Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F03A7436F8CC11EFA093546B762E951A.roa
File: F03A7436F8CC11EFA093546B762E951A.roa (raw, json)
Hash identifier: GcwVae45ADfz5ZoGor7DeuxQlw8iXc3RZBVzV1rFbI4=
Subject key identifier: 9B:4C:05:EA:A5:25:77:28:C2:EF:22:D6:16:3B:C1:2C:C6:F7:CE:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017184
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F03A7436F8CC11EFA093546B762E951A.roa
Signing time: Tue 04 Mar 2025 07:47:36 +0000
ROA not before: Tue 04 Mar 2025 07:47:32 +0000
ROA not after: Sun 11 May 2025 07:47:32 +0000
asID: 9009
IP address blocks: 154.194.8.0/23 maxlen: 24
154.194.10.0/24 maxlen: 24
154.194.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94596 (0x17184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 07:47:32 2025 GMT
Not After : May 11 07:47:32 2025 GMT
Subject: CN=67c6b018-d846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:c7:46:6c:68:02:2d:e4:5f:d4:3d:15:41:
e3:72:5a:52:4b:8e:7c:93:c7:e6:cf:e5:a1:2c:d0:
d3:c0:7f:44:b9:f8:b5:72:f8:6b:6c:38:ab:03:8b:
9b:b9:1a:32:59:65:c2:f7:d3:49:55:c7:4b:b4:ce:
3a:0c:3b:62:69:bf:69:e5:0c:24:2a:a4:28:41:a9:
f8:3a:5b:97:4a:75:54:71:64:9c:f0:59:5e:0d:2b:
73:08:15:e5:0a:74:a0:0f:5f:94:8f:a6:fb:8d:b3:
27:96:55:7c:98:f3:f0:7e:bc:b4:b9:d5:7c:36:00:
5d:9a:30:96:d1:b5:53:66:b3:e1:10:d7:42:11:df:
6e:fb:3a:54:17:90:89:93:f5:d3:30:9d:19:da:5c:
0e:5f:5a:e1:37:a1:a5:c1:b2:c4:3f:c5:76:1d:37:
81:76:0c:72:59:5b:56:7c:8e:bb:00:36:00:12:04:
83:cd:bf:87:a7:c5:13:cc:75:e2:23:bc:10:50:21:
5e:d9:3b:16:34:a4:bd:94:f7:b0:14:a5:34:17:7f:
96:b4:41:54:83:7b:ab:1a:70:47:ec:f6:92:ff:71:
42:59:b8:56:31:ad:46:d1:57:26:ea:b6:fb:99:f8:
f2:27:e4:0a:01:b5:1a:fc:47:4a:64:af:6f:0f:28:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:05:EA:A5:25:77:28:C2:EF:22:D6:16:3B:C1:2C:C6:F7:CE:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F03A7436F8CC11EFA093546B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
49:94:87:4a:92:e2:42:0e:62:a0:1e:ae:91:72:94:7d:61:14:
88:97:ce:9f:36:87:c4:31:c0:60:24:f5:36:b4:3b:1e:93:6b:
ec:33:eb:e9:13:33:f9:90:b2:75:c7:d2:f8:85:90:69:39:76:
81:99:11:ef:be:3c:64:d8:6d:1f:4d:88:37:a8:a2:08:d3:75:
19:ca:0f:d4:1d:c0:e9:43:60:f8:13:a4:3f:7d:80:c3:ee:85:
b3:24:2e:58:d0:91:2d:6a:40:4f:ce:b8:64:b9:7f:6c:2e:6a:
52:99:51:7c:34:48:5c:02:5f:d0:0b:42:ab:1d:3b:28:ee:fc:
43:ff:6c:6b:57:31:e6:bf:b5:13:99:30:b4:4d:bf:6c:af:54:
8f:f6:2c:6e:88:8a:d6:53:44:c4:49:c1:c5:d1:ba:ba:e5:9d:
0d:37:f5:d6:81:4c:17:cf:59:f3:84:c4:c4:72:9e:ad:a6:79:
8e:78:c8:4c:2f:52:b5:9e:4b:46:9d:0e:78:a8:3a:4d:ff:1c:
2b:2e:0c:49:9a:ab:b5:89:fa:75:04:4b:bd:dc:f1:67:c3:ce:
ec:d6:ab:d8:82:d9:60:64:95:6f:26:5c:02:b0:88:29:b4:cf:
c3:ea:37:2a:90:d5:3c:05:ae:9c:fa:3c:88:c6:47:c9:7e:1c:
c0:c1:a0:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXGEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA0MDc0NzMyWhcNMjUwNTExMDc0NzMyWjAYMRYw
FAYDVQQDEw02N2M2YjAxOC1kODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA47jHRmxoAi3kX9Q9FUHjclpSS458k8fmz+WhLNDTwH9Eufi1cvhrbDir
A4ubuRoyWWXC99NJVcdLtM46DDtiab9p5QwkKqQoQan4OluXSnVUcWSc8FleDStz
CBXlCnSgD1+Uj6b7jbMnllV8mPPwfry0udV8NgBdmjCW0bVTZrPhENdCEd9u+zpU
F5CJk/XTMJ0Z2lwOX1rhN6GlwbLEP8V2HTeBdgxyWVtWfI67ADYAEgSDzb+Hp8UT
zHXiI7wQUCFe2TsWNKS9lPewFKU0F3+WtEFUg3urGnBH7PaS/3FCWbhWMa1G0Vcm
6rb7mfjyJ+QKAbUa/EdKZK9vDyhDawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJtM
BeqlJXcowu8i1hY7wSzG9856MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMDNBNzQzNkY4Q0MxMUVGQTA5MzU0NkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsIIMA0GCSqGSIb3DQEB
CwUAA4IBAQBJlIdKkuJCDmKgHq6RcpR9YRSIl86fNofEMcBgJPU2tDsek2vsM+vp
EzP5kLJ1x9L4hZBpOXaBmRHvvjxk2G0fTYg3qKII03UZyg/UHcDpQ2D4E6Q/fYDD
7oWzJC5Y0JEtakBPzrhkuX9sLmpSmVF8NEhcAl/QC0KrHTso7vxD/2xrVzHmv7UT
mTC0Tb9sr1SP9ixuiIrWU0TEScHF0bq65Z0NN/XWgUwXz1nzhMTEcp6tpnmOeMhM
L1K1nktGnQ54qDpN/xwrLgxJmqu1ifp1BEu93PFnw87s1qvYgtlgZJVvJlwCsIgp
tM/D6jcqkNU8Ba6c+jyIxkfJfhzAwaCX
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:12 2025 by rpki-client