Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B6FF8EA241D11F0B211688DDAE4EC9C.roa
File: 0B6FF8EA241D11F0B211688DDAE4EC9C.roa (raw, json)
Hash identifier: I7+ud2Lr+besmCIyZQW3ONroTjznvCYeHaIT49rrT48=
Subject key identifier: 03:9A:11:8C:EB:B3:2A:75:5E:07:17:4D:16:19:8C:2E:06:6F:7F:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B6FF8EA241D11F0B211688DDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:39:22 +0000
ROA not before: Mon 28 Apr 2025 10:39:17 +0000
ROA not after: Mon 06 Mar 2028 10:39:17 +0000
asID: 17561
IP address blocks: 154.202.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97120 (0x17b60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:39:17 2025 GMT
Not After : Mar 6 10:39:17 2028 GMT
Subject: CN=680f5ada-cde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:30:98:0e:71:d1:1e:85:9b:b3:48:a4:bf:
b3:b6:83:52:8d:71:77:71:68:60:18:24:df:3a:2f:
ff:16:f2:a4:31:b1:99:3c:34:61:5a:70:f1:de:80:
a4:4a:c2:5c:b7:30:d0:36:c0:50:5b:c3:61:c6:3c:
98:cd:e7:71:1e:9b:8b:71:82:cc:f5:75:1f:0b:14:
4a:ef:50:08:a1:40:0d:d9:e3:39:26:0d:19:55:c1:
a6:89:3e:eb:2e:9c:9a:e0:f8:03:5e:5b:53:85:44:
89:fe:94:7f:1b:b7:83:be:f6:02:90:d5:65:1c:f2:
93:46:c8:ac:2d:96:60:48:68:1f:8d:1c:db:93:7e:
ee:e2:06:95:3c:3c:8c:c9:2f:f4:26:28:6a:10:96:
e2:d4:2a:e9:0b:2f:00:95:51:a7:e1:b8:56:df:60:
a6:bb:b4:7e:0d:98:1a:c6:17:17:44:48:eb:c1:77:
3d:10:cd:1c:d3:1a:6a:3e:ca:57:78:33:94:ff:da:
74:1b:f5:b6:85:47:15:69:b3:47:ed:1d:e4:e5:d0:
a7:a0:76:61:1f:fb:3b:a9:a6:93:05:72:fe:41:92:
64:1a:02:e9:28:5f:4a:77:8a:0a:39:6c:49:30:c9:
4d:2e:ea:a6:25:da:89:79:6b:7c:1e:a0:72:a2:17:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9A:11:8C:EB:B3:2A:75:5E:07:17:4D:16:19:8C:2E:06:6F:7F:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B6FF8EA241D11F0B211688DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:43:5d:3a:0f:cd:d8:03:a2:99:db:21:8f:67:84:0c:ba:f6:
44:c9:42:ce:c7:31:16:f6:0b:27:13:02:31:4a:74:5c:91:3a:
56:37:64:99:7f:c8:3d:1a:8a:11:3d:4a:ac:78:8e:fe:c5:f1:
35:33:8e:09:dc:c1:3e:53:74:05:5d:c3:42:f1:c7:d4:c0:d6:
2b:11:c1:48:17:7e:65:5e:de:78:7b:36:1d:90:71:f0:5c:d5:
82:d4:84:09:33:e6:cf:19:45:5a:99:b5:fc:8a:30:c8:64:e2:
7f:fe:1d:8e:81:0f:61:c1:59:86:d5:d5:de:74:19:74:eb:1d:
0a:7f:ff:19:54:f1:71:bb:db:7a:97:26:af:fc:57:11:58:8b:
8c:bf:ea:90:04:d3:fe:8b:43:27:a7:71:b3:fa:f8:64:35:2e:
f1:4b:ca:b5:83:dd:57:99:69:68:14:3d:28:08:ae:91:56:99:
14:75:fd:c8:15:7b:59:6c:ea:a8:4c:31:23:b2:b6:cd:76:3c:
94:66:cc:aa:ff:ae:70:1c:91:ae:b0:16:d3:4e:4e:08:92:04:
82:ab:70:bd:0d:ba:53:04:5e:dc:0b:ff:e3:a3:e3:52:58:ae:
fe:7f:ce:a2:91:de:12:3c:cb:06:6c:99:29:3c:d7:45:40:fc:
71:2d:06:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXtgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTAzOTE3WhcNMjgwMzA2MTAzOTE3WjAYMRYw
FAYDVQQDEw02ODBmNWFkYS1jZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvTowmA5x0R6Fm7NIpL+ztoNSjXF3cWhgGCTfOi//FvKkMbGZPDRhWnDx
3oCkSsJctzDQNsBQW8NhxjyYzedxHpuLcYLM9XUfCxRK71AIoUAN2eM5Jg0ZVcGm
iT7rLpya4PgDXltThUSJ/pR/G7eDvvYCkNVlHPKTRsisLZZgSGgfjRzbk37u4gaV
PDyMyS/0JihqEJbi1CrpCy8AlVGn4bhW32Cmu7R+DZgaxhcXREjrwXc9EM0c0xpq
PspXeDOU/9p0G/W2hUcVabNH7R3k5dCnoHZhH/s7qaaTBXL+QZJkGgLpKF9Kd4oK
OWxJMMlNLuqmJdqJeWt8HqByohfNAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAOa
EYzrsyp1XgcXTRYZjC4Gb3+cMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQjZGRjhFQTI0MUQxMUYwQjIxMTY4OEREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoaMA0GCSqGSIb3DQEB
CwUAA4IBAQCjQ106D83YA6KZ2yGPZ4QMuvZEyULOxzEW9gsnEwIxSnRckTpWN2SZ
f8g9GooRPUqseI7+xfE1M44J3ME+U3QFXcNC8cfUwNYrEcFIF35lXt54ezYdkHHw
XNWC1IQJM+bPGUVambX8ijDIZOJ//h2OgQ9hwVmG1dXedBl06x0Kf/8ZVPFxu9t6
lyav/FcRWIuMv+qQBNP+i0Mnp3Gz+vhkNS7xS8q1g91XmWloFD0oCK6RVpkUdf3I
FXtZbOqoTDEjsrbNdjyUZsyq/65wHJGusBbTTk4IkgSCq3C9DbpTBF7cC//jo+NS
WK7+f86ikd4SPMsGbJkpPNdFQPxxLQa3
-----END CERTIFICATE-----
Generated at Sun May 11 17:05:43 2025 by rpki-client