Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E599CC7E38A611F080602AACDAE4EC9C.roa
File: E599CC7E38A611F080602AACDAE4EC9C.roa (raw, json)
Hash identifier: fiTP3SRUOoqCx1bH5sZjyU33sS43cWLR0gYcr0m+EZI=
Subject key identifier: 44:8C:3B:0A:1B:38:A8:25:6E:9E:4B:8B:5E:23:47:EA:B1:63:B7:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018292
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E599CC7E38A611F080602AACDAE4EC9C.roa
Signing time: Sat 24 May 2025 13:56:32 +0000
ROA not before: Sat 24 May 2025 13:56:26 +0000
ROA not after: Tue 01 Jul 2025 13:56:26 +0000
asID: 395793
IP address blocks: 154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98962 (0x18292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 13:56:26 2025 GMT
Not After : Jul 1 13:56:26 2025 GMT
Subject: CN=6831d010-2e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b9:75:a4:f3:1f:f7:6b:1c:89:e2:e5:bf:45:
aa:56:6e:df:55:10:99:cc:c2:00:d8:5f:be:47:db:
38:17:58:2b:17:23:82:40:30:4f:6e:71:99:50:67:
53:88:94:b3:67:52:57:1c:e9:1c:e4:d3:77:51:7a:
a5:af:89:22:ef:9c:62:d4:e2:9e:8f:76:92:32:55:
31:6f:c3:e8:ac:f4:34:0a:8e:33:20:71:2f:d6:5b:
47:de:3d:12:59:c7:ca:de:23:7c:f8:76:0f:3b:f8:
7f:41:5d:70:d1:48:4c:78:2b:82:81:d8:3f:77:73:
0f:cf:e6:1b:c9:e2:51:89:2c:30:33:17:53:01:3f:
23:3e:23:06:71:79:47:fe:94:e0:81:c3:2c:bc:0f:
51:eb:46:f1:06:08:54:d5:9d:dc:a8:e7:b5:d9:97:
db:84:55:03:ec:be:71:91:ed:82:4d:dc:18:7d:0f:
49:25:3b:83:fb:24:73:2d:46:ca:c4:e8:31:1c:d8:
da:17:c0:58:65:28:90:d1:4e:ee:0d:3f:80:e9:64:
2e:97:7e:5a:4a:24:0c:37:b7:b9:12:9a:fd:f6:09:
64:b3:bd:8c:4f:66:db:d7:51:e7:8a:14:5e:02:e6:
57:54:dc:56:08:01:81:e4:a2:45:ca:35:20:ec:99:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8C:3B:0A:1B:38:A8:25:6E:9E:4B:8B:5E:23:47:EA:B1:63:B7:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E599CC7E38A611F080602AACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.162.0-154.82.167.255
Signature Algorithm: sha256WithRSAEncryption
6d:86:ec:6b:e5:92:46:6d:76:6d:6a:34:01:43:2b:fd:2d:4e:
33:ae:32:55:de:8b:cb:a4:e5:ef:f1:06:5a:bc:4b:f8:29:58:
c5:bf:ff:cf:d0:7b:82:4e:95:f9:58:ab:bb:de:c2:36:ad:3d:
87:69:17:66:ee:97:92:a6:db:a4:92:65:71:79:63:50:07:a2:
b3:21:87:43:ae:de:16:60:37:ee:0c:63:2f:aa:ce:8b:17:9b:
41:13:8b:53:aa:ac:8f:ea:5c:53:4c:72:f5:02:ee:ff:cf:1c:
d3:4b:d6:b1:fc:7c:85:42:03:be:af:a5:9d:b3:be:46:4b:3e:
3e:bd:c6:de:07:b1:75:f8:b4:18:9b:18:87:8e:47:76:24:77:
7b:ac:2d:4d:57:f2:50:6b:a2:cc:cf:75:ee:39:94:cb:64:3f:
0a:1b:f7:f9:2b:a7:42:a0:74:bf:b7:ac:50:ee:7b:29:fd:f0:
4b:70:7c:a8:ad:0a:8f:aa:23:e7:94:74:01:ac:88:a7:79:d2:
d9:d5:02:f4:73:51:52:6b:76:da:a4:6e:86:57:f7:14:e9:8c:
f2:a5:58:c9:0d:b0:93:5a:35:51:26:a0:90:f6:2a:d9:b8:a7:
e3:cf:3b:78:5e:4d:48:8c:5e:0c:e2:a4:b3:59:de:db:97:77:
47:41:02:07
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAYKSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTI0MTM1NjI2WhcNMjUwNzAxMTM1NjI2WjAYMRYw
FAYDVQQDEw02ODMxZDAxMC0yZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5rl1pPMf92scieLlv0WqVm7fVRCZzMIA2F++R9s4F1grFyOCQDBPbnGZ
UGdTiJSzZ1JXHOkc5NN3UXqlr4ki75xi1OKej3aSMlUxb8PorPQ0Co4zIHEv1ltH
3j0SWcfK3iN8+HYPO/h/QV1w0UhMeCuCgdg/d3MPz+YbyeJRiSwwMxdTAT8jPiMG
cXlH/pTggcMsvA9R60bxBghU1Z3cqOe12ZfbhFUD7L5xke2CTdwYfQ9JJTuD+yRz
LUbKxOgxHNjaF8BYZSiQ0U7uDT+A6WQul35aSiQMN7e5Epr99glks72MT2bb11Hn
ihReAuZXVNxWCAGB5KJFyjUg7Jm+KQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFESM
OwobOKglbp5Li14jR+qxY7fdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNTk5Q0M3RTM4QTYxMUYwODA2MDJBQUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaUqIDBAOaUqAwDQYJ
KoZIhvcNAQELBQADggEBAG2G7GvlkkZtdm1qNAFDK/0tTjOuMlXei8uk5e/xBlq8
S/gpWMW//8/Qe4JOlflYq7vewjatPYdpF2bul5Km26SSZXF5Y1AHorMhh0Ou3hZg
N+4MYy+qzosXm0ETi1OqrI/qXFNMcvUC7v/PHNNL1rH8fIVCA76vpZ2zvkZLPj69
xt4HsXX4tBibGIeOR3Ykd3usLU1X8lBroszPde45lMtkPwob9/krp0KgdL+3rFDu
eyn98EtwfKitCo+qI+eUdAGsiKd50tnVAvRzUVJrdtqkboZX9xTpjPKlWMkNsJNa
NVEmoJD2Ktm4p+PPO3heTUiMXgzipLNZ3tuXd0dBAgc=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:25 2025 by rpki-client