Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5B77502B3411F0AD14A48BDAE4EC9C.roa
File: DB5B77502B3411F0AD14A48BDAE4EC9C.roa (raw, json)
Hash identifier: EfjvTx94jcAZsCBk16qeWFTNzi56nBEaVNrqxFV+pYI=
Subject key identifier: 66:88:AE:E3:01:6A:78:5B:3D:EC:7A:30:5B:55:BD:4B:25:F4:F9:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F65
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5B77502B3411F0AD14A48BDAE4EC9C.roa
Signing time: Wed 07 May 2025 11:17:27 +0000
ROA not before: Wed 07 May 2025 11:17:22 +0000
ROA not after: Fri 05 Jun 2026 11:17:22 +0000
asID: 984
IP address blocks: 154.193.70.0/24 maxlen: 24
154.193.71.0/24 maxlen: 24
154.193.72.0/24 maxlen: 24
154.193.73.0/24 maxlen: 24
154.199.7.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98149 (0x17f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 11:17:22 2025 GMT
Not After : Jun 5 11:17:22 2026 GMT
Subject: CN=681b4147-63aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:d8:e7:26:5b:39:55:ac:52:85:57:35:1c:
1c:3c:52:2b:ca:4c:49:bc:95:7a:36:41:d3:06:7e:
96:93:9b:01:e5:f3:ae:f4:c7:f3:41:c7:5b:ce:c7:
71:41:73:10:67:77:79:5d:f9:2a:b7:79:34:c3:55:
e9:1b:93:e4:0e:c0:39:50:11:9c:7f:e8:57:6d:18:
61:f0:87:5f:c1:8c:85:f8:eb:07:b1:5f:77:b8:13:
24:69:e7:88:68:37:3a:91:59:87:a7:77:96:df:1b:
ef:ba:da:37:aa:4d:d2:5e:24:28:f4:92:6e:fa:cd:
c3:c6:0e:8e:52:15:34:44:d0:e4:cd:f1:1a:5b:c0:
00:11:80:f5:ed:9a:51:d5:4b:72:3e:70:45:39:49:
f6:d3:fa:dd:d0:1a:df:c8:3a:4d:1f:a9:7b:52:51:
5f:9f:06:2d:37:66:cf:9f:02:ee:99:a3:ed:4f:d2:
17:ad:ae:14:8f:95:72:69:f3:46:9a:80:9d:fe:84:
85:e8:58:d7:ef:56:25:a8:b1:83:8c:6a:f0:58:04:
cd:fe:11:99:06:65:8f:7c:bd:c0:f2:01:09:bb:10:
46:56:d6:e0:53:a7:38:b3:fe:7f:38:a4:9a:71:dd:
6b:5b:d1:83:72:ba:ab:bc:a6:e5:54:a3:d3:68:f3:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:88:AE:E3:01:6A:78:5B:3D:EC:7A:30:5B:55:BD:4B:25:F4:F9:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5B77502B3411F0AD14A48BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.70.0-154.193.73.255
154.199.7.0/24
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:1d:e5:10:1c:6d:cb:e4:27:14:15:47:c4:a1:8d:f9:ab:3d:
d9:a4:5a:3e:2e:e6:df:f1:45:a4:14:c0:c0:d9:16:bb:2e:f9:
1f:3b:ce:73:54:27:d3:54:2e:f5:a9:37:d1:2f:88:bd:18:0f:
a0:19:92:37:ef:b8:5a:d8:a1:70:18:a3:40:93:81:a6:3c:b3:
a6:21:ce:84:3e:39:c2:77:c3:6d:29:99:4a:0d:db:f1:10:5b:
a1:eb:51:12:14:e9:f7:bb:76:b4:b0:04:c1:48:b0:13:48:c6:
71:87:31:8c:d0:86:67:15:eb:6b:ef:95:7f:85:c4:74:14:96:
df:e9:9f:36:88:7b:ea:3a:16:11:7d:3a:00:86:cb:5e:a6:b5:
38:f7:6f:23:39:78:f5:70:ef:7f:eb:20:a6:34:bb:ec:f3:4f:
b6:be:4e:37:22:1a:9a:2e:ad:46:a9:2b:64:62:ad:53:92:73:
3a:dc:9c:80:5b:74:31:43:9c:c5:6a:05:55:a2:26:77:e9:6a:
f2:36:3a:96:68:d7:40:5c:57:58:e9:b9:27:d8:9e:cc:11:6e:
cd:3f:b1:d1:ff:94:d3:af:7b:1a:9a:b4:6f:44:f7:67:a7:cd:
5d:85:de:c0:66:f2:8e:63:66:32:6c:83:74:6e:b8:e9:d2:f4:
26:eb:5b:4b
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAX9lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA3MTExNzIyWhcNMjYwNjA1MTExNzIyWjAYMRYw
FAYDVQQDEw02ODFiNDE0Ny02M2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtrvY5yZbOVWsUoVXNRwcPFIrykxJvJV6NkHTBn6Wk5sB5fOu9MfzQcdb
zsdxQXMQZ3d5Xfkqt3k0w1XpG5PkDsA5UBGcf+hXbRhh8IdfwYyF+OsHsV93uBMk
aeeIaDc6kVmHp3eW3xvvuto3qk3SXiQo9JJu+s3Dxg6OUhU0RNDkzfEaW8AAEYD1
7ZpR1UtyPnBFOUn20/rd0BrfyDpNH6l7UlFfnwYtN2bPnwLumaPtT9IXra4Uj5Vy
afNGmoCd/oSF6FjX71YlqLGDjGrwWATN/hGZBmWPfL3A8gEJuxBGVtbgU6c4s/5/
OKSacd1rW9GDcrqrvKblVKPTaPMSIwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGaI
ruMBanhbPex6MFtVvUsl9PnZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjVCNzc1MDJCMzQxMUYwQUQxNEE0OEJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAGawUYDBAGawUgDBACa
xwcDBACayL8wDQYJKoZIhvcNAQELBQADggEBANMd5RAcbcvkJxQVR8ShjfmrPdmk
Wj4u5t/xRaQUwMDZFrsu+R87znNUJ9NULvWpN9EviL0YD6AZkjfvuFrYoXAYo0CT
gaY8s6YhzoQ+OcJ3w20pmUoN2/EQW6HrURIU6fe7drSwBMFIsBNIxnGHMYzQhmcV
62vvlX+FxHQUlt/pnzaIe+o6FhF9OgCGy16mtTj3byM5ePVw73/rIKY0u+zzT7a+
TjciGpourUapK2RirVOSczrcnIBbdDFDnMVqBVWiJnfpavI2OpZo10BcV1jpuSfY
nswRbs0/sdH/lNOvexqatG9E92enzV2F3sBm8o5jZjJsg3RuuOnS9CbrW0s=
-----END CERTIFICATE-----
Generated at Fri May 9 10:04:48 2025 by rpki-client