Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643A32EC317911F0A12A8C7ADAE4EC9C.roa
File: 643A32EC317911F0A12A8C7ADAE4EC9C.roa (raw, json)
Hash identifier: 7OISl4jZ13TYRYJ3VGI4VFURSxwjBFedd4AHWpuM/Zk=
Subject key identifier: 6D:88:71:7B:4F:73:54:14:AC:9C:91:DC:DC:F5:37:D0:7D:DA:38:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643A32EC317911F0A12A8C7ADAE4EC9C.roa
Signing time: Thu 15 May 2025 10:43:10 +0000
ROA not before: Thu 15 May 2025 10:43:04 +0000
ROA not after: Wed 25 Jun 2025 10:43:04 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98520 (0x180d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 10:43:04 2025 GMT
Not After : Jun 25 10:43:04 2025 GMT
Subject: CN=6825c53d-80f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:5d:84:42:15:22:59:12:15:5d:e9:f0:ac:
0f:e3:de:a9:fe:c9:15:82:b4:e3:8b:d5:eb:d8:98:
50:b8:e1:46:1d:d1:de:99:7f:32:27:c0:f3:e7:11:
2c:b2:36:eb:82:01:9c:a6:83:1e:11:30:10:87:e1:
e2:f6:9d:17:7c:45:76:81:ff:42:dd:8c:00:65:82:
29:7f:93:fa:5a:81:6b:6b:53:6a:40:93:6e:b1:d7:
55:c7:b9:15:e4:5d:0f:7a:0d:01:4a:ee:76:48:8e:
23:33:84:12:ee:1a:be:9c:ac:59:37:48:a0:d6:ed:
c2:23:77:7f:1c:86:93:6e:b1:76:e4:2d:69:57:6f:
12:33:8a:a3:92:37:e9:b9:cc:39:02:83:75:7b:23:
95:b2:04:45:ff:f7:28:db:89:13:75:90:0a:cf:27:
ed:5c:7c:d3:45:6b:c2:f8:ad:93:cf:f7:5c:cf:79:
9c:d6:15:1e:49:c0:b8:a9:32:4c:95:82:81:30:0a:
5d:a7:6b:0d:15:f8:71:2e:b4:58:a9:fd:1c:2d:79:
4f:d8:04:b4:80:f2:f0:c2:e3:0c:d8:a4:d5:8f:c0:
49:ad:e9:2c:d1:d5:6b:df:8e:0a:6a:1b:32:86:39:
6f:bc:66:a0:38:ea:4a:f6:fc:ac:ab:cc:e0:9d:1c:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:88:71:7B:4F:73:54:14:AC:9C:91:DC:DC:F5:37:D0:7D:DA:38:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/643A32EC317911F0A12A8C7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d8:c6:13:d7:1f:56:1c:16:59:14:59:f0:90:35:1a:d8:b9:
50:1a:02:91:4c:ca:7d:76:ca:02:a3:c6:7a:a9:bb:d5:43:e6:
fa:9b:fa:cf:4e:db:b0:be:7e:ca:28:47:54:33:42:32:2c:5d:
37:15:8e:3b:40:02:a7:f4:4b:25:e0:bc:52:9f:1a:84:f6:a1:
26:f7:41:7c:1f:00:11:35:50:8e:8e:7a:03:3e:d7:0a:4c:80:
a4:6e:5a:85:61:af:c7:f9:14:3a:1a:3d:a1:47:43:03:e1:c5:
07:5d:e5:f7:73:1c:5e:b7:a1:c3:ad:91:1c:35:3c:af:c6:4c:
70:b0:47:66:13:5d:90:26:3a:5f:8b:dc:91:2d:60:80:d9:06:
6c:fa:6c:28:9e:c1:9b:a9:ab:a1:18:09:34:ca:9b:1d:4d:b5:
50:73:df:2b:8e:cd:bb:68:89:67:b4:a9:96:bd:54:bb:b5:9b:
37:ae:7c:da:04:eb:78:04:f5:75:2e:e1:59:7c:cd:8f:af:8d:
77:9a:a5:b2:5c:82:db:49:a2:b3:d3:20:da:0a:ee:68:c7:65:
29:7f:71:29:38:1e:ea:3d:4d:6a:c2:26:86:b8:59:a3:2d:e5:
16:41:cb:0d:9e:ac:6c:19:04:fa:c7:16:26:b4:79:3f:d4:1d:
c7:66:55:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYDYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE1MTA0MzA0WhcNMjUwNjI1MTA0MzA0WjAYMRYw
FAYDVQQDEw02ODI1YzUzZC04MGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv0VdhEIVIlkSFV3p8KwP496p/skVgrTji9Xr2JhQuOFGHdHemX8yJ8Dz
5xEssjbrggGcpoMeETAQh+Hi9p0XfEV2gf9C3YwAZYIpf5P6WoFra1NqQJNusddV
x7kV5F0Peg0BSu52SI4jM4QS7hq+nKxZN0ig1u3CI3d/HIaTbrF25C1pV28SM4qj
kjfpucw5AoN1eyOVsgRF//co24kTdZAKzyftXHzTRWvC+K2Tz/dcz3mc1hUeScC4
qTJMlYKBMApdp2sNFfhxLrRYqf0cLXlP2AS0gPLwwuMM2KTVj8BJreks0dVr344K
ahsyhjlvvGagOOpK9vysq8zgnRzzmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG2I
cXtPc1QUrJyR3Nz1N9B92jhQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NDNBMzJFQzMxNzkxMUYwQTEyQThDN0FEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtYAMA0GCSqGSIb3DQEB
CwUAA4IBAQCp2MYT1x9WHBZZFFnwkDUa2LlQGgKRTMp9dsoCo8Z6qbvVQ+b6m/rP
Ttuwvn7KKEdUM0IyLF03FY47QAKn9Esl4LxSnxqE9qEm90F8HwARNVCOjnoDPtcK
TICkblqFYa/H+RQ6Gj2hR0MD4cUHXeX3cxxet6HDrZEcNTyvxkxwsEdmE12QJjpf
i9yRLWCA2QZs+mwonsGbqauhGAk0ypsdTbVQc98rjs27aIlntKmWvVS7tZs3rnza
BOt4BPV1LuFZfM2Pr413mqWyXILbSaKz0yDaCu5ox2Upf3EpOB7qPU1qwiaGuFmj
LeUWQcsNnqxsGQT6xxYmtHk/1B3HZlXf
-----END CERTIFICATE-----
Generated at Thu May 15 23:43:44 2025 by rpki-client