Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BC49EEFF1D11EF90BC9945762E951A.roa
File: F7BC49EEFF1D11EF90BC9945762E951A.roa (raw, json)
Hash identifier: E+bNl9S5C0LcSt8n+IDqWrAolzvXncMc7lka1UhGZtc=
Subject key identifier: B5:A2:C4:C6:60:79:42:5F:72:95:B8:8C:92:22:D9:6A:6A:5C:EA:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BC49EEFF1D11EF90BC9945762E951A.roa
Signing time: Wed 12 Mar 2025 08:42:45 +0000
ROA not before: Wed 12 Mar 2025 08:42:41 +0000
ROA not after: Wed 16 Apr 2025 08:42:41 +0000
asID: 398823
IP address blocks: 154.212.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 14:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95159 (0x173b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 08:42:41 2025 GMT
Not After : Apr 16 08:42:41 2025 GMT
Subject: CN=67d14905-2fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:f1:62:49:89:5e:b4:35:98:fb:47:6a:75:
a0:0b:d8:fd:98:61:81:9d:19:05:4f:32:0b:5e:9e:
61:f1:36:22:ac:4b:ba:77:e7:0c:5f:1f:6c:c7:11:
0b:a1:bd:a9:16:ad:3e:b4:11:d4:72:59:c6:fc:84:
60:90:a4:bf:be:bc:a5:a4:0c:db:d8:95:bf:ed:21:
2a:3e:69:71:88:f5:fa:c6:f0:98:89:dd:29:39:49:
3a:7c:b4:a9:9c:3b:3a:27:b3:07:e6:22:05:2e:f3:
a1:97:74:e9:74:db:c1:fd:a7:58:8c:49:ac:c0:db:
ee:13:fc:e0:f6:1c:f9:f9:51:5f:4a:14:cb:e2:46:
3d:c0:70:f1:d0:bb:c9:7d:ca:6f:8a:02:9c:d3:86:
31:d8:78:ba:7f:32:3b:17:6d:c1:06:08:31:9f:c2:
28:bf:56:ea:dc:33:52:fe:c7:d2:eb:90:0c:93:07:
22:9f:8c:77:da:f9:8e:81:e6:be:a5:f5:fa:bf:cb:
5e:fc:4a:31:15:49:b2:7d:cf:d9:34:f4:e9:35:9d:
bb:a3:d4:f3:d8:77:dd:43:ea:71:8b:04:f6:bc:4f:
22:b6:8c:d1:34:c8:52:6b:d1:45:d4:20:e0:b3:7c:
d3:68:19:08:50:27:1c:53:c0:25:ff:c3:42:e4:65:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:C4:C6:60:79:42:5F:72:95:B8:8C:92:22:D9:6A:6A:5C:EA:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BC49EEFF1D11EF90BC9945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:24:86:dc:7f:ce:78:de:6e:dd:fa:14:26:8f:c8:9d:5c:ac:
a5:a7:72:43:66:6b:60:84:27:9a:0a:16:88:6a:a0:3c:76:3c:
1b:05:05:1d:c7:b0:0b:d3:32:2a:bd:a0:20:a7:18:5a:44:ae:
d4:00:d1:11:df:61:0d:17:db:12:91:21:87:bc:42:c5:ad:25:
95:43:eb:d1:5f:3e:05:1f:7c:6f:fb:95:61:39:1c:3a:90:6c:
d8:01:a4:1c:e3:ad:e8:02:fd:51:f1:45:39:de:42:b6:f1:52:
3b:9c:b5:00:48:d2:c0:60:3f:74:00:d0:4a:d2:dd:53:60:b9:
13:90:13:7d:c7:6f:6c:d8:b3:6e:a5:3e:df:82:24:9a:ad:e4:
e3:27:c7:d3:5e:26:68:8c:b4:56:be:ce:cc:96:85:c7:d4:82:
ca:91:f1:c7:65:70:9e:7c:42:f1:fe:41:27:b0:55:4d:a3:56:
76:6c:26:03:9e:39:ae:c7:d6:aa:fb:3b:24:9c:5e:09:e3:91:
72:8c:6a:a0:0c:f0:8c:64:1f:0e:ba:fd:6a:4d:ba:b9:18:02:
b1:11:5c:d4:bb:15:56:33:a7:4b:cc:b7:b0:2e:c1:0a:62:61:
d3:37:e7:34:db:39:de:0f:90:ca:22:29:86:ef:80:63:28:82:
d1:ef:cb:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXO3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEyMDg0MjQxWhcNMjUwNDE2MDg0MjQxWjAYMRYw
FAYDVQQDEw02N2QxNDkwNS0yZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2gHxYkmJXrQ1mPtHanWgC9j9mGGBnRkFTzILXp5h8TYirEu6d+cMXx9s
xxELob2pFq0+tBHUclnG/IRgkKS/vrylpAzb2JW/7SEqPmlxiPX6xvCYid0pOUk6
fLSpnDs6J7MH5iIFLvOhl3TpdNvB/adYjEmswNvuE/zg9hz5+VFfShTL4kY9wHDx
0LvJfcpvigKc04Yx2Hi6fzI7F23BBggxn8Iov1bq3DNS/sfS65AMkwcin4x32vmO
gea+pfX6v8te/EoxFUmyfc/ZNPTpNZ27o9Tz2HfdQ+pxiwT2vE8itozRNMhSa9FF
1CDgs3zTaBkIUCccU8Al/8NC5GVrPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLWi
xMZgeUJfcpW4jJIi2WpqXOo1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GN0JDNDlFRUZGMUQxMUVGOTBCQzk5NDU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtQgMA0GCSqGSIb3DQEB
CwUAA4IBAQAMJIbcf8543m7d+hQmj8idXKylp3JDZmtghCeaChaIaqA8djwbBQUd
x7AL0zIqvaAgpxhaRK7UANER32ENF9sSkSGHvELFrSWVQ+vRXz4FH3xv+5VhORw6
kGzYAaQc463oAv1R8UU53kK28VI7nLUASNLAYD90ANBK0t1TYLkTkBN9x29s2LNu
pT7fgiSareTjJ8fTXiZojLRWvs7MloXH1ILKkfHHZXCefELx/kEnsFVNo1Z2bCYD
njmux9aq+zsknF4J45FyjGqgDPCMZB8Ouv1qTbq5GAKxEVzUuxVWM6dLzLewLsEK
YmHTN+c02zneD5DKIimG74BjKILR78vg
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:45 2025 by rpki-client