEB
CwUAA4IBAQAAGCbrDos+euwPa24+jltFLvliNia9yn1s05Itb84wYEiIHyuu4jrL
5xVctHqOxICPeCUPY+mqt7vzKEDc5juAcUtG2935TJoC61gz41gID/XjeJTkkNw5
PQf5YmmgMHDllP5XXBmzesIaXTIdlF+sU28fQo8rxYY/+6w6FiYxLpJ4Dbc+DsjC
TaSm+TEyvs1fb6fobH5CvuOVutDLAHLcBzT3VVFNY2VGDoqUP2GLoRZG6t+UxlgZ
XHmINq6/fWjy1IxNW8VGGfjNu1u8qIebQMkjqEYMXxnHxaGCtKh8VfR/1mEVzxvW
jSGCC8bjYsIK2z3V1GKahQbi2taA1yz5
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:48:04 2025 by rpki-client