Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA5EBAA2B2E11F0AD322BE0DAE4EC9C.roa
File: 8CA5EBAA2B2E11F0AD322BE0DAE4EC9C.roa (raw, json)
Hash identifier: OdienrekV3Z4jprLIdURzX0mdKXteMHZ5BP5Qw/ueb4=
Subject key identifier: 38:25:59:5E:40:C3:A0:79:0F:21:91:E0:5A:D2:DD:22:4A:B0:08:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA5EBAA2B2E11F0AD322BE0DAE4EC9C.roa
Signing time: Wed 07 May 2025 10:32:18 +0000
ROA not before: Wed 07 May 2025 10:32:14 +0000
ROA not after: Mon 16 Jun 2025 10:32:14 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98141 (0x17f5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 10:32:14 2025 GMT
Not After : Jun 16 10:32:14 2025 GMT
Subject: CN=681b36b2-f5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:e9:79:8e:e3:c5:c3:84:97:39:7b:eb:95:
68:66:34:6f:a7:63:40:46:73:18:05:3a:36:37:96:
41:e0:9b:2f:fb:c6:e2:74:d1:ab:f9:0f:25:16:8f:
96:34:09:97:ee:d9:4c:9f:06:0d:68:c9:1e:8e:49:
31:90:90:c0:f8:1b:0d:e3:76:3d:52:c0:eb:83:fa:
9a:79:b0:ea:8a:6e:b1:db:16:64:ed:31:d2:e9:41:
40:12:d2:08:ea:07:05:40:2f:9c:9a:de:36:e5:bb:
21:b0:11:ec:dd:32:e5:26:7b:e1:ac:8f:aa:73:92:
6d:90:a9:11:a6:e6:18:74:e1:ad:d0:54:b2:07:22:
7c:30:f7:67:51:33:4f:6c:01:a1:03:a3:5e:5f:37:
57:00:48:3e:51:90:37:39:1a:e3:8f:39:18:65:96:
0c:44:ee:48:10:62:9c:2a:69:da:6f:67:bb:30:ef:
b2:62:21:0d:13:ab:d2:d1:e6:58:aa:25:36:0e:3b:
8d:07:b4:c3:da:7e:82:ad:ae:f2:28:33:90:91:5c:
7c:1e:41:7d:d3:77:2d:47:12:ac:48:8a:75:20:73:
b3:7f:85:f5:e5:b9:90:0b:b8:4c:b3:fa:56:ed:b4:
1b:61:e3:b3:4d:7c:a0:d3:5c:93:0e:d7:93:dd:9b:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:59:5E:40:C3:A0:79:0F:21:91:E0:5A:D2:DD:22:4A:B0:08:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA5EBAA2B2E11F0AD322BE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5b:07:79:f2:0b:49:a8:39:35:f8:64:7e:f0:0a:db:6d:9e:
e3:d1:7e:cc:fe:2b:76:01:21:79:bb:d1:60:c9:36:b2:cc:f9:
2a:a1:80:e4:24:96:32:ce:f1:5e:f1:9f:74:bc:42:e1:73:00:
32:fc:a0:33:d3:ee:ea:d2:49:4f:2b:30:f0:a5:20:4a:df:d3:
0e:ed:41:b1:ca:cb:d7:ee:fc:25:d6:ba:e3:02:3a:c5:9c:86:
3b:aa:00:13:12:ca:33:46:dd:f5:f7:dc:53:c8:16:00:18:60:
38:bc:7b:e3:f8:78:1c:d0:9d:aa:6c:98:e3:2b:70:01:79:67:
c4:7b:a5:1f:74:ee:f8:9d:4a:cb:2d:a4:7b:b7:01:80:9a:a5:
09:d4:a6:3b:a4:ac:6b:59:a6:d7:4e:1f:31:60:d2:98:dc:5b:
23:a3:9a:39:a6:55:51:25:15:4b:76:79:d9:09:f7:e3:26:00:
1a:d0:23:f5:5d:0f:bc:f7:9d:64:7c:a7:78:57:2a:ff:a3:e0:
38:f1:bc:94:23:d5:3d:b0:73:3e:de:e1:43:2d:f9:9f:f5:13:
64:26:5b:3f:9b:5e:28:1a:25:96:db:d5:1d:9c:54:4b:64:3c:
16:25:74:7b:bf:d3:ee:b2:be:10:ad:e8:4c:eb:5c:31:c8:31:
c3:f8:05:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAX9dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA3MTAzMjE0WhcNMjUwNjE2MTAzMjE0WjAYMRYw
FAYDVQQDEw02ODFiMzZiMi1mNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAshHpeY7jxcOElzl765VoZjRvp2NARnMYBTo2N5ZB4Jsv+8bidNGr+Q8l
Fo+WNAmX7tlMnwYNaMkejkkxkJDA+BsN43Y9UsDrg/qaebDqim6x2xZk7THS6UFA
EtII6gcFQC+cmt425bshsBHs3TLlJnvhrI+qc5JtkKkRpuYYdOGt0FSyByJ8MPdn
UTNPbAGhA6NeXzdXAEg+UZA3ORrjjzkYZZYMRO5IEGKcKmnab2e7MO+yYiENE6vS
0eZYqiU2DjuNB7TD2n6Cra7yKDOQkVx8HkF903ctRxKsSIp1IHOzf4X15bmQC7hM
s/pW7bQbYeOzTXyg01yTDteT3Zvq9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDgl
WV5Aw6B5DyGR4FrS3SJKsAj1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84Q0E1RUJBQTJCMkUxMUYwQUQzMjJCRTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI2MA0GCSqGSIb3DQEB
CwUAA4IBAQAWWwd58gtJqDk1+GR+8ArbbZ7j0X7M/it2ASF5u9FgyTayzPkqoYDk
JJYyzvFe8Z90vELhcwAy/KAz0+7q0klPKzDwpSBK39MO7UGxysvX7vwl1rrjAjrF
nIY7qgATEsozRt3199xTyBYAGGA4vHvj+Hgc0J2qbJjjK3ABeWfEe6UfdO74nUrL
LaR7twGAmqUJ1KY7pKxrWabXTh8xYNKY3Fsjo5o5plVRJRVLdnnZCffjJgAa0CP1
XQ+8951kfKd4Vyr/o+A48byUI9U9sHM+3uFDLfmf9RNkJls/m14oGiWW29UdnFRL
ZDwWJXR7v9Pusr4QrehM61wxyDHD+AWt
-----END CERTIFICATE-----
Generated at Tue May 13 09:48:40 2025 by rpki-client