Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F65E87C20CC611F0BEB1A458762E951A.roa
File: F65E87C20CC611F0BEB1A458762E951A.roa (raw, json)
Hash identifier: 8aep4aGshKlMtTlkAeQo7rhm71mGih3yB7U2Gxzl8MU=
Subject key identifier: D5:02:42:83:F5:C3:6E:01:CA:75:88:2E:85:7A:ED:A9:29:CD:45:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F65E87C20CC611F0BEB1A458762E951A.roa
Signing time: Sat 29 Mar 2025 17:55:12 +0000
ROA not before: Sat 29 Mar 2025 17:55:08 +0000
ROA not after: Mon 07 Apr 2025 17:55:08 +0000
asID: 5065
IP address blocks: 154.83.203.0/24 maxlen: 24
154.86.8.0/24 maxlen: 24
154.86.9.0/24 maxlen: 24
154.86.10.0/24 maxlen: 24
154.86.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95956 (0x176d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 29 17:55:08 2025 GMT
Not After : Apr 7 17:55:08 2025 GMT
Subject: CN=67e83400-432e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:c4:2b:f0:2f:63:52:f3:de:18:00:81:86:
63:42:2c:b2:7a:36:4a:b0:c4:2e:09:09:35:37:12:
e6:61:52:8d:4a:af:e4:34:38:cf:43:99:74:a0:4a:
6d:e2:8f:a9:15:d8:27:db:d6:a0:69:43:6d:e4:fb:
a8:b0:6c:dd:70:63:08:87:6d:51:f9:42:19:ee:8e:
df:a2:2d:f9:16:96:e4:b5:53:4e:71:fe:7d:73:af:
45:ca:8d:e4:ba:65:42:c4:16:b2:ce:00:0f:c6:1c:
c5:e7:0d:fb:fc:2f:9b:aa:4b:d0:7a:33:a8:82:8f:
33:9b:39:cb:36:3f:70:fd:94:ef:a6:8e:62:c5:b8:
71:07:ef:18:51:0e:90:63:1d:98:4f:39:e0:88:26:
d5:67:71:56:bc:3c:51:e7:b3:bb:12:db:df:7e:09:
27:44:aa:75:aa:6f:13:b6:85:f1:b8:64:0e:21:dd:
4a:85:c9:b8:a5:fc:42:3f:22:71:f5:26:f5:f8:37:
b1:f3:10:4c:5c:e9:9f:f2:8e:6b:d3:42:53:6e:07:
d2:28:ca:5b:7a:48:4f:f3:8e:ec:2f:b3:db:01:2b:
e2:5e:f6:b4:72:d2:1a:41:4e:77:eb:36:dc:ff:7f:
32:b7:bf:1e:c2:86:b1:12:80:85:9e:f6:f9:a2:56:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:02:42:83:F5:C3:6E:01:CA:75:88:2E:85:7A:ED:A9:29:CD:45:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F65E87C20CC611F0BEB1A458762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.203.0/24
154.86.8.0/22
Signature Algorithm: sha256WithRSAEncryption
89:67:65:e9:06:76:32:2d:21:2b:4a:b3:e8:ba:55:da:12:94:
8c:21:bb:61:71:4c:70:99:95:b4:74:c3:a8:32:d7:a5:f1:45:
88:6d:11:38:bd:28:7c:d2:ad:f6:f9:46:e9:87:69:c6:db:b6:
89:9f:5e:84:35:39:3a:7a:b5:67:84:d0:b1:0c:0b:27:ae:18:
38:6f:c3:40:8f:e2:91:84:f5:63:d4:9c:92:f3:ec:ca:ae:7d:
c8:49:f0:3b:71:95:45:55:48:cf:e4:f6:38:53:28:be:8b:40:
68:e7:ea:7b:56:5d:78:f9:27:8a:55:e1:3b:17:15:80:d8:9a:
1c:55:93:84:88:c2:b1:cf:34:e1:d3:e1:6f:cc:29:f0:cf:bb:
28:9e:30:55:20:56:45:ce:f0:b6:c0:f3:2d:5a:a8:12:17:fa:
db:c7:0b:89:e4:95:7b:91:91:18:2b:3b:71:53:18:d0:5e:97:
a1:2b:95:3b:05:2c:87:85:df:e8:3d:07:76:16:20:24:27:dd:
5a:ca:9d:7f:00:20:8b:12:e6:a8:ce:4b:d1:20:92:27:76:30:
ee:53:63:ea:f3:a8:b9:86:ea:76:54:cf:2e:6c:e9:bc:10:94:
38:8a:59:70:80:7e:f2:cb:64:b7:af:39:eb:ae:f9:42:cd:b7:
ad:98:ce:2d
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXbUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI5MTc1NTA4WhcNMjUwNDA3MTc1NTA4WjAYMRYw
FAYDVQQDEw02N2U4MzQwMC00MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtSvEK/AvY1Lz3hgAgYZjQiyyejZKsMQuCQk1NxLmYVKNSq/kNDjPQ5l0
oEpt4o+pFdgn29agaUNt5PuosGzdcGMIh21R+UIZ7o7foi35FpbktVNOcf59c69F
yo3kumVCxBayzgAPxhzF5w37/C+bqkvQejOogo8zmznLNj9w/ZTvpo5ixbhxB+8Y
UQ6QYx2YTzngiCbVZ3FWvDxR57O7EtvffgknRKp1qm8TtoXxuGQOId1Khcm4pfxC
PyJx9Sb1+Dex8xBMXOmf8o5r00JTbgfSKMpbekhP847sL7PbASviXva0ctIaQU53
6zbc/38yt78ewoaxEoCFnvb5olZKDQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNUC
QoP1w24BynWILoV67akpzUXIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNjVFODdDMjBDQzYxMUYwQkVCMUE0NTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlPLAwQCmlYIMA0GCSqG
SIb3DQEBCwUAA4IBAQCJZ2XpBnYyLSErSrPoulXaEpSMIbthcUxwmZW0dMOoMtel
8UWIbRE4vSh80q32+Ubph2nG27aJn16ENTk6erVnhNCxDAsnrhg4b8NAj+KRhPVj
1JyS8+zKrn3ISfA7cZVFVUjP5PY4Uyi+i0Bo5+p7Vl14+SeKVeE7FxWA2JocVZOE
iMKxzzTh0+FvzCnwz7sonjBVIFZFzvC2wPMtWqgSF/rbxwuJ5JV7kZEYKztxUxjQ
XpehK5U7BSyHhd/oPQd2FiAkJ91ayp1/ACCLEuaozkvRIJIndjDuU2Pq86i5hup2
VM8ubOm8EJQ4illwgH7yy2S3rznrrvlCzbetmM4t
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:59 2025 by rpki-client