Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68F369E03E111F080E92C62762E951A.roa
File: F68F369E03E111F080E92C62762E951A.roa (raw, json)
Hash identifier: 0mTm1ZY0FmRtR8ioNVTTUgRnQoVqLJ4IlZ+TwHi9xF8=
Subject key identifier: 08:F7:48:BE:CC:29:AB:B5:FB:10:93:E9:E4:82:EA:A4:11:51:9B:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01748A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68F369E03E111F080E92C62762E951A.roa
Signing time: Tue 18 Mar 2025 10:15:49 +0000
ROA not before: Tue 18 Mar 2025 10:15:45 +0000
ROA not after: Tue 24 Jun 2025 10:15:45 +0000
asID: 16437
IP address blocks: 154.81.208.0/21 maxlen: 24
154.81.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95370 (0x1748a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 10:15:45 2025 GMT
Not After : Jun 24 10:15:45 2025 GMT
Subject: CN=67d947d5-7847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:dc:7f:3a:9a:2b:f5:76:a5:70:13:56:f2:
59:75:df:cd:07:71:fb:39:58:fa:95:37:48:d9:c2:
cf:71:be:14:be:56:4a:53:19:88:0a:16:aa:e9:59:
fb:6b:84:9c:84:c6:64:42:ad:84:68:0a:c3:b0:d2:
26:b1:c7:65:ce:05:a9:6d:26:b6:c5:72:92:c3:58:
4e:74:89:0b:10:4c:fc:69:a4:1a:e4:ec:d8:7d:40:
eb:e4:4e:20:72:6d:74:83:f2:d1:f9:81:35:aa:aa:
51:8f:08:7c:7e:ec:df:8d:4a:89:f1:5e:47:28:78:
a7:a8:80:e5:84:73:69:0e:36:c8:86:4d:b1:3e:0b:
25:2f:57:56:23:b3:41:78:db:88:ba:2c:ad:72:b1:
90:fa:94:29:3b:0d:6c:cd:f2:8e:78:5c:26:93:19:
aa:0f:55:29:4b:19:92:30:0d:fc:08:95:96:51:47:
24:ba:05:9c:d3:ad:b3:4e:bb:fc:e5:27:a6:18:1f:
71:50:87:4c:7f:50:5e:08:e0:96:72:0c:75:3f:0a:
25:dd:11:76:6f:cd:a7:7b:05:fd:cf:73:48:c6:59:
e3:d7:4f:78:44:7a:46:cc:5a:4d:0d:07:b4:82:8a:
80:4f:55:d6:ba:4a:8e:f9:8c:9f:49:d0:74:9c:c9:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F7:48:BE:CC:29:AB:B5:FB:10:93:E9:E4:82:EA:A4:11:51:9B:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68F369E03E111F080E92C62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.208.0-154.81.219.255
Signature Algorithm: sha256WithRSAEncryption
54:ee:92:c4:c4:7d:f6:cc:5a:95:12:b6:2d:09:bb:67:9d:e5:
9f:79:48:c5:0e:e0:06:5b:92:51:1e:59:5b:33:64:0a:aa:b6:
01:33:9f:5a:a4:98:8e:5f:ef:bb:ce:1e:39:d8:5c:b8:74:87:
37:9a:55:b4:95:b2:d3:38:ac:b2:b9:14:5c:42:fe:f1:31:a5:
75:d0:6e:44:d5:9a:42:01:bd:22:3a:db:f0:4b:78:35:f6:3f:
10:fd:db:57:90:2c:f2:5d:d5:af:e3:c0:eb:27:5c:97:a5:97:
83:1b:ae:91:1c:4c:7f:55:c2:1c:03:38:39:ab:e3:30:dd:74:
83:0a:29:82:3f:c8:fe:2c:5d:2e:75:ef:30:42:c6:40:29:ca:
41:e2:9f:b5:d6:98:ef:c4:8e:e0:65:fc:a2:12:73:93:2d:95:
34:9f:9e:dd:1e:ba:b2:05:47:8a:6f:c4:db:d0:f8:5a:54:f3:
d2:af:38:5a:d4:b1:ce:9e:41:6c:ec:28:78:79:58:57:5b:b6:
70:1a:d6:a6:7f:9a:84:36:6d:35:5e:49:26:c4:c5:85:83:75:
a0:b1:58:24:55:0b:17:5e:4d:76:53:19:85:7b:99:a6:ad:7f:
bd:dc:82:13:b7:d3:60:3c:ca:2b:de:e3:3a:de:eb:80:9f:2e:
b6:e6:07:b3
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAXSKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE4MTAxNTQ1WhcNMjUwNjI0MTAxNTQ1WjAYMRYw
FAYDVQQDEw02N2Q5NDdkNS03ODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvHHcfzqaK/V2pXATVvJZdd/NB3H7OVj6lTdI2cLPcb4UvlZKUxmIChaq
6Vn7a4SchMZkQq2EaArDsNImscdlzgWpbSa2xXKSw1hOdIkLEEz8aaQa5OzYfUDr
5E4gcm10g/LR+YE1qqpRjwh8fuzfjUqJ8V5HKHinqIDlhHNpDjbIhk2xPgslL1dW
I7NBeNuIuiytcrGQ+pQpOw1szfKOeFwmkxmqD1UpSxmSMA38CJWWUUckugWc062z
Trv85SemGB9xUIdMf1BeCOCWcgx1Pwol3RF2b82newX9z3NIxlnj1094RHpGzFpN
DQe0goqAT1XWukqO+YyfSdB0nMksyQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFAj3
SL7MKau1+xCT6eSC6qQRUZtnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNjhGMzY5RTAzRTExMUYwODBFOTJDNjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASaUdADBAKaUdgwDQYJ
KoZIhvcNAQELBQADggEBAFTuksTEffbMWpUSti0Ju2ed5Z95SMUO4AZbklEeWVsz
ZAqqtgEzn1qkmI5f77vOHjnYXLh0hzeaVbSVstM4rLK5FFxC/vExpXXQbkTVmkIB
vSI62/BLeDX2PxD921eQLPJd1a/jwOsnXJell4MbrpEcTH9VwhwDODmr4zDddIMK
KYI/yP4sXS517zBCxkApykHin7XWmO/EjuBl/KISc5MtlTSfnt0eurIFR4pvxNvQ
+FpU89KvOFrUsc6eQWzsKHh5WFdbtnAa1qZ/moQ2bTVeSSbExYWDdaCxWCRVCxde
TXZTGYV7maatf73cghO302A8yive4zre64CfLrbmB7M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:50 2025 by rpki-client