Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC153D382B1A11F09731CDDCDAE4EC9C.roa
File: AC153D382B1A11F09731CDDCDAE4EC9C.roa (raw, json)
Hash identifier: rjnNK/V1uKom8cA8vh1lKyEO3pMXKsT1bMCMTyLxXZA=
Subject key identifier: 2D:83:AF:24:14:17:28:2A:08:E0:0F:C1:0C:38:9B:DB:BC:84:86:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC153D382B1A11F09731CDDCDAE4EC9C.roa
Signing time: Wed 07 May 2025 08:10:01 +0000
ROA not before: Wed 07 May 2025 08:09:56 +0000
ROA not after: Wed 11 Jun 2025 08:09:56 +0000
asID: 211881
IP address blocks: 154.81.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98115 (0x17f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 08:09:56 2025 GMT
Not After : Jun 11 08:09:56 2025 GMT
Subject: CN=681b1559-e90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:3e:01:b4:77:2d:23:3f:42:99:00:57:55:
b3:b3:24:6d:13:5f:e8:a7:42:41:d2:4a:51:af:ec:
f5:7f:86:81:5d:49:13:4d:9f:7d:e6:28:26:74:3f:
7e:e4:62:07:df:fa:76:68:fd:9f:f1:23:1a:70:9a:
a1:fb:e2:8e:f0:ce:7e:ec:d2:3a:00:5b:ab:56:a2:
d2:32:c1:19:1d:64:30:47:d1:90:5f:7a:a0:ef:ed:
e0:32:12:6b:68:77:7a:44:b3:ca:fd:41:2b:dc:20:
36:a1:8f:0d:47:45:fa:13:05:f4:c5:75:5d:1c:1b:
a0:21:85:73:ab:cc:f5:6e:aa:3a:2d:a8:b8:99:e9:
33:48:07:5a:6a:42:8b:41:08:c1:da:76:46:71:fd:
63:02:bb:de:6c:55:04:b1:97:c5:7e:26:d0:a6:7d:
f3:2d:30:d7:9a:2b:fe:11:80:4b:2a:31:4d:95:da:
63:b8:a8:7c:71:84:85:fc:35:1d:19:9f:4d:c0:35:
75:07:74:3b:33:e5:31:2e:84:aa:2d:4c:14:aa:08:
96:c8:2c:c6:2c:10:6f:05:5d:e9:38:6f:4d:38:5f:
c9:8e:15:12:4f:20:0c:4c:b7:c2:8e:c2:bb:ad:c8:
e7:60:77:35:c5:db:e8:4e:0b:91:3e:8d:a4:8d:39:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:83:AF:24:14:17:28:2A:08:E0:0F:C1:0C:38:9B:DB:BC:84:86:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC153D382B1A11F09731CDDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:49:62:2d:b6:d9:a6:32:2c:52:c4:3c:b7:44:44:db:bc:93:
29:39:4b:15:d7:7d:ad:37:77:6a:c8:60:8a:74:72:89:3e:34:
90:0c:68:e4:55:b1:3a:d6:5b:96:c1:5b:3b:eb:cd:5f:1a:f6:
74:be:d4:af:8f:44:5c:ea:be:a4:41:94:50:b0:78:9a:bc:f8:
61:cd:08:61:49:f9:8b:f9:4b:30:bd:ea:b3:85:67:65:ca:39:
6d:3e:d2:f3:3c:31:cc:67:88:ee:47:48:4b:e9:44:0b:58:3a:
16:3a:29:fe:0e:ba:35:58:9a:68:c6:14:93:5e:86:93:42:c9:
59:a2:a7:d1:64:47:d8:64:de:b8:7a:5f:21:fe:f5:32:5f:52:
a1:91:43:c7:0b:f9:73:ec:12:ab:db:c1:b1:20:25:b1:16:5f:
9d:6f:88:20:ae:df:57:60:79:9f:93:b6:d6:cc:f0:86:66:1d:
77:44:28:6e:c5:54:b6:72:e8:ab:78:d2:34:9e:10:45:a9:a3:
60:72:54:ec:81:a8:89:26:47:43:8d:2c:f7:2d:aa:ed:23:6a:
6e:10:91:3f:e3:9d:7a:0d:2d:e2:32:6b:7c:a1:3f:fe:20:cc:
1d:b5:21:85:48:a7:f2:b5:4d:f4:d9:c7:11:74:90:48:40:d2:
bb:f5:db:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAX9DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA3MDgwOTU2WhcNMjUwNjExMDgwOTU2WjAYMRYw
FAYDVQQDEw02ODFiMTU1OS1lOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu/A+AbR3LSM/QpkAV1WzsyRtE1/op0JB0kpRr+z1f4aBXUkTTZ995igm
dD9+5GIH3/p2aP2f8SMacJqh++KO8M5+7NI6AFurVqLSMsEZHWQwR9GQX3qg7+3g
MhJraHd6RLPK/UEr3CA2oY8NR0X6EwX0xXVdHBugIYVzq8z1bqo6Lai4mekzSAda
akKLQQjB2nZGcf1jArvebFUEsZfFfibQpn3zLTDXmiv+EYBLKjFNldpjuKh8cYSF
/DUdGZ9NwDV1B3Q7M+UxLoSqLUwUqgiWyCzGLBBvBV3pOG9NOF/JjhUSTyAMTLfC
jsK7rcjnYHc1xdvoTguRPo2kjTlriQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC2D
ryQUFygqCOAPwQw4m9u8hIbKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQzE1M0QzODJCMUExMUYwOTczMUNERENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlG4MA0GCSqGSIb3DQEB
CwUAA4IBAQC0SWItttmmMixSxDy3RETbvJMpOUsV132tN3dqyGCKdHKJPjSQDGjk
VbE61luWwVs7681fGvZ0vtSvj0Rc6r6kQZRQsHiavPhhzQhhSfmL+UswveqzhWdl
yjltPtLzPDHMZ4juR0hL6UQLWDoWOin+Dro1WJpoxhSTXoaTQslZoqfRZEfYZN64
el8h/vUyX1KhkUPHC/lz7BKr28GxICWxFl+db4ggrt9XYHmfk7bWzPCGZh13RChu
xVS2cuireNI0nhBFqaNgclTsgaiJJkdDjSz3LartI2puEJE/4516DS3iMmt8oT/+
IMwdtSGFSKfytU302ccRdJBIQNK79dvB
-----END CERTIFICATE-----
Generated at Thu May 15 23:45:01 2025 by rpki-client