Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/597588B42FF511F0938437D2DAE4EC9C.roa
File: 597588B42FF511F0938437D2DAE4EC9C.roa (raw, json)
Hash identifier: 7oqmeoGT1kea3iTnBrpHkwnVZVdacVxHoIErEd0mSpA=
Subject key identifier: 11:14:61:13:87:53:26:CE:1E:63:36:E5:A1:23:C9:3E:EC:0C:9E:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018066
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/597588B42FF511F0938437D2DAE4EC9C.roa
Signing time: Tue 13 May 2025 12:25:27 +0000
ROA not before: Tue 13 May 2025 12:25:22 +0000
ROA not after: Wed 18 Jun 2025 12:25:22 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98406 (0x18066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 12:25:22 2025 GMT
Not After : Jun 18 12:25:22 2025 GMT
Subject: CN=68233a37-a479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:73:c8:c4:f2:8f:a3:2c:14:1d:80:77:b8:
8c:21:9a:cd:d2:ef:f0:51:77:20:4b:87:15:c3:09:
b4:a7:7e:e3:b3:17:9d:be:77:e5:41:47:df:9c:c3:
e3:fe:93:92:d0:1c:34:9b:1c:b7:94:70:28:0c:52:
36:e0:a1:70:ed:58:10:31:5d:07:b1:b7:b9:6f:fc:
cf:3c:8c:c4:ff:36:e8:d7:22:fb:fe:6c:dd:58:ba:
a3:6c:15:97:f7:8d:ab:c3:86:b2:71:e1:82:0b:40:
72:d9:6d:7e:fa:76:5f:42:d6:9e:7f:84:00:6a:d2:
97:33:5c:43:59:69:6e:1e:9b:1b:f2:86:fc:b8:48:
a7:b2:fa:37:d7:28:81:e3:bd:a9:57:57:9f:87:eb:
74:f3:1d:b5:87:18:85:92:02:be:02:66:15:22:da:
9c:f2:81:ac:e7:7e:ab:e4:38:12:cb:0e:4f:7a:3e:
52:35:49:d7:a5:81:26:c4:d4:99:14:4a:b5:5d:13:
a6:3c:aa:34:e4:59:95:2b:85:b5:ea:72:96:30:8c:
6b:6e:de:d7:35:a9:01:3b:10:5b:2d:76:98:b5:6d:
99:dd:1d:eb:1a:e5:19:9e:3b:a4:54:a2:5d:ef:17:
9b:ee:db:27:7e:e7:7d:77:56:db:a6:fe:ef:10:0f:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:61:13:87:53:26:CE:1E:63:36:E5:A1:23:C9:3E:EC:0C:9E:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/597588B42FF511F0938437D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:db:30:5c:56:20:c1:c8:e4:d2:a3:c9:e2:c3:7e:cf:eb:7b:
48:4e:38:a6:21:95:25:b7:9d:71:99:4d:dd:e6:49:71:a1:ff:
a7:6d:c9:94:4d:d9:fd:0a:a1:08:0c:e7:3a:0f:0e:b7:0e:0e:
eb:f4:29:56:26:c9:e5:f4:d0:a2:70:ef:49:66:a0:38:29:2d:
41:d0:82:1a:d5:24:48:5b:4d:dd:6d:dd:bb:bc:58:0f:0d:77:
03:a8:a2:9d:52:13:7d:eb:c8:0a:2d:ab:61:a8:e4:6e:89:1a:
57:46:d7:0b:0c:50:ec:02:d3:0d:44:19:30:a6:8f:c5:2d:03:
db:01:9d:4c:b4:64:48:52:26:40:c9:04:3e:80:64:e0:53:94:
ec:98:c5:09:7a:c1:3c:e7:bc:b3:5d:6f:12:eb:45:c4:91:07:
f2:ed:5b:47:41:24:88:9c:c9:6d:0c:54:35:97:44:cc:9f:a6:
4b:7c:69:f2:45:f7:e0:e5:a8:63:74:a5:8b:65:13:2c:f2:22:
f7:b4:df:f4:8b:6c:2b:c4:83:4d:4b:6a:f6:a7:c7:a1:79:70:
b8:6b:6a:25:6d:a9:43:08:a0:7a:85:5e:ff:ed:34:22:fc:40:
09:d5:be:f0:ee:4c:69:b6:c0:15:0f:23:f0:da:39:17:00:b5:
eb:ce:bc:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYBmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTEzMTIyNTIyWhcNMjUwNjE4MTIyNTIyWjAYMRYw
FAYDVQQDEw02ODIzM2EzNy1hNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqYVzyMTyj6MsFB2Ad7iMIZrN0u/wUXcgS4cVwwm0p37jsxedvnflQUff
nMPj/pOS0Bw0mxy3lHAoDFI24KFw7VgQMV0Hsbe5b/zPPIzE/zbo1yL7/mzdWLqj
bBWX942rw4ayceGCC0By2W1++nZfQtaef4QAatKXM1xDWWluHpsb8ob8uEinsvo3
1yiB472pV1efh+t08x21hxiFkgK+AmYVItqc8oGs536r5DgSyw5Pej5SNUnXpYEm
xNSZFEq1XROmPKo05FmVK4W16nKWMIxrbt7XNakBOxBbLXaYtW2Z3R3rGuUZnjuk
VKJd7xeb7tsnfud9d1bbpv7vEA+tCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBEU
YROHUybOHmM25aEjyT7sDJ6HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OTc1ODhCNDJGRjUxMUYwOTM4NDM3RDJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVLMA0GCSqGSIb3DQEB
CwUAA4IBAQC12zBcViDByOTSo8niw37P63tITjimIZUlt51xmU3d5klxof+nbcmU
Tdn9CqEIDOc6Dw63Dg7r9ClWJsnl9NCicO9JZqA4KS1B0IIa1SRIW03dbd27vFgP
DXcDqKKdUhN968gKLathqORuiRpXRtcLDFDsAtMNRBkwpo/FLQPbAZ1MtGRIUiZA
yQQ+gGTgU5TsmMUJesE857yzXW8S60XEkQfy7VtHQSSInMltDFQ1l0TMn6ZLfGny
Rffg5ahjdKWLZRMs8iL3tN/0i2wrxINNS2r2p8eheXC4a2olbalDCKB6hV7/7TQi
/EAJ1b7w7kxptsAVDyPw2jkXALXrzrxS
-----END CERTIFICATE-----
Generated at Thu May 15 23:46:55 2025 by rpki-client