Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDA70D42F8B811EF8BCF7764762E951A.roa
File: EDA70D42F8B811EF8BCF7764762E951A.roa (raw, json)
Hash identifier: 9LbkBfs7d0Puf9HnO2SsxDzp4On+ekmlx1iOuGC+mVk=
Subject key identifier: F7:1A:6E:5C:0F:4B:04:17:A7:E6:99:22:0F:44:5F:90:A2:31:1A:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017164
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDA70D42F8B811EF8BCF7764762E951A.roa
Signing time: Tue 04 Mar 2025 05:24:22 +0000
ROA not before: Tue 04 Mar 2025 05:24:18 +0000
ROA not after: Tue 03 Mar 2026 05:24:18 +0000
asID: 984
IP address blocks: 154.83.32.0/24 maxlen: 24
154.83.33.0/24 maxlen: 24
154.83.34.0/24 maxlen: 24
154.83.35.0/24 maxlen: 24
154.83.36.0/24 maxlen: 24
154.83.37.0/24 maxlen: 24
154.83.38.0/24 maxlen: 24
154.84.136.0/24 maxlen: 24
154.84.137.0/24 maxlen: 24
154.84.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94564 (0x17164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 05:24:18 2025 GMT
Not After : Mar 3 05:24:18 2026 GMT
Subject: CN=67c68e86-a928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:96:7c:f6:2e:8a:81:d6:d9:b8:f7:21:68:
16:bd:63:cd:c2:2e:92:44:9f:37:b9:43:a3:00:46:
9e:e8:64:05:00:26:72:50:13:09:aa:6a:ee:c0:56:
ad:b4:9f:ac:f4:c9:d5:33:f3:ce:a6:4a:9d:f2:ed:
a8:af:5c:08:27:a6:24:0c:b5:67:91:1f:0b:24:b4:
92:32:55:02:1b:9f:0c:a4:ad:74:2d:99:09:53:6c:
20:6f:2f:8f:31:b4:77:30:9c:3b:dc:be:d4:00:d8:
72:8f:b5:b8:1b:91:b7:1f:f0:4a:c1:21:d2:5d:77:
6c:15:4b:26:aa:d6:10:88:38:ef:04:ff:8d:71:db:
5f:55:b9:93:c9:12:03:b3:bc:3c:2c:d1:48:4c:61:
e0:9f:f6:34:02:6b:f1:ef:0f:e9:5d:47:33:29:7f:
c1:42:85:0b:1c:55:be:33:e1:b8:87:09:9d:0a:56:
d4:6e:32:6f:e2:70:26:ee:2e:fa:51:68:30:e7:ce:
78:ce:0d:9c:d6:2d:36:41:7c:e1:22:18:1e:01:ee:
8a:ba:c3:2e:a9:90:6a:c6:80:53:66:29:06:50:4a:
54:75:70:7d:8f:bc:14:13:3b:5d:d4:18:cb:cf:4d:
c4:ca:76:c4:79:53:2d:58:0c:3b:4e:69:9b:60:ff:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:6E:5C:0F:4B:04:17:A7:E6:99:22:0F:44:5F:90:A2:31:1A:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDA70D42F8B811EF8BCF7764762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.32.0-154.83.38.255
154.84.136.0/23
154.84.143.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0a:ac:ed:af:ec:1e:90:6c:9e:28:57:8a:c7:b5:88:b8:df:
59:b4:e6:a4:ae:c1:63:fb:c8:2c:72:4b:71:4a:5d:5c:86:b9:
1e:41:57:d4:b8:a6:ee:2c:d6:df:4e:44:52:09:31:70:41:44:
ee:f5:ef:ea:e9:62:cd:4a:a6:5b:83:a3:26:c9:63:28:7e:d2:
a4:4e:a9:99:cd:cf:f2:89:70:f1:42:00:a9:b4:a7:7f:18:3e:
c2:c9:9e:98:54:ba:8a:d2:94:17:cc:15:a3:a2:44:18:50:17:
5e:09:c5:f2:de:56:37:d0:85:48:e8:d9:37:c2:6b:3b:d0:1c:
7e:55:dc:ec:c8:89:56:53:cd:5b:2a:ca:88:ab:6b:40:68:b1:
8e:0e:86:b2:5f:bf:76:aa:cd:df:3e:87:50:27:45:e1:70:bd:
bd:51:12:26:c4:c0:b6:33:a2:71:ca:19:59:28:4d:5b:ca:47:
a4:25:fd:a1:5e:b1:33:dd:08:9d:bc:93:df:62:c9:d6:9c:54:
58:cd:70:0e:03:e1:9d:0a:10:8f:56:b5:67:59:4b:50:8a:35:
ba:e5:e1:5d:28:62:22:e5:93:47:59:66:62:23:13:97:0c:f0:
3f:ce:42:67:6e:dd:7e:59:4a:7b:4d:5d:ad:6b:3c:24:13:12:
fa:61:ea:95
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAXFkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA0MDUyNDE4WhcNMjYwMzAzMDUyNDE4WjAYMRYw
FAYDVQQDEw02N2M2OGU4Ni1hOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwnuWfPYuioHW2bj3IWgWvWPNwi6SRJ83uUOjAEae6GQFACZyUBMJqmru
wFattJ+s9MnVM/POpkqd8u2or1wIJ6YkDLVnkR8LJLSSMlUCG58MpK10LZkJU2wg
by+PMbR3MJw73L7UANhyj7W4G5G3H/BKwSHSXXdsFUsmqtYQiDjvBP+NcdtfVbmT
yRIDs7w8LNFITGHgn/Y0Amvx7w/pXUczKX/BQoULHFW+M+G4hwmdClbUbjJv4nAm
7i76UWgw5854zg2c1i02QXzhIhgeAe6KusMuqZBqxoBTZikGUEpUdXB9j7wUEztd
1BjLz03EynbEeVMtWAw7TmmbYP/ZswIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPca
blwPSwQXp+aZIg9EX5CiMRrAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FREE3MEQ0MkY4QjgxMUVGOEJDRjc3NjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAWaUyADBACaUyYDBAGa
VIgDBACaVI8wDQYJKoZIhvcNAQELBQADggEBACwKrO2v7B6QbJ4oV4rHtYi431m0
5qSuwWP7yCxyS3FKXVyGuR5BV9S4pu4s1t9ORFIJMXBBRO717+rpYs1KpluDoybJ
Yyh+0qROqZnNz/KJcPFCAKm0p38YPsLJnphUuorSlBfMFaOiRBhQF14JxfLeVjfQ
hUjo2TfCazvQHH5V3OzIiVZTzVsqyoira0BosY4OhrJfv3aqzd8+h1AnReFwvb1R
EibEwLYzonHKGVkoTVvKR6Ql/aFesTPdCJ28k99iydacVFjNcA4D4Z0KEI9WtWdZ
S1CKNbrl4V0oYiLlk0dZZmIjE5cM8D/OQmdu3X5ZSntNXa1rPCQTEvph6pU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:38 2025 by rpki-client