Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87F45B88F43711EF975D508A762E951A.roa
File: 87F45B88F43711EF975D508A762E951A.roa (raw, json)
Hash identifier: nf/H31FRH0wTNIqXmiwXAQjr+503JDHQclbvWKZ5GZQ=
Subject key identifier: 02:D8:A0:01:5F:1C:18:41:A4:9C:01:FF:9C:12:64:0D:09:57:ED:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87F45B88F43711EF975D508A762E951A.roa
Signing time: Wed 26 Feb 2025 11:48:01 +0000
ROA not before: Wed 26 Feb 2025 11:47:57 +0000
ROA not after: Thu 19 Feb 2026 11:47:57 +0000
asID: 984
IP address blocks: 154.208.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90817 (0x162c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:47:57 2025 GMT
Not After : Feb 19 11:47:57 2026 GMT
Subject: CN=67beff71-7d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:ca:61:e3:46:b4:fa:60:01:6c:42:82:aa:
ed:ee:84:1b:11:66:e6:4b:d6:4f:d0:53:74:22:71:
9f:38:d0:30:b2:d6:15:1c:3b:0e:9d:0c:a3:53:bc:
a3:f5:d7:52:e0:02:78:36:5d:e9:ef:4a:b1:05:01:
03:ae:4d:36:27:b7:7f:fb:ee:bc:13:f7:35:4d:23:
92:96:93:1a:6b:cc:03:a3:d7:30:b2:23:02:f3:79:
1e:f8:ba:ef:5a:99:b8:d7:ba:44:7b:23:d7:ec:b0:
99:b7:a7:04:53:d7:74:61:4e:10:cb:7d:e3:56:3b:
39:9b:db:f9:85:4e:ad:e7:73:2e:67:14:71:f5:d5:
e4:5f:76:a9:44:b5:d9:27:8b:f2:b2:1c:e7:57:be:
98:60:ed:ca:43:c3:43:f1:40:a0:cf:76:a7:ca:7a:
f7:fd:6c:a6:72:65:01:64:a5:43:8c:58:32:de:1e:
f5:d9:e2:01:ca:19:52:11:f8:ff:78:b5:61:a1:5a:
f1:c2:c8:54:7c:9e:7c:c9:3e:a9:e8:48:99:3d:9f:
93:2b:62:92:cb:ee:5e:98:97:ea:88:a3:82:0f:ce:
99:a9:88:6e:ac:57:14:c9:43:0c:3a:d0:e3:0c:2a:
c0:03:70:7b:19:4b:56:6c:75:f9:d5:67:5e:26:79:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:A0:01:5F:1C:18:41:A4:9C:01:FF:9C:12:64:0D:09:57:ED:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87F45B88F43711EF975D508A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ba:1d:8e:3e:15:f3:43:21:2d:a8:8b:6a:bf:e2:5a:2a:9a:
79:29:69:32:3f:1f:c7:aa:10:c4:3e:f2:11:3a:96:d1:9f:fa:
6a:bb:6a:ed:0f:6f:c8:00:82:4a:e8:dc:12:61:0e:d7:b1:98:
6c:a7:d0:12:74:c7:f6:ea:fa:c4:ec:f8:26:d4:93:bf:db:2a:
b4:3e:7d:c1:32:2e:8e:e6:91:a9:bd:0f:5c:f3:6c:b8:42:4d:
f8:ef:d0:fe:93:49:70:4d:b4:31:9b:ff:29:2c:38:77:03:42:
10:9b:16:c0:f9:8a:bb:90:4a:fd:a5:34:91:64:09:dd:d1:d6:
0a:9c:9d:2a:62:13:3d:fe:7c:bb:7b:c2:f9:c4:9e:29:05:3c:
fa:2c:a5:19:ed:6c:51:48:2e:39:e7:1c:c9:b6:36:e3:05:17:
2b:8b:c4:f7:a4:87:9f:c6:34:f3:25:66:1a:e6:be:29:d8:93:
1e:c2:a2:48:f9:8a:26:ac:25:d5:cc:57:eb:e3:60:b9:58:ff:
97:bb:21:73:95:4f:b3:78:bb:a7:81:fc:6c:aa:39:fa:a8:c4:
7c:83:f3:40:fb:c0:6f:bc:f2:32:ad:1d:15:42:4a:d9:78:81:
ee:9e:ed:47:09:c6:61:7d:d5:1b:8b:28:aa:5c:ff:4c:92:2d:
92:33:8e:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWLBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTE0NzU3WhcNMjYwMjE5MTE0NzU3WjAYMRYw
FAYDVQQDEw02N2JlZmY3MS03ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtYTKYeNGtPpgAWxCgqrt7oQbEWbmS9ZP0FN0InGfONAwstYVHDsOnQyj
U7yj9ddS4AJ4Nl3p70qxBQEDrk02J7d/++68E/c1TSOSlpMaa8wDo9cwsiMC83ke
+LrvWpm417pEeyPX7LCZt6cEU9d0YU4Qy33jVjs5m9v5hU6t53MuZxRx9dXkX3ap
RLXZJ4vyshznV76YYO3KQ8ND8UCgz3anynr3/WymcmUBZKVDjFgy3h712eIByhlS
Efj/eLVhoVrxwshUfJ58yT6p6EiZPZ+TK2KSy+5emJfqiKOCD86ZqYhurFcUyUMM
OtDjDCrAA3B7GUtWbHX51WdeJnncrQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFALY
oAFfHBhBpJwB/5wSZA0JV+0EMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84N0Y0NUI4OEY0MzcxMUVGOTc1RDUwOEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtBnMA0GCSqGSIb3DQEB
CwUAA4IBAQBfuh2OPhXzQyEtqItqv+JaKpp5KWkyPx/HqhDEPvIROpbRn/pqu2rt
D2/IAIJK6NwSYQ7XsZhsp9ASdMf26vrE7Pgm1JO/2yq0Pn3BMi6O5pGpvQ9c82y4
Qk3479D+k0lwTbQxm/8pLDh3A0IQmxbA+Yq7kEr9pTSRZAnd0dYKnJ0qYhM9/ny7
e8L5xJ4pBTz6LKUZ7WxRSC455xzJtjbjBRcri8T3pIefxjTzJWYa5r4p2JMewqJI
+YomrCXVzFfr42C5WP+XuyFzlU+zeLungfxsqjn6qMR8g/NA+8BvvPIyrR0VQkrZ
eIHunu1HCcZhfdUbiyiqXP9Mki2SM47H
-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:59 2025 by rpki-client