Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A3BC9262B1E11F0AFA8B1F5DAE4EC9C.roa
File: 8A3BC9262B1E11F0AFA8B1F5DAE4EC9C.roa (raw, json)
Hash identifier: lVtTRl/NQV0jq3yhfUv/zbh7tYSbjIn+SzF8hHAlmaA=
Subject key identifier: 3C:F8:6B:80:EA:8C:09:87:C7:22:A6:1B:50:D6:5A:AA:68:1F:38:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A3BC9262B1E11F0AFA8B1F5DAE4EC9C.roa
Signing time: Wed 07 May 2025 08:37:42 +0000
ROA not before: Wed 07 May 2025 08:37:37 +0000
ROA not after: Sun 06 Jul 2025 08:37:37 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98121 (0x17f49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 08:37:37 2025 GMT
Not After : Jul 6 08:37:37 2025 GMT
Subject: CN=681b1bd6-51f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:2c:88:da:b6:40:31:17:f7:2f:ec:cb:4b:
f3:79:56:d3:39:dc:79:7f:a0:88:03:6a:22:79:d2:
9f:4e:c2:b7:fd:d3:e0:c6:86:b3:8f:24:53:5c:57:
81:00:b4:4f:28:2f:09:db:b8:6e:6f:5f:80:80:3e:
36:89:11:2a:51:ed:f0:42:62:7a:69:5f:6a:a7:de:
0b:18:46:d9:f4:97:03:b7:00:b4:42:fb:a0:90:ec:
a6:8c:a4:3b:19:34:4a:14:a9:64:49:eb:45:3f:e8:
9c:f8:54:5f:55:35:17:62:61:8e:c1:eb:22:ce:0c:
4c:4b:4e:c8:18:2e:9f:32:38:b6:99:e9:c0:6e:42:
2d:4c:af:7b:35:54:f2:14:f3:94:54:97:79:c9:2e:
3e:5b:c3:a6:d8:cf:c4:a3:63:5d:2d:55:2b:45:20:
d7:27:53:eb:46:a8:b2:de:47:3a:87:e8:fb:0c:b3:
1e:df:9c:e5:03:8c:23:90:4e:19:78:08:56:b8:28:
f7:b2:24:90:67:8d:02:d5:a4:86:b2:69:03:fd:74:
fe:d1:ce:20:4b:03:f4:a1:8b:85:00:33:e7:fc:a6:
78:fb:09:7e:06:51:e0:86:23:9b:e3:0f:7d:71:ed:
66:77:dd:09:ee:94:c0:6e:1d:73:47:cf:2a:3d:af:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F8:6B:80:EA:8C:09:87:C7:22:A6:1B:50:D6:5A:AA:68:1F:38:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A3BC9262B1E11F0AFA8B1F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
25:35:8e:6b:15:8b:56:c8:d4:8a:0c:56:78:e7:44:c5:4d:3e:
77:53:15:a4:1c:a0:84:fc:b7:4b:28:d8:90:0f:ee:c2:80:82:
44:44:29:5a:c6:51:a5:17:e3:63:89:49:72:4f:11:c4:f9:49:
f2:01:0d:04:03:51:06:bc:c4:3f:cf:cd:4c:af:b8:58:10:bc:
95:b5:20:39:99:65:bd:2c:6a:b7:33:e0:82:1f:9b:cb:a8:65:
a2:f7:65:a3:8f:bc:09:be:30:05:d0:6e:ee:04:82:79:19:59:
d4:3a:8f:4a:eb:d5:36:8c:05:4f:ec:65:8f:9f:6a:81:df:73:
af:0e:25:4c:93:91:82:97:8a:e5:ba:d1:58:c9:b6:9f:6f:57:
d4:e8:64:03:35:78:81:6d:f5:9e:b6:f5:71:94:4f:f0:a1:c9:
7b:5e:65:76:63:06:b5:3a:4e:13:19:dc:f1:03:92:bb:c5:a3:
a5:d0:9a:c5:3b:e2:49:d1:2b:31:35:07:ca:18:85:bc:55:26:
b7:83:9c:2e:ce:0e:07:f9:27:50:b7:c3:e9:c6:ca:82:e8:4b:
df:e1:78:1a:0b:fb:33:47:a5:58:8d:81:32:cb:5e:90:2e:58:
b6:1d:91:7f:66:9c:39:aa:75:37:2a:81:63:d0:5b:e5:96:82:
f1:fc:de:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAX9JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA3MDgzNzM3WhcNMjUwNzA2MDgzNzM3WjAYMRYw
FAYDVQQDEw02ODFiMWJkNi01MWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2AwsiNq2QDEX9y/sy0vzeVbTOdx5f6CIA2oiedKfTsK3/dPgxoazjyRT
XFeBALRPKC8J27hub1+AgD42iREqUe3wQmJ6aV9qp94LGEbZ9JcDtwC0QvugkOym
jKQ7GTRKFKlkSetFP+ic+FRfVTUXYmGOwesizgxMS07IGC6fMji2menAbkItTK97
NVTyFPOUVJd5yS4+W8Om2M/Eo2NdLVUrRSDXJ1PrRqiy3kc6h+j7DLMe35zlA4wj
kE4ZeAhWuCj3siSQZ40C1aSGsmkD/XT+0c4gSwP0oYuFADPn/KZ4+wl+BlHghiOb
4w99ce1md90J7pTAbh1zR88qPa8W7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDz4
a4DqjAmHxyKmG1DWWqpoHzipMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QTNCQzkyNjJCMUUxMUYwQUZBOEIxRjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtAgMA0GCSqGSIb3DQEB
CwUAA4IBAQAlNY5rFYtWyNSKDFZ450TFTT53UxWkHKCE/LdLKNiQD+7CgIJERCla
xlGlF+NjiUlyTxHE+UnyAQ0EA1EGvMQ/z81Mr7hYELyVtSA5mWW9LGq3M+CCH5vL
qGWi92Wjj7wJvjAF0G7uBIJ5GVnUOo9K69U2jAVP7GWPn2qB33OvDiVMk5GCl4rl
utFYybafb1fU6GQDNXiBbfWetvVxlE/wocl7XmV2Ywa1Ok4TGdzxA5K7xaOl0JrF
O+JJ0SsxNQfKGIW8VSa3g5wuzg4H+SdQt8PpxsqC6Evf4XgaC/szR6VYjYEyy16Q
Lli2HZF/Zpw5qnU3KoFj0FvlloLx/N4x
-----END CERTIFICATE-----
Generated at Wed May 14 18:23:22 2025 by rpki-client