Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F939F8299411F0AEAF12ABDAE4EC9C.roa
File: B5F939F8299411F0AEAF12ABDAE4EC9C.roa (raw, json)
Hash identifier: qyiMg/hYlV+uKIzSTQ4Q46Kq+2Y0TQTqQGGd0SA6is4=
Subject key identifier: 6C:3C:55:FB:7B:84:5F:2C:82:1E:70:4E:23:87:25:9B:5A:40:D9:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F939F8299411F0AEAF12ABDAE4EC9C.roa
Signing time: Mon 05 May 2025 09:38:34 +0000
ROA not before: Mon 05 May 2025 09:38:29 +0000
ROA not after: Thu 10 Jul 2025 09:38:29 +0000
asID: 30781
IP address blocks: 154.217.176.0/23 maxlen: 24
154.217.184.0/21 maxlen: 24
154.217.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 11:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98045 (0x17efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 09:38:29 2025 GMT
Not After : Jul 10 09:38:29 2025 GMT
Subject: CN=6818871a-06cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:03:b1:5a:fd:65:df:90:bf:59:2b:6f:76:99:
93:6f:d5:13:b5:72:37:a4:8e:ac:92:6f:75:d7:f7:
15:41:aa:3d:13:4a:2f:52:96:59:67:0c:97:9d:c7:
ff:f8:ee:bf:92:42:51:8c:2f:c2:74:ee:f6:e0:47:
e5:cc:5b:e1:ef:39:29:ef:9a:6f:8e:6c:d8:c3:89:
8d:60:25:cc:34:e6:25:de:4f:04:e1:86:09:73:e9:
1c:df:af:b8:22:dd:25:85:c5:e9:df:49:e3:34:7c:
70:72:a6:a2:c1:ad:33:ae:d4:db:47:c9:a1:b6:b7:
fc:96:db:03:47:e7:b5:e9:7f:dc:6d:c3:88:29:d1:
cb:b2:de:96:ce:14:49:1c:05:93:1a:21:d2:ea:d1:
b9:b8:6f:c8:e1:a1:3a:9a:44:2c:e5:29:60:3f:0e:
e7:1e:8a:11:7e:49:61:1f:0c:e5:e3:5f:42:66:c9:
c5:e6:50:73:00:cc:ce:74:26:41:56:38:ec:1d:2b:
51:f3:91:c3:ad:67:1c:d8:29:60:e3:82:da:70:cd:
b8:85:80:06:51:cd:e1:bd:d7:78:ac:ac:7b:ce:e6:
26:9a:f5:97:5e:3a:b8:04:a5:13:bc:71:2e:98:7b:
dc:69:04:b6:18:70:35:10:9d:d0:4c:ea:d5:f7:3c:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3C:55:FB:7B:84:5F:2C:82:1E:70:4E:23:87:25:9B:5A:40:D9:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F939F8299411F0AEAF12ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.176.0/23
154.217.184.0-154.217.223.255
Signature Algorithm: sha256WithRSAEncryption
d2:ac:4b:fc:23:a5:e4:7c:2c:91:e1:cf:c0:af:37:67:d4:9e:
92:9e:b2:08:fe:bb:84:91:5e:3e:13:0f:20:c7:2e:40:13:ae:
12:ec:b9:47:60:ec:5e:4a:84:a0:4a:41:e7:1c:ea:fd:17:db:
bf:11:b9:9a:5b:fb:fc:55:03:80:8f:e6:08:13:f4:b0:63:95:
6c:30:75:24:8d:a3:f1:ee:f4:69:97:d0:c8:63:b9:29:42:81:
ec:11:8f:c1:07:88:15:7b:6e:e1:24:ec:86:a5:32:0a:cd:a3:
0f:dc:d8:0a:db:45:46:2f:1f:19:53:23:5c:5b:4f:f3:8f:f0:
f4:86:02:de:89:e6:09:45:73:77:79:ac:63:0e:c5:ae:f1:1e:
69:a9:7a:84:4e:70:47:e3:02:05:c9:5e:a1:aa:f9:20:4f:0b:
b0:3a:75:bc:fb:22:5d:7a:9a:83:6a:24:a9:1c:03:27:d7:07:
6b:be:ee:f8:01:1a:8a:6a:1b:3c:a4:64:69:6b:02:05:a8:9e:
d3:90:de:da:29:f7:13:26:f3:3a:29:8e:8c:58:25:d7:44:9d:
dc:67:95:06:4e:3e:a7:4c:fc:51:0b:29:2d:bf:8c:8c:36:63:
27:d1:51:40:57:e8:bc:83:06:e0:5e:15:2b:44:6d:e0:cc:8c:
99:f5:4d:dd
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAX79MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA1MDkzODI5WhcNMjUwNzEwMDkzODI5WjAYMRYw
FAYDVQQDEw02ODE4ODcxYS0wNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8wOxWv1l35C/WStvdpmTb9UTtXI3pI6skm911/cVQao9E0ovUpZZZwyX
ncf/+O6/kkJRjC/CdO724EflzFvh7zkp75pvjmzYw4mNYCXMNOYl3k8E4YYJc+kc
36+4It0lhcXp30njNHxwcqaiwa0zrtTbR8mhtrf8ltsDR+e16X/cbcOIKdHLst6W
zhRJHAWTGiHS6tG5uG/I4aE6mkQs5SlgPw7nHooRfklhHwzl419CZsnF5lBzAMzO
dCZBVjjsHStR85HDrWcc2Clg44LacM24hYAGUc3hvdd4rKx7zuYmmvWXXjq4BKUT
vHEumHvcaQS2GHA1EJ3QTOrV9zzk6wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFGw8
Vft7hF8sgh5wTiOHJZtaQNlHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNUY5MzlGODI5OTQxMUYwQUVBRjEyQUJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBmtmwMAwDBAOa2bgDBAWa
2cAwDQYJKoZIhvcNAQELBQADggEBANKsS/wjpeR8LJHhz8CvN2fUnpKesgj+u4SR
Xj4TDyDHLkATrhLsuUdg7F5KhKBKQecc6v0X278RuZpb+/xVA4CP5ggT9LBjlWww
dSSNo/Hu9GmX0MhjuSlCgewRj8EHiBV7buEk7IalMgrNow/c2ArbRUYvHxlTI1xb
T/OP8PSGAt6J5glFc3d5rGMOxa7xHmmpeoROcEfjAgXJXqGq+SBPC7A6dbz7Il16
moNqJKkcAyfXB2u+7vgBGopqGzykZGlrAgWontOQ3top9xMm8zopjoxYJddEndxn
lQZOPqdM/FELKS2/jIw2YyfRUUBX6LyDBuBeFStEbeDMjJn1Td0=
-----END CERTIFICATE-----
Generated at Fri May 9 15:26:20 2025 by rpki-client