Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19EB9642FEC11F083B04999DAE4EC9C.roa
File: C19EB9642FEC11F083B04999DAE4EC9C.roa (raw, json)
Hash identifier: EUinpTRz3IzdR5qMZ8bo1CB9ClvuCD64uW2gt7aXFbQ=
Subject key identifier: B6:A4:7F:B5:C4:21:E5:FA:20:32:20:2E:CA:2D:B0:E7:32:EA:80:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01805A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19EB9642FEC11F083B04999DAE4EC9C.roa
Signing time: Tue 13 May 2025 11:23:56 +0000
ROA not before: Tue 13 May 2025 11:23:51 +0000
ROA not after: Sat 16 May 2026 11:23:51 +0000
asID: 41095
IP address blocks: 154.193.186.0/23 maxlen: 24
154.196.252.0/23 maxlen: 24
154.205.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98394 (0x1805a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 11:23:51 2025 GMT
Not After : May 16 11:23:51 2026 GMT
Subject: CN=68232bcc-2b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:38:9e:5c:83:dd:52:12:c8:8e:b6:30:cb:
24:5d:cc:ed:41:ce:fb:39:ff:4e:79:86:0b:79:31:
8b:17:1c:14:27:3a:09:83:03:02:f4:84:b8:3d:f7:
96:7b:a6:f5:89:a7:13:34:3e:44:ec:3a:30:93:57:
e3:e4:9c:b5:1a:c8:e0:4a:7f:b1:7e:99:cf:a9:c3:
92:2d:e9:68:e9:33:bc:e3:d0:89:d4:4d:d0:5f:00:
85:f6:24:ef:c8:d7:e8:2a:4c:c8:0b:b0:f0:05:9c:
d2:a2:3f:24:fd:17:7e:3a:43:8e:ac:c9:09:b5:39:
ce:ac:b3:c2:58:eb:55:3e:01:2d:b0:30:27:8c:33:
66:52:3b:77:ab:d8:42:24:20:4e:ad:91:ec:19:9a:
34:32:11:c6:fe:cc:74:01:a1:5f:64:e6:76:17:f7:
24:a1:d0:e7:6a:96:e5:98:bb:94:a4:b5:16:dd:cf:
2b:b6:b4:3f:2c:9b:d4:72:3a:56:9e:76:a6:23:b1:
c7:c8:77:39:b0:b9:37:9e:74:b8:69:5d:71:7b:fd:
d1:e0:6a:7b:04:97:ce:cd:ab:e6:af:ec:c5:a1:73:
be:e3:26:da:c7:6e:71:ce:a1:2e:85:aa:21:94:72:
97:83:84:de:45:5e:47:cd:39:af:c5:af:e0:62:9a:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A4:7F:B5:C4:21:E5:FA:20:32:20:2E:CA:2D:B0:E7:32:EA:80:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C19EB9642FEC11F083B04999DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.186.0/23
154.196.252.0/23
154.205.0.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:ed:49:6a:d5:43:4c:4a:23:b4:59:19:d3:85:2c:72:bc:ee:
a2:f1:3f:50:51:3e:e1:64:30:db:8b:86:c3:6e:c5:88:4d:fa:
68:a1:b5:69:e0:84:dd:42:ff:28:36:35:71:dd:f0:72:84:d8:
55:2d:dc:15:f1:86:26:16:e7:fa:60:ed:76:61:8b:d3:95:5a:
f4:63:19:9b:fe:27:47:df:b3:c0:3e:49:2f:61:e1:cd:fe:67:
1a:de:88:b4:c8:ff:ef:46:ba:a8:e9:28:e7:e0:04:4e:7b:ee:
c5:db:01:65:62:db:8d:0f:17:6c:ae:fa:8f:9d:70:fd:00:ba:
d3:18:91:8f:85:6c:84:83:df:77:20:4f:33:9e:e7:23:46:cc:
eb:b9:f7:6e:46:57:c6:c3:58:f4:7b:f3:21:e5:d9:e1:da:18:
fa:fd:3c:cc:65:0d:5e:e8:dc:7f:4d:5c:93:9e:68:ed:9d:d6:
4f:7e:91:e7:21:e4:d9:07:43:b8:69:7e:f3:06:17:6d:97:97:
a2:0f:37:5c:71:c7:75:78:6f:84:a1:8a:12:0e:a6:90:1c:4e:
9e:46:4c:ee:49:0d:bb:b4:18:db:d8:c5:90:ba:8a:b0:a9:1c:
4f:d3:c4:22:a1:01:e2:5b:aa:55:b1:dd:3c:b7:4c:8c:22:f6:
8a:88:57:b2
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAYBaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTEzMTEyMzUxWhcNMjYwNTE2MTEyMzUxWjAYMRYw
FAYDVQQDEw02ODIzMmJjYy0yYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0bA4nlyD3VISyI62MMskXcztQc77Of9OeYYLeTGLFxwUJzoJgwMC9IS4
PfeWe6b1iacTND5E7Dowk1fj5Jy1GsjgSn+xfpnPqcOSLelo6TO849CJ1E3QXwCF
9iTvyNfoKkzIC7DwBZzSoj8k/Rd+OkOOrMkJtTnOrLPCWOtVPgEtsDAnjDNmUjt3
q9hCJCBOrZHsGZo0MhHG/sx0AaFfZOZ2F/ckodDnapblmLuUpLUW3c8rtrQ/LJvU
cjpWnnamI7HHyHc5sLk3nnS4aV1xe/3R4Gp7BJfOzavmr+zFoXO+4ybax25xzqEu
haohlHKXg4TeRV5HzTmvxa/gYpp45wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFLak
f7XEIeX6IDIgLsotsOcy6oDhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTlFQjk2NDJGRUMxMUYwODNCMDQ5OTlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBmsG6AwQBmsT8AwQBms0A
MA0GCSqGSIb3DQEBCwUAA4IBAQDM7Ulq1UNMSiO0WRnThSxyvO6i8T9QUT7hZDDb
i4bDbsWITfpoobVp4ITdQv8oNjVx3fByhNhVLdwV8YYmFuf6YO12YYvTlVr0Yxmb
/idH37PAPkkvYeHN/mca3oi0yP/vRrqo6Sjn4AROe+7F2wFlYtuNDxdsrvqPnXD9
ALrTGJGPhWyEg993IE8znucjRszrufduRlfGw1j0e/Mh5dnh2hj6/TzMZQ1e6Nx/
TVyTnmjtndZPfpHnIeTZB0O4aX7zBhdtl5eiDzdcccd1eG+EoYoSDqaQHE6eRkzu
SQ27tBjb2MWQuoqwqRxP08QioQHiW6pVsd08t0yMIvaKiFey
-----END CERTIFICATE-----
Generated at Thu May 15 23:46:03 2025 by rpki-client