Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FADECC5428B311F0BA09F4CDDAE4EC9C.roa
File: FADECC5428B311F0BA09F4CDDAE4EC9C.roa (raw, json)
Hash identifier: E00uOzjpjCALMWfiAlFz8tL5Wi/dn+ME3V4DQQiEEvM=
Subject key identifier: 28:49:4E:8A:16:08:DB:44:9E:5F:0D:B1:F5:25:37:A7:50:A4:51:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FADECC5428B311F0BA09F4CDDAE4EC9C.roa
Signing time: Sun 04 May 2025 06:49:53 +0000
ROA not before: Sun 04 May 2025 06:49:48 +0000
ROA not after: Sun 08 Jun 2025 06:49:48 +0000
asID: 57043
IP address blocks: 154.222.138.0/23 maxlen: 24
154.222.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 08 May 2025 00:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97960 (0x17ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 06:49:48 2025 GMT
Not After : Jun 8 06:49:48 2025 GMT
Subject: CN=68170e10-433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:7e:9b:ca:84:bc:9d:dd:04:55:8e:04:f2:
b3:2c:9b:9a:b6:e7:38:7c:8d:dc:0f:6e:b4:3c:39:
f2:b8:22:56:c7:20:25:5f:22:53:60:65:1a:5d:08:
30:a9:a2:2a:c1:79:57:2c:db:b5:a9:cc:3d:1b:63:
5e:ab:d9:9d:1a:aa:20:2e:ee:db:31:aa:38:54:de:
83:4f:7f:bb:97:90:c8:eb:e6:68:7f:be:f0:af:92:
2d:c8:d7:a4:3f:e7:a5:91:12:8f:e3:b3:7a:91:ea:
9c:6e:64:77:70:f0:05:2b:2f:2e:64:f1:d7:e6:80:
87:39:21:44:b2:9e:9e:ed:62:ef:3c:97:2d:75:18:
07:d5:43:45:a5:52:54:98:05:97:d2:dc:f5:56:64:
3e:a6:8a:94:2c:ef:e4:2b:5f:c4:86:4e:ab:0c:7c:
51:eb:e4:e8:b6:11:3a:1c:3f:59:56:95:cd:e2:b2:
4d:f8:8e:32:eb:8e:23:2b:6c:b0:d6:83:1f:0b:91:
b3:46:77:4e:cf:82:7d:18:66:c3:80:92:e2:e2:0c:
6b:fc:44:29:04:b9:14:2a:00:e3:04:41:88:71:ec:
93:41:cf:22:4a:3f:29:84:e4:ea:0c:b7:e0:02:7f:
80:65:16:aa:0d:19:6f:5f:a5:4a:e5:04:f5:0f:d6:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:4E:8A:16:08:DB:44:9E:5F:0D:B1:F5:25:37:A7:50:A4:51:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FADECC5428B311F0BA09F4CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.138.0/23
154.222.144.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:d3:3e:37:45:d4:13:c2:7a:46:c0:69:2a:35:23:c0:fa:8f:
c9:6e:15:da:e9:70:80:7d:66:69:59:03:fd:b4:94:20:cc:02:
da:f7:f1:f1:62:67:69:10:7a:4f:b3:d4:c7:91:35:a4:e2:9e:
5a:0c:8f:26:c9:9d:f5:fa:b9:25:b5:a1:93:c4:ad:d6:d9:0d:
11:12:42:4b:d2:f4:3e:57:5c:2e:30:b2:4e:52:a4:66:81:c7:
bb:b0:09:c1:cb:41:7b:e7:c2:1a:e9:47:a7:0b:43:2c:38:b5:
e6:7f:7d:be:f9:84:8b:61:a6:7c:d7:ea:5d:bb:52:05:1c:bc:
e6:b5:e1:b3:a5:9b:9c:61:83:2a:2a:f0:e1:0e:ea:87:12:d0:
35:a6:f2:91:8e:a8:9d:6b:e2:9e:48:be:57:e6:13:8e:6f:7f:
38:63:4f:89:66:78:21:bb:5e:c9:fa:fd:a8:ac:75:f2:c8:a2:
1d:fa:3f:d5:d1:cc:65:91:f2:b8:b7:a0:0b:d9:a1:76:f1:07:
8b:78:6c:44:c3:14:51:fe:85:c5:4f:07:5b:3f:46:14:3b:b4:
1b:89:d9:61:2c:a8:b7:5e:53:d2:22:6a:0e:0e:49:56:c6:9f:
df:96:f7:25:27:46:4f:e8:bd:f9:95:ea:ba:af:d7:b3:d7:f2:
53:32:26:bb
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAX6oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA0MDY0OTQ4WhcNMjUwNjA4MDY0OTQ4WjAYMRYw
FAYDVQQDEw02ODE3MGUxMC00MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmrR+m8qEvJ3dBFWOBPKzLJuatuc4fI3cD260PDnyuCJWxyAlXyJTYGUa
XQgwqaIqwXlXLNu1qcw9G2Neq9mdGqogLu7bMao4VN6DT3+7l5DI6+Zof77wr5It
yNekP+elkRKP47N6keqcbmR3cPAFKy8uZPHX5oCHOSFEsp6e7WLvPJctdRgH1UNF
pVJUmAWX0tz1VmQ+poqULO/kK1/Ehk6rDHxR6+TothE6HD9ZVpXN4rJN+I4y644j
K2yw1oMfC5GzRndOz4J9GGbDgJLi4gxr/EQpBLkUKgDjBEGIceyTQc8iSj8phOTq
DLfgAn+AZRaqDRlvX6VK5QT1D9ZttwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFChJ
TooWCNtEnl8NsfUlN6dQpFF4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQURFQ0M1NDI4QjMxMUYwQkEwOUY0Q0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmt6KAwQBmt6QMA0GCSqG
SIb3DQEBCwUAA4IBAQDE0z43RdQTwnpGwGkqNSPA+o/JbhXa6XCAfWZpWQP9tJQg
zALa9/HxYmdpEHpPs9THkTWk4p5aDI8myZ31+rkltaGTxK3W2Q0REkJL0vQ+V1wu
MLJOUqRmgce7sAnBy0F758Ia6UenC0MsOLXmf32++YSLYaZ81+pdu1IFHLzmteGz
pZucYYMqKvDhDuqHEtA1pvKRjqida+KeSL5X5hOOb384Y0+JZnghu17J+v2orHXy
yKId+j/V0cxlkfK4t6AL2aF28QeLeGxEwxRR/oXFTwdbP0YUO7QbidlhLKi3XlPS
ImoODklWxp/flvclJ0ZP6L35leq6r9ez1/JTMia7
-----END CERTIFICATE-----
Generated at Tue May 6 03:21:07 2025 by rpki-client