Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBDE18ECF47911EFA99AA55A762E951A.roa
File: CBDE18ECF47911EFA99AA55A762E951A.roa (raw, json)
Hash identifier: F+uAzKQvgQKJjeFI604cg/nW9wmXpY72CzeFTBMUsyg=
Subject key identifier: 0A:4F:B8:EA:4B:D6:D7:1F:A2:30:2C:65:B3:60:E7:69:BC:33:EC:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBDE18ECF47911EFA99AA55A762E951A.roa
Signing time: Wed 26 Feb 2025 19:42:22 +0000
ROA not before: Wed 26 Feb 2025 19:42:18 +0000
ROA not after: Sat 19 Feb 2028 19:42:18 +0000
asID: 17561
IP address blocks: 154.218.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91578 (0x165ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:42:18 2025 GMT
Not After : Feb 19 19:42:18 2028 GMT
Subject: CN=67bf6e9e-067b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d2:5b:20:c6:86:b1:c4:1c:e0:e3:5b:e8:3e:
b3:94:9e:79:c9:ec:a4:d9:07:61:aa:b6:5b:11:bd:
63:0a:57:e5:b9:8a:aa:4b:c8:84:70:2e:2d:60:84:
ae:8f:76:60:c6:a8:08:6b:67:13:77:cc:8f:c0:66:
00:e2:00:ee:f1:ee:1b:a3:2f:f4:a2:45:73:b1:fe:
08:35:57:47:a9:f0:fa:86:3a:ab:2c:09:d4:92:5d:
5c:cb:77:0b:12:f9:4d:81:8d:5c:20:b7:9e:9d:2f:
4e:f7:24:6a:a7:cf:e5:1a:f3:b9:3f:36:7b:7f:fa:
8d:0b:f0:66:b1:f7:02:ca:a1:ba:62:f4:de:a7:36:
06:a6:7a:f4:7a:c1:9b:2b:1e:43:62:8b:c9:92:b4:
37:95:75:99:33:b8:49:50:e9:f9:8e:49:e4:b9:b9:
ae:4e:b0:6b:2e:76:13:cc:cd:50:2b:26:c1:87:2f:
48:c0:b6:2b:5c:03:f6:79:ea:84:4c:22:58:1b:37:
f3:29:c8:99:ef:30:5d:cd:d2:4c:69:cb:79:76:e2:
32:cb:e7:71:2a:81:46:f3:40:37:0b:0a:81:08:71:
b3:5a:98:c0:2e:5a:de:a4:91:ce:8e:20:d0:0f:31:
4b:c5:b0:14:2f:75:74:47:f1:23:da:5d:66:50:b7:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:B8:EA:4B:D6:D7:1F:A2:30:2C:65:B3:60:E7:69:BC:33:EC:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBDE18ECF47911EFA99AA55A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2b:3b:43:5a:93:69:42:09:cf:94:f4:e0:6e:f7:e5:00:0d:
c7:1f:82:86:4d:2e:f3:d4:fe:2a:fc:43:e4:23:07:81:54:d7:
ba:ee:71:b2:ed:f0:64:71:9c:85:d9:97:43:dd:71:bd:8f:94:
26:31:1c:b0:56:70:6b:ec:a5:64:b0:e2:c2:1e:61:47:86:bd:
82:62:75:15:cd:5e:1b:0f:67:2d:34:7e:8b:ca:40:02:6f:06:
07:44:d2:c2:e3:ae:17:b6:61:58:9c:0c:33:87:e3:c1:69:9f:
cf:91:6e:bf:82:9b:d9:0b:4b:ab:da:b9:4b:e0:d0:bc:44:17:
c4:82:93:91:77:c5:5c:89:f5:22:e5:01:f1:8f:57:a2:51:06:
bc:d3:b4:89:31:e5:59:33:85:82:31:73:cc:87:03:7e:c3:7e:
34:aa:d5:10:02:96:11:ea:e6:f1:65:f8:25:25:62:27:f0:ac:
04:41:02:f5:05:94:9e:fb:65:cc:d3:35:88:db:f5:17:a6:ef:
db:92:39:d4:ef:ff:9b:69:f4:e8:e5:f2:30:4d:f9:0c:26:c5:
12:fc:ae:e3:02:b0:3b:73:d3:77:3d:95:ac:91:34:d8:26:89:
c5:dd:06:4d:fe:56:e2:6b:ac:70:c3:13:4e:d9:b3:88:15:e9:
1a:e1:b2:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWW6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTk0MjE4WhcNMjgwMjE5MTk0MjE4WjAYMRYw
FAYDVQQDEw02N2JmNmU5ZS0wNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9dJbIMaGscQc4ONb6D6zlJ55yeyk2QdhqrZbEb1jClfluYqqS8iEcC4t
YISuj3ZgxqgIa2cTd8yPwGYA4gDu8e4boy/0okVzsf4INVdHqfD6hjqrLAnUkl1c
y3cLEvlNgY1cILeenS9O9yRqp8/lGvO5PzZ7f/qNC/BmsfcCyqG6YvTepzYGpnr0
esGbKx5DYovJkrQ3lXWZM7hJUOn5jknkubmuTrBrLnYTzM1QKybBhy9IwLYrXAP2
eeqETCJYGzfzKciZ7zBdzdJMact5duIyy+dxKoFG80A3CwqBCHGzWpjALlrepJHO
jiDQDzFLxbAUL3V0R/Ej2l1mULe3oQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFApP
uOpL1tcfojAsZbNg52m8M+yKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQkRFMThFQ0Y0NzkxMUVGQTk5QUE1NUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtoyMA0GCSqGSIb3DQEB
CwUAA4IBAQAaKztDWpNpQgnPlPTgbvflAA3HH4KGTS7z1P4q/EPkIweBVNe67nGy
7fBkcZyF2ZdD3XG9j5QmMRywVnBr7KVksOLCHmFHhr2CYnUVzV4bD2ctNH6LykAC
bwYHRNLC464XtmFYnAwzh+PBaZ/PkW6/gpvZC0ur2rlL4NC8RBfEgpORd8VcifUi
5QHxj1eiUQa807SJMeVZM4WCMXPMhwN+w340qtUQApYR6ubxZfglJWIn8KwEQQL1
BZSe+2XM0zWI2/UXpu/bkjnU7/+bafTo5fIwTfkMJsUS/K7jArA7c9N3PZWskTTY
JonF3QZN/lbia6xwwxNO2bOIFeka4bKy
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:59 2025 by rpki-client