Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB2EACD6317311F08B490FD4DAE4EC9C.roa
File: CB2EACD6317311F08B490FD4DAE4EC9C.roa (raw, json)
Hash identifier: LD4zOluXL5fKmmjBeVAol+la70eBB4oX/zb5vR4OZ3s=
Subject key identifier: 66:6C:C1:63:0B:F0:DC:3F:D5:6C:3F:E8:41:08:F2:B9:3E:B3:68:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB2EACD6317311F08B490FD4DAE4EC9C.roa
Signing time: Thu 15 May 2025 10:03:05 +0000
ROA not before: Thu 15 May 2025 10:03:00 +0000
ROA not after: Tue 24 Jun 2025 10:03:00 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
154.89.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98510 (0x180ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 10:03:00 2025 GMT
Not After : Jun 24 10:03:00 2025 GMT
Subject: CN=6825bbd9-45df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:47:3e:d7:33:60:37:44:b9:46:8a:ec:55:
bf:84:54:17:7c:70:f5:38:40:2a:e5:5c:01:d5:2c:
93:3d:1e:3f:5a:c6:20:ee:f5:ee:6d:80:d9:58:61:
28:88:f0:56:c8:59:9e:21:42:58:68:18:3b:4a:d9:
0c:6a:ab:ef:a2:3e:39:89:58:01:31:d9:c0:f6:53:
83:09:94:bd:43:4f:92:c7:1e:ec:2c:59:bd:1f:0f:
fc:71:3c:1f:ad:de:2b:4c:d0:3d:24:6a:bb:07:74:
43:97:37:d2:97:13:bc:bb:98:72:29:5f:15:9e:26:
64:38:d7:51:b7:44:ce:d1:6a:0c:cb:26:b0:bd:44:
97:59:ab:2e:17:89:ab:ae:30:4e:d0:98:4b:fe:d8:
01:48:87:05:c5:c9:9d:75:61:b9:6d:77:ab:00:4c:
e7:94:94:89:2e:3e:01:d4:9d:80:06:0c:bb:07:33:
75:cf:cf:ff:b6:a6:64:ff:b1:57:cb:4f:04:1e:f3:
22:21:38:21:19:58:18:79:d9:2a:fa:90:1e:3d:5c:
7c:5a:64:f4:9e:16:ec:c4:0b:88:88:92:b2:91:9c:
ca:83:70:dd:db:8e:41:4d:d6:e1:0b:13:7e:62:58:
84:9e:99:2b:22:1b:6e:cb:46:85:3d:6d:13:da:31:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:C1:63:0B:F0:DC:3F:D5:6C:3F:E8:41:08:F2:B9:3E:B3:68:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB2EACD6317311F08B490FD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
154.89.200.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:31:71:a4:c9:a9:26:88:87:4a:8f:5e:9a:63:11:df:15:a7:
f0:95:0a:de:08:a2:b8:61:62:09:e2:58:c8:9e:8b:bf:17:6a:
75:2e:25:3d:ae:e6:52:b8:82:37:b9:f8:d4:f2:dd:9c:e4:de:
0c:bd:5e:e5:78:c0:31:c8:c3:c1:8b:d4:0b:6e:6c:de:a0:9e:
f8:f8:31:4f:15:58:f3:29:2e:bd:c7:9d:6d:f9:f5:43:81:b5:
c9:e6:26:92:6d:b9:f5:d8:a7:53:57:ef:12:9c:d3:aa:38:50:
3d:b5:b6:24:f6:10:8b:5b:22:f3:c5:11:a6:fb:16:7b:32:3f:
d0:d8:e0:8e:c6:b5:b4:b3:40:2c:7d:64:07:bc:20:c8:ed:be:
63:d9:fe:0b:68:da:28:c3:81:ad:ad:1a:2f:2e:f6:19:1f:5f:
78:29:73:c4:33:84:51:5d:c2:25:94:33:e1:9b:a8:22:03:5e:
0b:9c:7d:a7:48:95:c0:79:14:fa:de:21:9d:a9:a6:6f:a2:e7:
04:c1:c1:c9:aa:9c:88:2a:88:c7:37:88:66:3c:59:5f:42:e2:
df:f2:f7:bd:59:f9:b2:bc:28:27:a7:73:78:94:69:32:f7:08:
18:d6:18:2a:e5:ea:d7:54:83:90:04:ab:f3:f5:38:de:cd:b4:
0f:44:86:c3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYDOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE1MTAwMzAwWhcNMjUwNjI0MTAwMzAwWjAYMRYw
FAYDVQQDEw02ODI1YmJkOS00NWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtmxHPtczYDdEuUaK7FW/hFQXfHD1OEAq5VwB1SyTPR4/WsYg7vXubYDZ
WGEoiPBWyFmeIUJYaBg7StkMaqvvoj45iVgBMdnA9lODCZS9Q0+Sxx7sLFm9Hw/8
cTwfrd4rTNA9JGq7B3RDlzfSlxO8u5hyKV8VniZkONdRt0TO0WoMyyawvUSXWasu
F4mrrjBO0JhL/tgBSIcFxcmddWG5bXerAEznlJSJLj4B1J2ABgy7BzN1z8//tqZk
/7FXy08EHvMiITghGVgYedkq+pAePVx8WmT0nhbsxAuIiJKykZzKg3Dd245BTdbh
CxN+YliEnpkrIhtuy0aFPW0T2jH7JQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGZs
wWML8Nw/1Ww/6EEI8rk+s2i2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjJFQUNENjMxNzMxMUYwOEI0OTBGRDREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmlmgAwQDmlnIMA0GCSqG
SIb3DQEBCwUAA4IBAQA+MXGkyakmiIdKj16aYxHfFafwlQreCKK4YWIJ4ljInou/
F2p1LiU9ruZSuII3ufjU8t2c5N4MvV7leMAxyMPBi9QLbmzeoJ74+DFPFVjzKS69
x51t+fVDgbXJ5iaSbbn12KdTV+8SnNOqOFA9tbYk9hCLWyLzxRGm+xZ7Mj/Q2OCO
xrW0s0AsfWQHvCDI7b5j2f4LaNoow4GtrRovLvYZH194KXPEM4RRXcIllDPhm6gi
A14LnH2nSJXAeRT63iGdqaZvoucEwcHJqpyIKojHN4hmPFlfQuLf8ve9WfmyvCgn
p3N4lGky9wgY1hgq5erXVIOQBKvz9TjezbQPRIbD
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:12 2025 by rpki-client