Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5879FA24F611F09EE6B6C1DAE4EC9C.roa
File: 5D5879FA24F611F09EE6B6C1DAE4EC9C.roa (raw, json)
Hash identifier: 5LwGPQY9MOiFbotNj3wsUZPz5uExKOPsteHblHl1mIg=
Subject key identifier: 79:22:F2:C9:9B:98:3A:90:06:AD:C8:7A:0A:66:68:30:DD:E4:01:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5879FA24F611F09EE6B6C1DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 12:35:00 +0000
ROA not before: Tue 29 Apr 2025 12:34:55 +0000
ROA not after: Thu 12 Nov 2026 12:34:55 +0000
asID: 137263
IP address blocks: 154.203.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97532 (0x17cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 12:34:55 2025 GMT
Not After : Nov 12 12:34:55 2026 GMT
Subject: CN=6810c774-d9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:b4:ac:cc:80:45:29:e9:24:79:cc:b3:b5:
11:a5:e6:2a:36:92:bf:a1:ac:03:81:6d:c0:2e:31:
91:11:4a:f1:5c:8b:de:2e:2d:aa:2e:10:3c:9d:a8:
a6:bc:36:57:0d:89:51:62:99:e1:13:c4:88:d8:2c:
84:f9:2b:a1:d7:80:b1:a5:d0:66:81:ba:bc:0f:60:
80:63:f5:5a:51:28:7f:0d:a9:a7:bf:8c:09:a8:5e:
6f:cc:61:db:89:ce:b4:ab:99:69:e3:1c:b4:37:d8:
42:c7:4a:f6:7d:97:01:a3:56:51:07:bc:bc:7b:0b:
62:40:01:30:ed:e8:a8:8a:d9:01:0b:56:d1:df:7f:
c5:08:dd:18:42:89:14:cd:34:cb:11:8c:40:13:eb:
a7:6b:fb:ba:6e:75:a4:69:ee:4d:37:fd:83:f1:b9:
2a:90:a4:d9:dd:e7:aa:b5:ce:ba:4c:30:67:a6:6e:
79:aa:b2:8e:a3:8a:75:e2:77:ff:4a:52:23:ba:c5:
14:07:41:e1:7e:94:fd:a6:67:5e:d0:0d:00:be:98:
82:11:ae:2b:1a:56:7b:b3:46:40:be:4c:1e:f8:42:
61:e0:ef:55:71:39:6d:0f:cd:38:38:fb:ed:b7:95:
08:ad:64:53:5e:d8:2d:f8:a7:96:b2:e6:3e:73:a1:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:22:F2:C9:9B:98:3A:90:06:AD:C8:7A:0A:66:68:30:DD:E4:01:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D5879FA24F611F09EE6B6C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:46:09:0b:71:7d:f9:54:0e:62:f5:cc:41:d3:8b:d2:83:be:
cd:ce:74:53:fb:ef:8b:fa:6b:6c:a2:86:8c:47:6f:f4:05:af:
81:b7:77:4b:cd:4e:5b:c8:85:57:0e:12:cc:f5:c0:18:dd:82:
ff:25:b6:2e:8c:f3:ee:70:27:5b:99:5f:c5:c8:36:f9:2a:d3:
a8:14:8f:93:c5:a8:96:ca:27:f5:5b:6f:49:50:a4:3c:26:1a:
81:12:50:0e:42:8d:8b:5d:99:a1:d8:f1:44:b5:5d:a4:68:3e:
11:1c:68:ff:63:6c:21:99:ff:57:6d:de:30:41:6e:09:d8:6b:
e0:85:26:e9:0f:2b:92:ca:d0:4a:e3:f9:14:8e:eb:43:87:c1:
ee:5b:4a:40:b4:f7:85:60:fc:58:65:85:e5:7a:7e:8c:ce:9c:
12:c0:1a:4c:65:ca:fe:b1:71:3e:2b:b1:b2:73:69:2a:a3:33:
a1:59:dd:ac:32:eb:1d:df:3d:24:de:32:05:51:a3:43:29:28:
31:2f:73:70:cd:af:d5:c8:9c:22:a0:1e:2d:71:eb:98:4f:fe:
00:5e:2e:88:2e:7a:2b:36:fa:c2:5e:f8:d1:36:65:7c:4a:ec:
dc:f7:94:1e:59:95:a2:2c:1e:e2:0b:0e:89:7e:1e:92:7b:d5:
41:e0:ef:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXz8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI5MTIzNDU1WhcNMjYxMTEyMTIzNDU1WjAYMRYw
FAYDVQQDEw02ODEwYzc3NC1kOWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3jO0rMyARSnpJHnMs7URpeYqNpK/oawDgW3ALjGREUrxXIveLi2qLhA8
naimvDZXDYlRYpnhE8SI2CyE+Suh14CxpdBmgbq8D2CAY/VaUSh/Damnv4wJqF5v
zGHbic60q5lp4xy0N9hCx0r2fZcBo1ZRB7y8ewtiQAEw7eioitkBC1bR33/FCN0Y
QokUzTTLEYxAE+una/u6bnWkae5NN/2D8bkqkKTZ3eeqtc66TDBnpm55qrKOo4p1
4nf/SlIjusUUB0HhfpT9pmde0A0AvpiCEa4rGlZ7s0ZAvkwe+EJh4O9VcTltD804
OPvtt5UIrWRTXtgt+KeWsuY+c6H4bwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHki
8smbmDqQBq3IegpmaDDd5AFxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RDU4NzlGQTI0RjYxMUYwOUVFNkI2QzFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsv3MA0GCSqGSIb3DQEB
CwUAA4IBAQA9RgkLcX35VA5i9cxB04vSg77NznRT+++L+mtsooaMR2/0Ba+Bt3dL
zU5byIVXDhLM9cAY3YL/JbYujPPucCdbmV/FyDb5KtOoFI+TxaiWyif1W29JUKQ8
JhqBElAOQo2LXZmh2PFEtV2kaD4RHGj/Y2whmf9Xbd4wQW4J2GvghSbpDyuSytBK
4/kUjutDh8HuW0pAtPeFYPxYZYXlen6MzpwSwBpMZcr+sXE+K7Gyc2kqozOhWd2s
Musd3z0k3jIFUaNDKSgxL3Nwza/VyJwioB4tceuYT/4AXi6ILnorNvrCXvjRNmV8
Suzc95QeWZWiLB7iCw6Jfh6Se9VB4O92
-----END CERTIFICATE-----
Generated at Wed May 14 09:07:32 2025 by rpki-client