Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7FB02E315E11F0982E8BC5DAE4EC9C.roa
File: 2F7FB02E315E11F0982E8BC5DAE4EC9C.roa (raw, json)
Hash identifier: kuajo1IePEFFoXcnTWmCNkaGbxA9YvdzPt+d6yL7HSg=
Subject key identifier: E6:47:15:32:03:9F:F3:5F:57:34:26:DD:8A:F2:23:9D:E7:99:CE:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7FB02E315E11F0982E8BC5DAE4EC9C.roa
Signing time: Thu 15 May 2025 07:28:25 +0000
ROA not before: Thu 15 May 2025 07:28:19 +0000
ROA not after: Sun 25 May 2025 07:28:19 +0000
asID: 132839
IP address blocks: 154.195.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98476 (0x180ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 07:28:19 2025 GMT
Not After : May 25 07:28:19 2025 GMT
Subject: CN=68259798-13cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:74:f6:c8:3f:f2:f1:42:01:e0:0e:03:4c:
db:ce:e5:5b:29:a4:f6:51:3e:98:b5:5a:f7:fa:30:
62:05:dd:28:db:f5:c9:e2:7b:20:d8:1b:e3:62:2c:
d2:d5:08:13:15:01:10:63:49:f1:8d:29:b3:14:1c:
ec:38:0b:74:39:f4:8b:fe:7e:4b:6b:6b:fc:97:b4:
b0:0f:6c:c6:27:64:04:42:7d:7e:8d:35:14:59:fa:
b2:95:37:35:2c:75:c8:15:50:e4:d5:38:7c:ba:f0:
d5:ec:07:c8:a7:fc:db:9d:db:81:2e:ee:a8:3f:3e:
00:d7:1a:70:04:79:d0:be:22:13:55:07:c9:77:a9:
bf:76:87:e3:08:08:46:7e:a7:db:72:d1:17:d0:16:
0a:81:d0:41:31:c0:86:7e:30:5e:f2:72:ce:54:7d:
79:9a:8e:64:6d:83:95:16:0f:a1:b7:ae:c1:ef:e6:
68:8a:1c:2d:4c:5a:a7:7c:10:32:73:3a:da:0f:ea:
23:94:83:1c:48:26:0b:dd:28:41:d7:80:0c:36:3d:
54:16:78:26:1a:25:b4:70:ee:87:2c:88:67:e0:06:
32:a0:7a:d2:96:40:e0:81:44:34:ee:60:b0:d8:e5:
4d:88:72:9d:51:7d:3b:21:22:04:64:e4:2a:a4:64:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:47:15:32:03:9F:F3:5F:57:34:26:DD:8A:F2:23:9D:E7:99:CE:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F7FB02E315E11F0982E8BC5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:e9:bd:b5:e5:6a:19:c6:8b:9e:82:ed:c6:89:58:51:d7:e1:
d8:55:fc:cc:c3:b1:92:08:a6:ed:09:f6:fe:83:f8:d8:e9:58:
b6:32:b9:81:a5:9d:c1:13:ec:64:38:cd:ed:d9:69:61:71:f4:
94:92:0c:4b:5a:d5:c9:fd:85:d8:93:07:d8:01:d6:37:46:ce:
ab:86:bc:b6:19:66:51:eb:47:37:5f:36:fe:57:60:f9:3e:1b:
a7:07:0a:55:c3:26:7a:ef:1f:e7:ce:dd:60:c2:06:67:c9:86:
a9:5a:25:ee:ee:9b:37:71:2c:2e:e3:80:0c:dd:e8:37:d9:69:
08:d8:a0:35:28:15:a7:f1:08:2c:a9:4e:00:ae:a4:6b:fa:83:
47:1e:70:0f:55:7e:6f:8a:3b:ba:d5:bd:d7:2e:1b:a6:1a:44:
09:e3:7b:4a:3d:8f:d3:ea:be:3e:78:72:29:6e:38:4b:cd:cb:
b2:fc:ef:c4:18:69:f5:75:2b:d0:21:f8:7d:57:5b:50:20:60:
a5:ee:2a:82:e1:b8:be:df:fe:e3:6e:26:75:da:c5:c5:5a:f6:
e4:4e:aa:c9:0b:ab:00:f7:84:cd:8e:f7:25:ad:11:4f:d0:79:
61:03:f7:e8:b3:8b:59:59:ad:9d:40:ca:43:b9:39:fb:71:db:
df:44:0a:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYCsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE1MDcyODE5WhcNMjUwNTI1MDcyODE5WjAYMRYw
FAYDVQQDEw02ODI1OTc5OC0xM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxbl09sg/8vFCAeAOA0zbzuVbKaT2UT6YtVr3+jBiBd0o2/XJ4nsg2Bvj
YizS1QgTFQEQY0nxjSmzFBzsOAt0OfSL/n5La2v8l7SwD2zGJ2QEQn1+jTUUWfqy
lTc1LHXIFVDk1Th8uvDV7AfIp/zbnduBLu6oPz4A1xpwBHnQviITVQfJd6m/dofj
CAhGfqfbctEX0BYKgdBBMcCGfjBe8nLOVH15mo5kbYOVFg+ht67B7+ZoihwtTFqn
fBAyczraD+ojlIMcSCYL3ShB14AMNj1UFngmGiW0cO6HLIhn4AYyoHrSlkDggUQ0
7mCw2OVNiHKdUX07ISIEZOQqpGQxAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOZH
FTIDn/NfVzQm3YryI53nmc6CMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRjdGQjAyRTMxNUUxMUYwOTgyRThCQzVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsPgMA0GCSqGSIb3DQEB
CwUAA4IBAQA/6b215WoZxouegu3GiVhR1+HYVfzMw7GSCKbtCfb+g/jY6Vi2MrmB
pZ3BE+xkOM3t2WlhcfSUkgxLWtXJ/YXYkwfYAdY3Rs6rhry2GWZR60c3Xzb+V2D5
PhunBwpVwyZ67x/nzt1gwgZnyYapWiXu7ps3cSwu44AM3eg32WkI2KA1KBWn8Qgs
qU4ArqRr+oNHHnAPVX5viju61b3XLhumGkQJ43tKPY/T6r4+eHIpbjhLzcuy/O/E
GGn1dSvQIfh9V1tQIGCl7iqC4bi+3/7jbiZ12sXFWvbkTqrJC6sA94TNjvclrRFP
0HlhA/fos4tZWa2dQMpDuTn7cdvfRAoY
-----END CERTIFICATE-----
Generated at Thu May 15 23:47:58 2025 by rpki-client