Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D73748BA0B2811F08D1C8B58762E951A.roa
File: D73748BA0B2811F08D1C8B58762E951A.roa (raw, json)
Hash identifier: 0KBSVrskazBcm3hXnHlEZDSWn0JSqHfbryCV20vsG2I=
Subject key identifier: 14:A9:08:9C:39:E2:FA:93:28:64:D2:47:12:D3:3F:3B:23:AF:45:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017691
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D73748BA0B2811F08D1C8B58762E951A.roa
Signing time: Thu 27 Mar 2025 16:30:49 +0000
ROA not before: Thu 27 Mar 2025 16:30:45 +0000
ROA not after: Wed 16 Apr 2025 16:30:45 +0000
asID: 142286
IP address blocks: 154.89.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95889 (0x17691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 27 16:30:45 2025 GMT
Not After : Apr 16 16:30:45 2025 GMT
Subject: CN=67e57d38-d0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:b0:2b:b2:96:c8:4c:8c:a3:0a:d1:de:3a:
1a:dd:0f:a4:fe:09:b9:a4:10:7d:61:5b:65:d4:fd:
83:6e:28:e4:93:e4:f0:be:07:bf:5f:76:e6:3c:f8:
4d:50:fe:40:ea:fb:51:90:50:78:bb:ac:7c:d4:a4:
46:f8:cb:d0:78:6e:92:29:d0:b3:e7:fd:07:f9:0e:
07:78:84:37:a1:98:74:8d:6d:63:75:32:50:e3:65:
d9:25:c2:75:19:16:65:7c:fa:a7:98:95:a6:76:e5:
14:a3:57:87:7b:fb:a3:eb:86:27:b4:a3:bf:22:1e:
e1:3d:76:c7:83:2e:29:8f:ab:3a:8b:ae:8a:a7:f9:
30:40:20:4c:bf:4c:fa:5f:bb:69:26:84:2a:3a:4f:
1f:b0:da:f6:de:65:92:1f:dc:9a:32:e1:86:d6:a5:
fe:16:78:7b:3d:6b:fa:ef:67:31:33:14:79:8d:25:
de:cb:d7:0b:57:6d:6a:aa:3a:05:21:7e:d1:b9:ca:
e7:97:94:3b:97:68:2a:4c:c6:65:8f:87:88:8d:04:
44:91:08:f3:df:ed:e7:a8:52:9d:62:30:9e:bd:ad:
2d:14:ec:0e:ab:81:56:ca:d5:8f:26:2b:e0:6f:cc:
c5:9a:87:89:57:ee:f9:6e:68:d4:cd:4c:08:a7:1e:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A9:08:9C:39:E2:FA:93:28:64:D2:47:12:D3:3F:3B:23:AF:45:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D73748BA0B2811F08D1C8B58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:97:c1:b0:b7:3a:da:eb:08:cc:da:34:90:c9:4c:a5:3f:d4:
49:17:29:0a:11:4c:2a:19:ba:13:14:e2:35:a4:5b:a4:da:82:
51:1a:72:72:08:ad:a3:1a:67:77:c8:9a:bd:6d:d2:76:a1:b2:
2b:c9:e3:a0:5d:5a:7f:00:35:4f:c4:b2:81:3a:c2:0f:c6:b3:
88:2d:df:cb:d9:34:6b:6b:cd:56:3f:56:5a:ae:6a:0f:31:ed:
65:18:69:72:1f:ef:17:a3:44:f4:ba:b0:f4:49:9d:8a:fa:9d:
0c:88:4f:97:fc:68:16:a2:92:80:4a:dd:ae:37:5c:0d:3f:ff:
89:f6:df:d5:3c:45:31:8b:b0:0b:f0:c7:f5:28:37:a1:e5:ab:
1e:06:68:14:9b:b9:62:8f:ab:d6:d8:95:02:05:ba:9a:cf:90:
01:3a:e1:c2:de:eb:61:26:16:20:29:e0:20:0a:2d:7d:41:65:
73:69:08:98:3a:8b:9b:63:8b:82:7b:99:b3:29:ed:8b:6d:82:
39:06:ac:9f:07:eb:58:51:ca:aa:ca:7e:20:79:63:e7:7c:0c:
55:ae:1d:ae:2d:fd:07:1b:e4:68:65:59:ba:68:25:96:ca:42:
e7:41:e3:fe:d0:10:c2:0c:56:df:2f:6b:40:a3:e9:5a:ff:2f:
9f:7a:6d:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXaRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI3MTYzMDQ1WhcNMjUwNDE2MTYzMDQ1WjAYMRYw
FAYDVQQDEw02N2U1N2QzOC1kMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxwmwK7KWyEyMowrR3joa3Q+k/gm5pBB9YVtl1P2Dbijkk+Twvge/X3bm
PPhNUP5A6vtRkFB4u6x81KRG+MvQeG6SKdCz5/0H+Q4HeIQ3oZh0jW1jdTJQ42XZ
JcJ1GRZlfPqnmJWmduUUo1eHe/uj64YntKO/Ih7hPXbHgy4pj6s6i66Kp/kwQCBM
v0z6X7tpJoQqOk8fsNr23mWSH9yaMuGG1qX+Fnh7PWv672cxMxR5jSXey9cLV21q
qjoFIX7Rucrnl5Q7l2gqTMZlj4eIjQREkQjz3+3nqFKdYjCeva0tFOwOq4FWytWP
Jivgb8zFmoeJV+75bmjUzUwIpx5DZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBSp
CJw54vqTKGTSRxLTPzsjr0UeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENzM3NDhCQTBCMjgxMUYwOEQxQzhCNTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmllAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXl8Gwtzra6wjM2jSQyUylP9RJFykKEUwqGboTFOI1pFuk2oJRGnJy
CK2jGmd3yJq9bdJ2obIryeOgXVp/ADVPxLKBOsIPxrOILd/L2TRra81WP1ZarmoP
Me1lGGlyH+8Xo0T0urD0SZ2K+p0MiE+X/GgWopKASt2uN1wNP/+J9t/VPEUxi7AL
8Mf1KDeh5aseBmgUm7lij6vW2JUCBbqaz5ABOuHC3uthJhYgKeAgCi19QWVzaQiY
OoubY4uCe5mzKe2LbYI5BqyfB+tYUcqqyn4geWPnfAxVrh2uLf0HG+RoZVm6aCWW
ykLnQeP+0BDCDFbfL2tAo+la/y+fem3h
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:14 2025 by rpki-client