Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23AA8C4E2F4511F08D8105B3DAE4EC9C.roa
File: 23AA8C4E2F4511F08D8105B3DAE4EC9C.roa (raw, json)
Hash identifier: z+jdARtqT9D+njisYjqJrfH0UsASG3f4BnCiRBcTtXw=
Subject key identifier: C1:C7:97:51:2F:2A:DD:F8:39:29:4A:BF:D6:4A:10:56:E1:B1:37:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018035
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23AA8C4E2F4511F08D8105B3DAE4EC9C.roa
Signing time: Mon 12 May 2025 15:24:05 +0000
ROA not before: Mon 12 May 2025 15:24:00 +0000
ROA not after: Tue 09 Jun 2026 15:24:00 +0000
asID: 984
IP address blocks: 154.196.160.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98357 (0x18035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 15:24:00 2025 GMT
Not After : Jun 9 15:24:00 2026 GMT
Subject: CN=68221295-d982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:5e:86:c2:20:b4:18:6f:8a:c9:9b:b2:b9:
f3:18:8b:17:66:31:5d:cb:cd:9c:61:2b:8d:8a:73:
41:30:b0:37:4a:73:86:dd:3c:c1:f6:0b:fb:31:4b:
46:e0:db:8d:e5:f5:87:c9:b9:45:d8:08:ab:af:44:
ed:cc:ef:34:f3:03:ca:a1:d7:8f:a2:ab:2b:da:70:
be:36:4b:cf:8a:07:ee:30:0a:b5:4f:80:92:36:cc:
1d:50:4b:f5:77:dc:cc:31:c1:5e:46:aa:69:19:4d:
33:35:39:ff:23:3d:f8:0c:d9:0d:2d:00:21:06:e1:
a0:9c:51:5f:58:1a:cb:8a:f0:c3:77:24:13:f1:ee:
06:9f:2f:75:f7:b6:74:46:d1:be:e3:76:0d:e7:67:
b4:39:d3:08:92:1d:60:21:f0:87:b5:01:90:89:73:
22:7f:3f:1d:d0:e2:d6:22:3b:5b:6a:94:cd:60:6c:
dd:00:f8:8d:f2:f8:fe:33:cb:02:7f:c1:87:09:05:
1e:fc:38:fc:94:cd:1f:49:a6:9a:ea:9b:b2:ea:da:
fe:20:c5:95:67:10:a0:df:da:b0:19:88:57:3a:d1:
d9:3e:c1:89:32:c7:a6:6e:61:8d:91:7d:cb:d4:ec:
83:29:f0:fe:a4:04:fd:71:4f:48:29:49:de:cb:d2:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:97:51:2F:2A:DD:F8:39:29:4A:BF:D6:4A:10:56:E1:B1:37:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23AA8C4E2F4511F08D8105B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.160.0/24
154.200.48.0/24
154.200.158.0/24
154.200.162.0/24
154.200.190.0/24
Signature Algorithm: sha256WithRSAEncryption
06:91:8d:04:1a:bc:a0:25:9f:a5:59:f1:64:de:ea:34:66:94:
cc:72:d6:75:8f:7d:82:2e:84:6e:80:35:17:17:3b:f3:88:79:
df:f4:b5:a7:d8:57:1d:ed:a3:cc:ac:0e:da:fa:e1:4c:63:ce:
73:1d:ef:96:e6:1c:98:27:31:49:c2:58:21:d7:ca:0a:5c:b4:
61:06:2f:c4:88:79:be:83:fa:fb:ef:3a:16:44:d7:e7:98:94:
5f:ea:d2:c3:c2:0a:f0:f9:0d:02:e4:eb:46:7b:3b:8d:3f:cc:
1f:27:9b:77:ed:0b:11:73:4b:bf:9f:89:e9:98:2b:03:3c:bf:
45:bc:01:bb:e8:ed:1a:f8:2c:68:86:0e:ff:7e:c0:7c:6a:72:
06:e2:f5:84:e7:57:9b:b8:78:e6:65:a1:64:73:d3:ec:d3:2c:
32:70:d5:c8:8c:24:a8:a3:c9:04:d5:53:19:91:ed:c6:59:b0:
fd:2e:3d:7b:c0:8e:1b:c6:8b:9f:ca:7c:6c:5d:b9:a8:45:3d:
71:d0:37:fe:18:17:ed:b4:0d:58:3f:01:e6:a7:75:10:7a:cc:
b6:d3:c5:3e:d7:0b:08:7d:d9:b6:27:d2:1b:68:e7:91:ea:0f:
54:54:0a:04:88:a1:f9:f1:a2:b4:c2:63:29:5e:b1:2c:65:34:
98:1a:d3:12
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAYA1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTEyMTUyNDAwWhcNMjYwNjA5MTUyNDAwWjAYMRYw
FAYDVQQDEw02ODIyMTI5NS1kOTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyh5ehsIgtBhvismbsrnzGIsXZjFdy82cYSuNinNBMLA3SnOG3TzB9gv7
MUtG4NuN5fWHyblF2Airr0TtzO808wPKodePoqsr2nC+NkvPigfuMAq1T4CSNswd
UEv1d9zMMcFeRqppGU0zNTn/Iz34DNkNLQAhBuGgnFFfWBrLivDDdyQT8e4Gny91
97Z0RtG+43YN52e0OdMIkh1gIfCHtQGQiXMifz8d0OLWIjtbapTNYGzdAPiN8vj+
M8sCf8GHCQUe/Dj8lM0fSaaa6puy6tr+IMWVZxCg39qwGYhXOtHZPsGJMsembmGN
kX3L1OyDKfD+pAT9cU9IKUney9LArwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMHH
l1EvKt34OSlKv9ZKEFbhsTcgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yM0FBOEM0RTJGNDUxMUYwOEQ4MTA1QjNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAmsSgAwQAmsgwAwQAmsie
AwQAmsiiAwQAmsi+MA0GCSqGSIb3DQEBCwUAA4IBAQAGkY0EGrygJZ+lWfFk3uo0
ZpTMctZ1j32CLoRugDUXFzvziHnf9LWn2Fcd7aPMrA7a+uFMY85zHe+W5hyYJzFJ
wlgh18oKXLRhBi/EiHm+g/r77zoWRNfnmJRf6tLDwgrw+Q0C5OtGezuNP8wfJ5t3
7QsRc0u/n4npmCsDPL9FvAG76O0a+Cxohg7/fsB8anIG4vWE51ebuHjmZaFkc9Ps
0ywycNXIjCSoo8kE1VMZke3GWbD9Lj17wI4bxoufynxsXbmoRT1x0Df+GBfttA1Y
PwHmp3UQesy208U+1wsIfdm2J9IbaOeR6g9UVAoEiKH58aK0wmMpXrEsZTSYGtMS
-----END CERTIFICATE-----
Generated at Thu May 15 23:47:01 2025 by rpki-client