Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B27A896259311F0AD9CADDFDAE4EC9C.roa
File: 7B27A896259311F0AD9CADDFDAE4EC9C.roa (raw, json)
Hash identifier: 7TorBdpKut6dWVBtZ87W/KUV8o9ePSxfjk1CXYgWBzI=
Subject key identifier: 3B:E4:AE:CB:E7:FD:FA:B7:FC:63:FB:43:49:87:85:C0:78:A5:CC:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B27A896259311F0AD9CADDFDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:19:41 +0000
ROA not before: Wed 30 Apr 2025 07:19:36 +0000
ROA not after: Wed 04 Jun 2025 07:19:36 +0000
asID: 151407
IP address blocks: 154.88.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97552 (0x17d10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 07:19:36 2025 GMT
Not After : Jun 4 07:19:36 2025 GMT
Subject: CN=6811cf0d-3486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:65:df:d7:a6:ac:c2:46:e3:74:ec:46:e0:
ca:61:62:bd:aa:e7:4b:ef:3f:9b:75:d3:4d:17:5b:
0d:01:97:b4:4c:fe:c6:13:93:fe:d7:ed:91:b8:bb:
1d:a4:d5:7f:3e:6e:96:76:e7:4f:c5:e2:09:b6:f5:
4a:74:80:ff:47:72:aa:4a:a6:79:c3:04:88:75:08:
71:3c:58:d7:52:9f:1e:b8:10:81:8c:54:41:5e:ad:
ce:34:4c:d4:9d:eb:b6:70:3b:47:d9:da:a2:ac:dd:
26:47:a5:fd:ed:a9:e2:f3:50:a6:63:8f:44:b2:04:
bb:2b:22:cf:6f:6a:62:a2:2a:03:e9:3f:f4:0e:3a:
90:e6:72:ce:33:42:55:8e:32:cd:1b:11:ac:be:fc:
28:5d:e6:3e:1e:89:63:d3:89:e6:93:de:bd:3e:39:
68:be:28:92:d5:71:90:d9:25:f6:7e:ab:cf:25:95:
64:7b:17:5e:4d:25:29:90:2f:2d:71:bc:ae:d0:11:
30:4e:ed:c5:68:44:8e:2c:7c:70:a3:1c:52:0f:fb:
2e:db:3d:0c:a6:a9:3b:27:8c:b5:e5:b0:37:b2:b6:
ff:19:71:99:98:81:2b:34:01:18:48:c7:2d:55:83:
0a:08:b9:35:8c:18:57:37:8c:b8:57:68:17:e1:2e:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E4:AE:CB:E7:FD:FA:B7:FC:63:FB:43:49:87:85:C0:78:A5:CC:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B27A896259311F0AD9CADDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.64.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:62:49:96:c9:59:3d:15:41:b3:a6:4a:76:a1:2a:09:38:ee:
cf:86:43:2c:61:63:9c:c6:5f:88:79:05:df:97:d9:fd:11:c6:
8b:71:97:77:3e:c5:02:8f:98:43:2f:4c:77:07:2c:84:c3:42:
92:07:ae:30:45:24:94:a7:7f:30:81:7f:2a:1c:1a:96:3a:5d:
eb:f7:a5:38:19:19:0b:13:83:5c:65:17:67:5f:63:f4:8d:d0:
28:25:c2:ad:9b:22:68:e5:cc:64:bd:f0:0d:fa:06:18:5e:09:
6c:f3:8d:ce:ef:4b:2e:8a:85:d1:97:c1:7b:67:7c:15:1f:1b:
64:ba:a1:fa:5a:aa:63:e3:ac:ba:18:bf:4f:cb:a1:63:ff:92:
90:0c:f5:d4:e9:fa:94:d8:d3:94:19:01:eb:26:ac:d9:cd:ac:
48:c2:87:60:13:89:80:cc:79:1e:48:b8:7b:5c:13:7f:bc:7c:
f6:e9:a5:c3:4d:b6:2f:ee:e2:72:54:a9:8a:c2:55:56:54:9d:
bf:75:4c:e8:fd:0a:9a:3b:a9:4c:51:5a:3a:4f:8a:e8:51:0b:
53:b3:bc:5a:3a:4b:ac:1f:5d:20:0c:7e:65:2b:20:89:da:f2:
30:5e:35:a1:e0:97:16:2c:4b:ed:ab:4c:24:46:2d:85:93:8e:
dc:95:14:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAX0QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMDcxOTM2WhcNMjUwNjA0MDcxOTM2WjAYMRYw
FAYDVQQDEw02ODExY2YwZC0zNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuINl39emrMJG43TsRuDKYWK9qudL7z+bddNNF1sNAZe0TP7GE5P+1+2R
uLsdpNV/Pm6WdudPxeIJtvVKdID/R3KqSqZ5wwSIdQhxPFjXUp8euBCBjFRBXq3O
NEzUneu2cDtH2dqirN0mR6X97ani81CmY49EsgS7KyLPb2pioioD6T/0DjqQ5nLO
M0JVjjLNGxGsvvwoXeY+Holj04nmk969PjloviiS1XGQ2SX2fqvPJZVkexdeTSUp
kC8tcbyu0BEwTu3FaESOLHxwoxxSD/su2z0Mpqk7J4y15bA3srb/GXGZmIErNAEY
SMctVYMKCLk1jBhXN4y4V2gX4S6M5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDvk
rsvn/fq3/GP7Q0mHhcB4pcxdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QjI3QTg5NjI1OTMxMUYwQUQ5Q0FEREZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlhAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfYkmWyVk9FUGzpkp2oSoJOO7PhkMsYWOcxl+IeQXfl9n9EcaLcZd3
PsUCj5hDL0x3ByyEw0KSB64wRSSUp38wgX8qHBqWOl3r96U4GRkLE4NcZRdnX2P0
jdAoJcKtmyJo5cxkvfAN+gYYXgls843O70suioXRl8F7Z3wVHxtkuqH6Wqpj46y6
GL9Py6Fj/5KQDPXU6fqU2NOUGQHrJqzZzaxIwodgE4mAzHkeSLh7XBN/vHz26aXD
TbYv7uJyVKmKwlVWVJ2/dUzo/QqaO6lMUVo6T4roUQtTs7xaOkusH10gDH5lKyCJ
2vIwXjWh4JcWLEvtq0wkRi2Fk47clRSm
-----END CERTIFICATE-----
Generated at Mon May 12 10:50:55 2025 by rpki-client