Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE7FC21AF84111EFB522A5AE762E951A.roa
File: BE7FC21AF84111EFB522A5AE762E951A.roa (raw, json)
Hash identifier: Z2fh2MRuz3oa/oVBL8r/WgV5MYU3Jc+uTxBecprUWAI=
Subject key identifier: 5A:03:84:43:04:63:4D:01:23:9C:68:86:F6:02:B7:BE:C2:75:21:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE7FC21AF84111EFB522A5AE762E951A.roa
Signing time: Mon 03 Mar 2025 15:11:12 +0000
ROA not before: Mon 03 Mar 2025 15:11:09 +0000
ROA not after: Fri 11 Apr 2025 15:11:09 +0000
asID: 63139
IP address blocks: 154.203.171.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94443 (0x170eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 15:11:09 2025 GMT
Not After : Apr 11 15:11:09 2025 GMT
Subject: CN=67c5c690-9a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:95:23:bf:ae:f1:f1:f3:dd:c2:90:85:31:
e9:31:64:8e:24:c7:ec:2c:20:51:60:83:6e:44:92:
b5:45:8a:8e:50:91:af:3e:0e:a2:0f:67:35:b4:76:
0a:6f:05:eb:f6:04:e1:15:d7:48:fc:29:66:c3:8c:
9b:bb:9e:39:1a:78:c1:94:9d:f9:a7:5e:f3:bd:6b:
ad:95:87:48:37:02:e2:2d:16:5e:a7:8a:5c:e0:94:
00:d1:db:a0:c0:48:c2:0d:64:66:a3:5d:20:e7:24:
4d:2e:c5:9b:a7:ff:1c:11:4d:ff:bd:69:c6:60:1d:
30:3f:3d:99:2a:20:b1:1a:25:d0:0b:0a:93:58:dc:
38:f8:20:2d:a2:c6:f4:53:7a:f9:37:7d:14:b0:db:
19:d0:26:c9:21:92:d5:d9:37:d4:64:12:4a:3c:ba:
fc:31:c4:a2:77:78:c4:ee:53:8f:cc:f3:fd:6a:13:
80:82:00:98:b0:d5:bb:70:26:ce:03:a5:19:d1:19:
dc:45:3e:28:b7:01:95:f9:48:5d:d6:24:8e:5c:2b:
9b:ac:93:d5:9e:95:ff:c6:f5:54:34:13:d8:a7:4b:
0a:60:f4:d0:eb:5b:e1:ac:dd:cd:23:d8:8f:9f:02:
15:15:c6:da:15:08:b1:53:c6:b4:f7:13:0a:40:8e:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:84:43:04:63:4D:01:23:9C:68:86:F6:02:B7:BE:C2:75:21:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE7FC21AF84111EFB522A5AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.171.0/24
154.203.173.0-154.203.177.255
Signature Algorithm: sha256WithRSAEncryption
05:47:14:dc:2b:82:4e:33:ea:47:1f:d2:e3:52:df:69:29:0f:
10:8d:d7:7c:67:0d:df:c7:3f:8e:bd:f8:8d:57:66:2d:0f:5d:
0d:69:5e:4c:6d:30:d0:74:56:35:3a:bc:6b:62:27:88:d2:3c:
12:f5:7c:5f:59:95:52:5e:40:98:e1:04:75:66:a6:4b:82:b7:
0b:54:f9:86:f8:dd:1c:d3:8e:37:eb:2f:61:07:6d:68:84:5d:
0a:ea:62:c7:60:48:92:98:96:05:5f:2f:f4:5e:26:38:bc:78:
2a:7a:7a:16:56:73:d2:39:d4:46:29:8f:d3:8b:44:86:2d:03:
35:da:bf:b2:5a:24:8e:3f:21:b2:ae:3d:8c:a3:bf:d7:35:5f:
e7:bf:39:82:28:f0:23:3d:06:e0:f5:bb:62:fb:5c:47:db:50:
3e:e5:e2:a5:b7:58:33:d0:a8:7e:09:f5:26:b0:74:7c:1d:81:
04:6e:23:3c:a8:0b:9c:7a:78:17:39:7a:83:f9:c2:cb:35:72:
54:ed:95:bb:02:6e:8a:4e:36:05:7c:03:8e:15:b3:99:0e:a1:
80:cb:50:44:e9:05:92:75:dc:99:b6:c3:a2:a8:0e:f6:c9:d9:
ad:1b:f6:e5:a2:11:19:65:4c:5b:a3:dc:bb:be:98:f5:35:43:
98:b0:27:0d
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAXDrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTUxMTA5WhcNMjUwNDExMTUxMTA5WjAYMRYw
FAYDVQQDEw02N2M1YzY5MC05YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqxOVI7+u8fHz3cKQhTHpMWSOJMfsLCBRYINuRJK1RYqOUJGvPg6iD2c1
tHYKbwXr9gThFddI/Clmw4ybu545GnjBlJ35p17zvWutlYdINwLiLRZep4pc4JQA
0dugwEjCDWRmo10g5yRNLsWbp/8cEU3/vWnGYB0wPz2ZKiCxGiXQCwqTWNw4+CAt
osb0U3r5N30UsNsZ0CbJIZLV2TfUZBJKPLr8McSid3jE7lOPzPP9ahOAggCYsNW7
cCbOA6UZ0RncRT4otwGV+Uhd1iSOXCubrJPVnpX/xvVUNBPYp0sKYPTQ61vhrN3N
I9iPnwIVFcbaFQixU8a09xMKQI5+IwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFFoD
hEMEY00BI5xohvYCt77CdSG9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRTdGQzIxQUY4NDExMUVGQjUyMkE1QUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmsurMAwDBACay60DBAGa
y7AwDQYJKoZIhvcNAQELBQADggEBAAVHFNwrgk4z6kcf0uNS32kpDxCN13xnDd/H
P469+I1XZi0PXQ1pXkxtMNB0VjU6vGtiJ4jSPBL1fF9ZlVJeQJjhBHVmpkuCtwtU
+Yb43RzTjjfrL2EHbWiEXQrqYsdgSJKYlgVfL/ReJji8eCp6ehZWc9I51EYpj9OL
RIYtAzXav7JaJI4/IbKuPYyjv9c1X+e/OYIo8CM9BuD1u2L7XEfbUD7l4qW3WDPQ
qH4J9SawdHwdgQRuIzyoC5x6eBc5eoP5wss1clTtlbsCbopONgV8A44Vs5kOoYDL
UETpBZJ13Jm2w6KoDvbJ2a0b9uWiERllTFuj3Lu+mPU1Q5iwJw0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:57 2025 by rpki-client