Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18FBBAB4318611F0B2E8C2CBDAE4EC9C.roa
File: 18FBBAB4318611F0B2E8C2CBDAE4EC9C.roa (raw, json)
Hash identifier: dX56lCNjj1WPkdDaSFandBSE+5Bk9AGy2FIoCB/Kn0A=
Subject key identifier: 62:DA:AC:85:6C:01:AA:82:02:C4:E5:27:21:F1:DF:98:96:96:7C:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18FBBAB4318611F0B2E8C2CBDAE4EC9C.roa
Signing time: Thu 15 May 2025 12:14:06 +0000
ROA not before: Thu 15 May 2025 12:14:02 +0000
ROA not after: Sat 05 Jul 2025 12:14:02 +0000
asID: 399195
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98530 (0x180e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 12:14:02 2025 GMT
Not After : Jul 5 12:14:02 2025 GMT
Subject: CN=6825da8e-7e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:c4:36:1d:9c:ee:fd:2d:38:b2:b4:0b:ef:
e8:08:da:8c:86:3c:1d:03:28:e9:f0:bf:ff:da:be:
05:be:50:49:b7:e5:f3:a5:97:94:ce:f4:01:b5:72:
da:b8:f6:d8:58:57:e9:2b:41:f9:4b:52:ee:d5:25:
bb:9b:9f:32:e2:51:16:4e:ef:30:cb:1f:81:35:eb:
3e:e1:7e:a3:de:cc:5d:46:97:ac:a8:a5:99:c6:07:
fe:b6:6c:0c:b6:6c:a2:81:6a:88:f7:16:b7:5d:10:
9f:39:f9:0c:23:c5:b6:3a:0f:75:c7:78:cf:c7:d4:
7d:a4:d5:b9:73:3a:1c:0b:b0:6a:ef:7f:f4:25:c7:
c6:73:71:67:1f:df:b8:f6:af:f6:f8:f9:69:8e:a5:
2a:3a:d8:d0:11:82:5a:49:d7:52:e3:17:ee:8a:89:
42:35:a9:cd:84:93:85:6c:0a:66:ba:c3:47:8a:dc:
41:c4:ec:35:43:88:87:8b:35:6b:e2:76:4e:a5:ae:
9b:15:da:a6:21:cf:04:18:25:91:7c:b9:f0:1d:3e:
77:d8:cb:27:85:0b:9a:57:5e:8c:47:32:61:8b:e8:
63:98:11:ff:ce:0f:47:6d:dc:88:29:1e:e0:d7:a7:
b5:12:d4:aa:94:b8:d3:03:2b:be:61:28:93:ea:7a:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DA:AC:85:6C:01:AA:82:02:C4:E5:27:21:F1:DF:98:96:96:7C:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18FBBAB4318611F0B2E8C2CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bc:10:0b:4e:05:bf:af:b7:d7:73:e4:d8:1a:3c:e1:f7:c0:ba:
ff:9c:0c:9a:e3:5d:4b:ab:23:24:98:22:9e:04:f2:85:4c:90:
9e:c0:69:9a:a5:cc:21:f1:a2:7c:d4:b5:5d:be:d0:9a:5f:80:
8e:34:48:4d:be:67:7d:7e:b2:92:aa:47:5b:98:7c:a5:c5:00:
fb:0c:d6:60:5b:ed:4a:78:e5:e4:f1:1d:4d:4b:26:34:8d:a7:
d1:e0:a8:53:d6:dc:4b:d9:01:8e:3d:1e:72:de:0e:70:b0:4e:
fb:74:b0:af:06:23:b9:31:bb:85:9c:5a:04:52:99:74:8d:c7:
be:63:db:41:16:54:bf:f5:5c:13:5e:06:d6:5c:6f:c7:0a:93:
42:7b:17:33:3d:08:4e:40:44:d1:ec:e7:28:3c:1e:ac:a1:cf:
85:40:6c:42:1c:3e:5d:64:a2:98:b3:c5:1f:0a:55:65:83:8b:
f6:27:d3:36:d0:ed:ff:fe:f7:51:cf:aa:98:1c:9a:5f:38:a2:
6f:5a:e0:d5:de:4a:07:32:b8:53:28:a3:07:89:f3:95:a6:03:
8f:61:6e:6d:32:d1:d1:1f:d4:46:e9:df:8f:fc:66:c0:76:44:
c8:83:a9:fa:f0:f2:0a:2f:41:ac:fe:2b:ad:ff:c7:80:43:f5:
3e:17:71:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYDiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE1MTIxNDAyWhcNMjUwNzA1MTIxNDAyWjAYMRYw
FAYDVQQDEw02ODI1ZGE4ZS03ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuRDENh2c7v0tOLK0C+/oCNqMhjwdAyjp8L//2r4FvlBJt+XzpZeUzvQB
tXLauPbYWFfpK0H5S1Lu1SW7m58y4lEWTu8wyx+BNes+4X6j3sxdRpesqKWZxgf+
tmwMtmyigWqI9xa3XRCfOfkMI8W2Og91x3jPx9R9pNW5czocC7Bq73/0JcfGc3Fn
H9+49q/2+PlpjqUqOtjQEYJaSddS4xfuiolCNanNhJOFbApmusNHitxBxOw1Q4iH
izVr4nZOpa6bFdqmIc8EGCWRfLnwHT532MsnhQuaV16MRzJhi+hjmBH/zg9HbdyI
KR7g16e1EtSqlLjTAyu+YSiT6nrS+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGLa
rIVsAaqCAsTlJyHx35iWlnzZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOEZCQkFCNDMxODYxMUYwQjJFOEMyQ0JEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQC8EAtOBb+vt9dz5NgaPOH3wLr/nAya411LqyMkmCKeBPKFTJCewGma
pcwh8aJ81LVdvtCaX4CONEhNvmd9frKSqkdbmHylxQD7DNZgW+1KeOXk8R1NSyY0
jafR4KhT1txL2QGOPR5y3g5wsE77dLCvBiO5MbuFnFoEUpl0jce+Y9tBFlS/9VwT
XgbWXG/HCpNCexczPQhOQETR7OcoPB6soc+FQGxCHD5dZKKYs8UfClVlg4v2J9M2
0O3//vdRz6qYHJpfOKJvWuDV3koHMrhTKKMHifOVpgOPYW5tMtHRH9RG6d+P/GbA
dkTIg6n68PIKL0Gs/iut/8eAQ/U+F3GB
-----END CERTIFICATE-----
Generated at Thu May 15 23:47:08 2025 by rpki-client