Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF507B0243311F093C78EA1DAE4EC9C.roa
File: 4FF507B0243311F093C78EA1DAE4EC9C.roa (raw, json)
Hash identifier: 8Pb7JqlkxkWHYDSDtl/D6g+rLPHjaYokCLIyIeTgPbw=
Subject key identifier: B0:23:69:3D:3D:63:1A:40:92:AE:33:86:E3:BA:74:A7:BB:53:B7:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF507B0243311F093C78EA1DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:18:46 +0000
ROA not before: Mon 28 Apr 2025 13:18:40 +0000
ROA not after: Thu 23 Mar 2028 13:18:40 +0000
asID: 17561
IP address blocks: 154.205.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97247 (0x17bdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:18:40 2025 GMT
Not After : Mar 23 13:18:40 2028 GMT
Subject: CN=680f8036-7b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:fe:1a:26:c7:6b:d2:bd:6c:09:68:26:dc:
5f:80:f5:4d:a4:78:0a:64:df:c2:26:28:d8:f2:6c:
f8:19:1f:87:ff:1b:cb:8f:81:62:d1:e3:b5:b9:c7:
c2:17:5c:3d:7a:56:ad:b1:5d:77:7e:2d:4d:0d:ad:
f3:23:76:11:02:fe:63:2d:f8:47:74:92:21:cb:aa:
5e:57:5f:f3:f9:99:39:0c:24:75:57:78:96:48:cf:
8e:c8:b8:d4:6e:f8:2f:98:80:af:05:df:9e:5e:45:
6a:f7:08:91:e1:1a:68:eb:41:2b:ad:53:cc:55:1a:
20:b7:b4:10:1f:dd:a5:32:83:6f:fb:15:cb:ec:02:
71:5e:df:35:ae:df:1c:0a:ee:44:b8:08:de:9c:df:
38:42:44:65:f5:58:39:86:6d:26:8f:a9:f0:42:ef:
59:2f:7a:ac:cb:1e:e1:c3:4f:c0:70:83:0c:bb:d2:
8f:f5:3f:a0:93:cc:06:20:6f:f4:13:d3:35:ac:a2:
af:c6:c6:46:23:15:67:4c:8e:14:fb:55:59:69:96:
b3:1d:ba:ee:92:68:af:0b:0f:c2:bf:0b:e0:e3:78:
b0:05:19:21:c1:c9:69:13:17:c2:27:5d:2b:ee:c1:
6e:65:39:b0:e1:1c:4f:4e:9d:30:1d:91:c8:09:03:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:23:69:3D:3D:63:1A:40:92:AE:33:86:E3:BA:74:A7:BB:53:B7:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF507B0243311F093C78EA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.165.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a4:a5:f3:f8:f5:65:19:87:92:90:e0:a8:9f:23:0d:70:1b:
a4:48:61:8e:ae:09:0f:71:c5:92:d0:55:51:f9:c4:f0:3b:06:
3f:5f:ec:47:45:13:3a:4a:32:42:10:c2:2a:a1:25:16:c7:56:
c9:55:00:02:11:49:53:ad:8d:3b:cb:7b:0d:2e:dc:a4:91:5d:
9f:86:92:d0:e0:4c:fa:88:17:f8:dd:05:48:1d:cb:62:9b:d6:
e0:99:3d:e4:62:09:81:d8:37:1c:80:ae:2d:65:76:67:72:64:
f2:a5:99:1d:bb:0e:46:14:e3:47:0a:ba:b2:78:d0:2a:b4:74:
ae:57:23:21:70:d8:a2:58:e4:27:7f:0e:84:d9:23:b2:d5:75:
24:af:43:a3:f0:18:42:59:a1:ad:ff:da:a9:93:09:08:92:b6:
f7:d4:0d:30:0f:77:74:f9:09:c0:9e:b0:13:ab:79:ae:37:b4:
6c:8b:d0:f3:fa:ed:22:92:58:a2:c7:2a:23:2a:07:48:af:34:
39:54:21:59:e1:3e:44:c8:4a:2a:d5:e9:5e:3c:af:29:65:66:
bf:f5:d4:15:90:ee:84:19:24:a6:8c:06:23:a3:03:bf:de:9b:
a8:84:de:fd:b3:1b:cd:95:39:f3:5c:62:94:38:b1:15:c0:99:
83:c8:2a:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXvfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTMxODQwWhcNMjgwMzIzMTMxODQwWjAYMRYw
FAYDVQQDEw02ODBmODAzNi03YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoon+GibHa9K9bAloJtxfgPVNpHgKZN/CJijY8mz4GR+H/xvLj4Fi0eO1
ucfCF1w9elatsV13fi1NDa3zI3YRAv5jLfhHdJIhy6peV1/z+Zk5DCR1V3iWSM+O
yLjUbvgvmICvBd+eXkVq9wiR4Rpo60ErrVPMVRogt7QQH92lMoNv+xXL7AJxXt81
rt8cCu5EuAjenN84QkRl9Vg5hm0mj6nwQu9ZL3qsyx7hw0/AcIMMu9KP9T+gk8wG
IG/0E9M1rKKvxsZGIxVnTI4U+1VZaZazHbrukmivCw/Cvwvg43iwBRkhwclpExfC
J10r7sFuZTmw4RxPTp0wHZHICQMWSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLAj
aT09YxpAkq4zhuO6dKe7U7dbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RkY1MDdCMDI0MzMxMUYwOTNDNzhFQTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2lMA0GCSqGSIb3DQEB
CwUAA4IBAQAZpKXz+PVlGYeSkOConyMNcBukSGGOrgkPccWS0FVR+cTwOwY/X+xH
RRM6SjJCEMIqoSUWx1bJVQACEUlTrY07y3sNLtykkV2fhpLQ4Ez6iBf43QVIHcti
m9bgmT3kYgmB2DccgK4tZXZncmTypZkduw5GFONHCrqyeNAqtHSuVyMhcNiiWOQn
fw6E2SOy1XUkr0Oj8BhCWaGt/9qpkwkIkrb31A0wD3d0+QnAnrATq3muN7Rsi9Dz
+u0ikliixyojKgdIrzQ5VCFZ4T5EyEoq1elePK8pZWa/9dQVkO6EGSSmjAYjowO/
3puohN79sxvNlTnzXGKUOLEVwJmDyCrs
-----END CERTIFICATE-----
Generated at Wed May 7 21:48:50 2025 by rpki-client