Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982CE68C2F2E11F089F8AA9FDAE4EC9C.roa
File: 982CE68C2F2E11F089F8AA9FDAE4EC9C.roa (raw, json)
Hash identifier: EDQ05VrSK7Xq1t0uwnv7G60KB1yiRQIixuK/0xKXtmY=
Subject key identifier: 5F:0F:13:53:0D:17:74:16:12:00:41:2E:E2:02:21:7C:27:F6:C7:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01800F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982CE68C2F2E11F089F8AA9FDAE4EC9C.roa
Signing time: Mon 12 May 2025 12:42:42 +0000
ROA not before: Mon 12 May 2025 12:42:37 +0000
ROA not after: Wed 28 May 2025 12:42:37 +0000
asID: 399989
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98319 (0x1800f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 12:42:37 2025 GMT
Not After : May 28 12:42:37 2025 GMT
Subject: CN=6821ecc2-8778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:58:4b:63:4f:5b:4f:37:77:62:59:85:a3:
29:77:ea:83:3e:68:a9:f6:bc:0f:1d:b1:f7:84:b2:
88:8a:72:5f:91:dd:c7:1c:22:b4:85:af:2f:dc:7d:
c8:57:6f:09:24:a5:14:6a:ce:c1:48:d2:ee:da:79:
90:e6:55:a3:16:2f:8b:4d:f0:62:e0:a4:ae:ab:93:
11:41:a7:9f:0b:7c:6f:46:a4:5a:89:b7:46:50:95:
4a:8d:70:8c:b2:79:bb:1a:e4:51:83:c8:86:39:dd:
cc:3c:47:92:47:b8:53:39:41:c3:95:83:50:16:f3:
9a:5a:a7:93:0e:71:89:77:7f:ed:74:27:c6:97:3b:
01:e3:c0:a5:69:e2:d0:52:27:86:02:69:03:cc:ea:
34:a8:c6:d0:a4:0e:f5:fb:50:bd:58:f0:f7:19:94:
92:1d:c9:2e:87:30:86:37:5a:c2:d6:bf:55:cb:db:
15:8b:f4:5b:fd:10:7c:b3:91:07:31:24:2b:07:d6:
e0:af:db:4c:66:99:ce:13:fe:9a:a8:62:23:24:55:
1a:87:c7:49:a0:fd:60:9f:98:1f:33:63:0d:3e:90:
1b:5b:12:84:1f:cd:b8:b0:0c:de:12:f8:80:29:0a:
d5:54:ca:36:af:bd:0c:06:8a:9f:0a:67:06:34:db:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:13:53:0D:17:74:16:12:00:41:2E:E2:02:21:7C:27:F6:C7:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/982CE68C2F2E11F089F8AA9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:1f:95:59:9e:ce:1d:c8:da:d1:05:54:d2:b3:14:8f:ae:72:
78:a7:e4:11:4c:5b:bb:c6:e6:f3:69:c3:4b:d5:3f:4d:76:e0:
21:6a:c8:12:f3:84:26:63:85:fa:45:0a:eb:3a:2d:02:b9:ba:
3c:d8:b1:cb:7c:75:b8:0c:c3:0a:8b:9e:39:f2:68:06:8a:4e:
2c:f7:53:26:92:cf:bd:94:c9:b8:12:4a:af:7a:a8:a9:81:75:
a6:07:39:92:1d:ba:05:cd:01:ac:59:25:df:c1:de:73:28:fb:
cb:c7:d4:9e:6d:e8:4d:4c:24:f7:de:3f:04:19:bc:b9:73:e5:
4a:15:2d:ee:2b:61:4f:b5:53:72:ee:ec:f8:62:e4:61:e8:e0:
ab:a0:e5:a1:32:1a:39:e7:26:26:6a:07:87:9f:6e:e3:a2:61:
a9:3d:84:c5:99:e0:09:5a:ee:5a:d0:1e:55:72:99:fc:6d:1d:
35:c1:f1:39:91:13:59:b8:a9:4b:48:f2:85:08:4a:56:f8:fe:
ba:dc:31:53:be:7b:a7:e6:a6:6a:58:19:4c:53:11:37:ad:da:
31:a6:7a:27:8a:cd:f9:75:91:7b:3d:6a:da:2d:03:b6:ae:05:
5b:07:8a:13:d3:b0:a7:09:d8:64:67:e7:70:45:8b:f6:a8:53:
b4:12:27:b7
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAYAPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTEyMTI0MjM3WhcNMjUwNTI4MTI0MjM3WjAYMRYw
FAYDVQQDEw02ODIxZWNjMi04Nzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoTRYS2NPW083d2JZhaMpd+qDPmip9rwPHbH3hLKIinJfkd3HHCK0ha8v
3H3IV28JJKUUas7BSNLu2nmQ5lWjFi+LTfBi4KSuq5MRQaefC3xvRqRaibdGUJVK
jXCMsnm7GuRRg8iGOd3MPEeSR7hTOUHDlYNQFvOaWqeTDnGJd3/tdCfGlzsB48Cl
aeLQUieGAmkDzOo0qMbQpA71+1C9WPD3GZSSHckuhzCGN1rC1r9Vy9sVi/Rb/RB8
s5EHMSQrB9bgr9tMZpnOE/6aqGIjJFUah8dJoP1gn5gfM2MNPpAbWxKEH824sAze
EviAKQrVVMo2r70MBoqfCmcGNNsQIwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFF8P
E1MNF3QWEgBBLuICIXwn9scDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85ODJDRTY4QzJGMkUxMUYwODlGOEFBOUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmsIQAwQCmsIYMA0GCSqG
SIb3DQEBCwUAA4IBAQAdH5VZns4dyNrRBVTSsxSPrnJ4p+QRTFu7xubzacNL1T9N
duAhasgS84QmY4X6RQrrOi0Cubo82LHLfHW4DMMKi5458mgGik4s91Mmks+9lMm4
EkqveqipgXWmBzmSHboFzQGsWSXfwd5zKPvLx9SebehNTCT33j8EGby5c+VKFS3u
K2FPtVNy7uz4YuRh6OCroOWhMho55yYmageHn27jomGpPYTFmeAJWu5a0B5Vcpn8
bR01wfE5kRNZuKlLSPKFCEpW+P663DFTvnun5qZqWBlMUxE3rdoxpnonis35dZF7
PWraLQO2rgVbB4oT07CnCdhkZ+dwRYv2qFO0Eie3
-----END CERTIFICATE-----
Generated at Thu May 15 23:47:04 2025 by rpki-client