Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/812E84042F1A11F097BF0D9ADAE4EC9C.roa
File: 812E84042F1A11F097BF0D9ADAE4EC9C.roa (raw, json)
Hash identifier: HDjkohYcX3S9gZMOhFEpj5h7UYa2/CUJ5/hJ+LNf++k=
Subject key identifier: C0:63:5E:1E:47:D9:F4:A9:CF:E9:F5:CA:B6:5B:82:02:FC:23:90:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/812E84042F1A11F097BF0D9ADAE4EC9C.roa
Signing time: Mon 12 May 2025 10:18:53 +0000
ROA not before: Mon 12 May 2025 10:18:48 +0000
ROA not after: Sun 18 May 2025 10:18:48 +0000
asID: 137443
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98261 (0x17fd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 10:18:48 2025 GMT
Not After : May 18 10:18:48 2025 GMT
Subject: CN=6821cb0d-a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:08:63:a7:18:02:12:cc:1c:6f:f5:05:ff:
a4:72:e7:cb:2a:ac:9f:43:95:8b:57:f2:3c:d3:aa:
cc:08:76:62:49:fc:26:71:6f:c9:f9:68:54:8e:de:
a5:03:50:2d:4b:76:7e:62:f6:fd:35:58:41:b9:17:
23:7f:8b:71:44:b4:4e:f0:d1:75:4c:2b:be:55:39:
49:9f:cb:cc:04:5b:c9:81:bb:f7:ec:4f:a8:d6:a7:
e4:80:c7:85:8c:d9:f3:8b:86:69:57:cd:66:9b:3e:
7b:89:dc:ab:7e:2d:98:8c:9b:87:c4:e0:1f:10:47:
a2:6b:0f:9d:97:05:3c:6b:99:27:db:aa:97:53:6c:
ab:6c:ea:23:93:75:ae:32:ec:99:28:fe:20:96:eb:
1b:d4:0a:e1:33:d9:75:10:e6:40:7f:b3:5c:f4:a0:
a1:f4:f3:a1:45:b0:24:72:94:fd:6d:64:34:79:34:
01:24:b4:e2:38:bf:69:fb:31:c2:08:28:93:10:0b:
cf:36:fa:fc:6d:0a:f9:a8:db:3f:2f:85:7a:84:55:
df:4b:fb:19:ca:16:d6:11:a1:c0:dc:ea:4a:dd:56:
2e:b2:b3:e6:79:47:0d:97:48:e6:5c:cd:68:99:e9:
ac:df:76:27:14:66:e6:c3:1e:d5:5e:d8:5a:9e:2d:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:5E:1E:47:D9:F4:A9:CF:E9:F5:CA:B6:5B:82:02:FC:23:90:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/812E84042F1A11F097BF0D9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:cc:4c:c1:99:fe:21:39:7b:0d:ca:a6:da:d6:bc:7e:f6:80:
d7:7e:6a:07:3c:cd:7b:77:e1:a9:38:3d:e1:aa:fb:2f:7f:58:
57:51:21:a4:2c:fc:90:e1:22:4e:db:d0:25:17:ff:f1:4e:05:
d2:5c:e5:d5:f0:d8:bf:20:e6:f7:40:c2:8d:67:57:a9:de:a5:
b5:54:24:ac:81:92:43:eb:78:41:3f:4e:89:b6:65:49:76:04:
75:2e:1b:15:51:eb:a1:8e:81:8d:91:86:04:79:9c:be:c0:d2:
5f:f8:85:c8:59:7c:e7:f1:a7:1e:2d:50:1c:fd:d3:e7:cd:f1:
93:c4:0a:4e:22:68:2a:94:af:b9:b7:47:fa:34:6f:f2:d1:e6:
bd:e0:dc:4d:b4:c4:e9:ee:8d:4e:29:f0:2f:8e:98:c6:dc:06:
6b:a9:35:1c:c4:8e:01:43:52:7d:0c:48:cd:85:34:9c:ff:6e:
71:f9:63:9c:09:55:6e:92:1b:cb:1b:e8:61:37:c1:0f:a5:61:
f1:f0:d8:c1:55:d1:1a:eb:13:81:b0:05:9b:5e:dc:cf:e9:5d:
e4:78:05:d8:6a:03:87:39:39:7d:98:95:3b:6f:c6:f4:02:97:
26:2f:29:5f:7c:68:b5:f7:ef:91:7b:8c:1d:2f:c0:4f:21:be:
1a:9d:17:06
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAX/VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTEyMTAxODQ4WhcNMjUwNTE4MTAxODQ4WjAYMRYw
FAYDVQQDEw02ODIxY2IwZC1hN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArC4IY6cYAhLMHG/1Bf+kcufLKqyfQ5WLV/I806rMCHZiSfwmcW/J+WhU
jt6lA1AtS3Z+Yvb9NVhBuRcjf4txRLRO8NF1TCu+VTlJn8vMBFvJgbv37E+o1qfk
gMeFjNnzi4ZpV81mmz57idyrfi2YjJuHxOAfEEeiaw+dlwU8a5kn26qXU2yrbOoj
k3WuMuyZKP4glusb1ArhM9l1EOZAf7Nc9KCh9POhRbAkcpT9bWQ0eTQBJLTiOL9p
+zHCCCiTEAvPNvr8bQr5qNs/L4V6hFXfS/sZyhbWEaHA3OpK3VYusrPmeUcNl0jm
XM1omems33YnFGbmwx7VXthani22SQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFMBj
Xh5H2fSpz+n1yrZbggL8I5AaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTJFODQwNDJGMUExMUYwOTdCRjBEOUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCmt+oAwQDmt+wAwQCmt+8
MA0GCSqGSIb3DQEBCwUAA4IBAQC4zEzBmf4hOXsNyqba1rx+9oDXfmoHPM17d+Gp
OD3hqvsvf1hXUSGkLPyQ4SJO29AlF//xTgXSXOXV8Ni/IOb3QMKNZ1ep3qW1VCSs
gZJD63hBP06JtmVJdgR1LhsVUeuhjoGNkYYEeZy+wNJf+IXIWXzn8aceLVAc/dPn
zfGTxApOImgqlK+5t0f6NG/y0ea94NxNtMTp7o1OKfAvjpjG3AZrqTUcxI4BQ1J9
DEjNhTSc/25x+WOcCVVukhvLG+hhN8EPpWHx8NjBVdEa6xOBsAWbXtzP6V3keAXY
agOHOTl9mJU7b8b0ApcmLylffGi19++Re4wdL8BPIb4anRcG
-----END CERTIFICATE-----
Generated at Thu May 15 23:48:02 2025 by rpki-client