Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17DD7F2243011F08004F591DAE4EC9C.roa
File: C17DD7F2243011F08004F591DAE4EC9C.roa (raw, json)
Hash identifier: DeFR9HpOvkBu9U9srdyaCL+TnfqqLG+SnY+xqprbiS8=
Subject key identifier: 93:27:30:AC:74:27:25:1F:4A:64:36:CC:0A:32:CD:8C:61:59:F2:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17DD7F2243011F08004F591DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:00:27 +0000
ROA not before: Mon 28 Apr 2025 13:00:23 +0000
ROA not after: Thu 23 Mar 2028 13:00:23 +0000
asID: 17561
IP address blocks: 154.203.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97227 (0x17bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:00:23 2025 GMT
Not After : Mar 23 13:00:23 2028 GMT
Subject: CN=680f7beb-ed19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:5a:c7:37:10:dd:f9:3c:05:eb:6a:8b:b8:
64:61:73:58:5c:ac:ee:70:6d:7f:75:17:6f:c9:0c:
8c:8d:33:28:2b:e3:24:9e:9a:ba:0f:d3:50:4e:60:
6a:b1:b0:66:bb:de:08:a2:08:50:a2:f1:ac:c9:0f:
64:41:c7:a1:75:8a:ed:fb:c3:0e:63:a6:63:bc:aa:
d5:02:17:13:c1:74:12:6d:c9:b7:02:13:0f:a7:f6:
db:81:44:79:6d:43:f8:6c:28:d1:0a:dc:43:d7:c9:
58:63:50:51:15:d5:3d:68:c5:cc:90:0b:d6:eb:71:
b8:5b:1a:2f:dd:12:7c:ed:e3:27:e8:c3:2a:f1:12:
0f:6c:85:08:75:06:6e:80:61:a1:23:c1:20:a7:9c:
2b:9e:00:5f:5e:62:d5:91:5e:99:0c:0c:0f:cb:68:
f1:b4:89:11:b7:53:19:97:ea:59:da:5e:ae:e2:df:
d1:ea:4d:3c:44:7d:95:e4:92:ad:96:61:55:bd:8e:
9d:a0:b0:d7:87:9c:d8:2b:ba:0b:e1:6a:86:e6:6f:
68:1b:38:00:e2:73:f1:71:ec:f7:f5:30:17:71:25:
92:8e:c4:1f:27:5a:e2:b0:e1:09:42:4f:3d:e0:a6:
30:30:65:4d:9e:39:01:86:bd:77:1e:5e:01:4c:ab:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:30:AC:74:27:25:1F:4A:64:36:CC:0A:32:CD:8C:61:59:F2:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17DD7F2243011F08004F591DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.76.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6c:2a:ee:5a:a7:2e:1b:86:33:5c:98:3e:11:24:59:15:d5:
cd:48:ad:49:7f:7a:19:44:36:df:24:b3:de:01:30:a5:9e:40:
88:8c:f5:d7:cc:d5:6b:01:30:7c:d5:77:38:5b:9c:8e:f7:42:
72:33:c7:9b:5e:c7:dc:63:9b:9e:3b:7e:99:86:21:02:4f:89:
67:0f:bc:d0:34:de:fa:8e:81:1a:5f:d8:73:a7:5b:b7:76:7a:
c1:53:fa:62:c1:25:9f:16:53:d1:0d:82:d8:41:49:8b:7c:d9:
6e:24:f3:77:58:12:f0:ff:17:0e:db:49:bb:f3:ee:38:57:91:
c5:16:74:2d:43:01:f3:bf:3a:55:6d:12:0a:0d:f2:99:62:5e:
c4:4c:62:c8:5a:3e:be:b8:a8:84:80:9e:30:74:bb:52:cc:ad:
bc:57:cb:15:cf:1d:75:a2:ee:97:47:43:d7:21:f1:58:b5:b8:
b5:cf:45:e5:54:6d:07:7b:7a:b3:3d:f5:b7:06:90:93:9a:ef:
c4:35:bf:63:60:27:0f:50:59:b3:76:0a:ec:a0:cc:e4:c7:c9:
8e:28:23:bf:ac:06:a5:99:64:0c:fc:50:e5:af:4d:ce:36:9a:
f5:ac:0f:05:c8:9a:b3:ae:60:8e:bd:37:94:be:40:91:3a:f4:
d9:d4:a0:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXvLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTMwMDIzWhcNMjgwMzIzMTMwMDIzWjAYMRYw
FAYDVQQDEw02ODBmN2JlYi1lZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0LJaxzcQ3fk8Betqi7hkYXNYXKzucG1/dRdvyQyMjTMoK+Mknpq6D9NQ
TmBqsbBmu94IoghQovGsyQ9kQcehdYrt+8MOY6ZjvKrVAhcTwXQSbcm3AhMPp/bb
gUR5bUP4bCjRCtxD18lYY1BRFdU9aMXMkAvW63G4Wxov3RJ87eMn6MMq8RIPbIUI
dQZugGGhI8Egp5wrngBfXmLVkV6ZDAwPy2jxtIkRt1MZl+pZ2l6u4t/R6k08RH2V
5JKtlmFVvY6doLDXh5zYK7oL4WqG5m9oGzgA4nPxcez39TAXcSWSjsQfJ1risOEJ
Qk894KYwMGVNnjkBhr13Hl4BTKttAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJMn
MKx0JyUfSmQ2zAoyzYxhWfKcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTdERDdGMjI0MzAxMUYwODAwNEY1OTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmstMMA0GCSqGSIb3DQEB
CwUAA4IBAQCGbCruWqcuG4YzXJg+ESRZFdXNSK1Jf3oZRDbfJLPeATClnkCIjPXX
zNVrATB81Xc4W5yO90JyM8ebXsfcY5ueO36ZhiECT4lnD7zQNN76joEaX9hzp1u3
dnrBU/piwSWfFlPRDYLYQUmLfNluJPN3WBLw/xcO20m78+44V5HFFnQtQwHzvzpV
bRIKDfKZYl7ETGLIWj6+uKiEgJ4wdLtSzK28V8sVzx11ou6XR0PXIfFYtbi1z0Xl
VG0He3qzPfW3BpCTmu/ENb9jYCcPUFmzdgrsoMzkx8mOKCO/rAalmWQM/FDlr03O
Npr1rA8FyJqzrmCOvTeUvkCROvTZ1KCy
-----END CERTIFICATE-----
Generated at Wed May 7 09:01:27 2025 by rpki-client