Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF218AE8241E11F0B77FE89ADAE4EC9C.roa
File: FF218AE8241E11F0B77FE89ADAE4EC9C.roa (raw, json)
Hash identifier: nEuy9eyGaN2S3/uTVaYQGHNCg//ewvQ9guHmyjB6JYo=
Subject key identifier: D5:CF:5E:6C:DC:8D:0C:C0:80:E0:7F:1E:03:28:6B:96:E6:DE:10:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF218AE8241E11F0B77FE89ADAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:53:20 +0000
ROA not before: Mon 28 Apr 2025 10:53:15 +0000
ROA not after: Sat 31 May 2025 10:53:15 +0000
asID: 398704
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 01:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97138 (0x17b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:53:15 2025 GMT
Not After : May 31 10:53:15 2025 GMT
Subject: CN=680f5e20-8f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:e2:1e:89:77:e8:9d:b6:4d:b3:60:c8:bd:
00:ee:0a:1e:75:1a:9f:ac:38:9b:50:1e:74:3f:b7:
79:79:bb:4f:9b:75:cf:40:b4:11:23:24:90:78:d4:
a2:7e:0b:5d:f7:af:76:71:f2:7c:6d:02:dc:ad:28:
a9:d7:4f:c0:a5:ae:e7:fe:97:89:26:6e:4e:6d:99:
73:f0:cf:c8:34:e9:96:de:97:9a:08:08:e6:a4:d5:
42:07:85:f9:4b:04:2c:ea:7f:e8:dc:51:de:9c:03:
44:0f:d8:16:15:ec:9c:95:ba:ad:4f:f0:60:f0:e9:
c6:36:2b:b4:97:50:7e:53:c9:c5:bc:0e:71:86:d7:
c4:07:63:b5:21:1f:e7:d2:d7:02:c0:f8:40:aa:b6:
57:1a:05:ac:e6:fa:57:c0:90:bf:2c:65:3e:16:53:
fe:c0:fb:50:aa:ad:c8:e1:ed:a4:8c:6b:cd:1d:34:
37:a7:60:ba:29:a8:dd:49:80:ad:58:8e:c9:46:64:
88:b5:99:b2:bf:04:b9:24:b0:93:89:0d:09:41:86:
07:8a:b5:a5:28:8f:80:7c:70:0c:e0:02:bf:3a:35:
a1:d5:71:f4:ee:62:92:20:7d:29:60:27:e1:3f:6b:
db:19:8f:2d:e7:48:2d:18:ed:e8:74:96:20:ac:ba:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CF:5E:6C:DC:8D:0C:C0:80:E0:7F:1E:03:28:6B:96:E6:DE:10:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF218AE8241E11F0B77FE89ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
41:5d:8e:20:a1:11:ae:83:82:0b:09:ef:bd:d8:4d:7b:e5:a6:
9b:ed:ce:80:05:f4:09:56:5c:61:38:90:76:b5:fc:f4:02:4b:
d0:29:4e:87:c0:ea:de:6f:b1:c5:18:08:fe:56:48:78:c9:3c:
58:91:86:95:29:98:dd:d4:2a:c5:37:a2:47:3e:71:e5:28:fc:
c0:fa:c3:16:ad:4f:8a:b2:d3:1d:07:15:44:1f:66:15:18:15:
57:5c:55:18:23:10:5a:75:0a:e4:9a:0d:43:1b:40:84:d3:53:
d9:46:59:2e:d7:5b:50:24:9f:62:8f:63:73:3f:f8:8f:48:04:
67:21:fe:cb:e2:e3:bd:0c:a1:a2:87:c7:33:92:a1:ab:fa:42:
9b:10:49:0d:e5:24:53:ea:c4:38:25:ce:7d:89:1d:b8:ac:4a:
50:e0:04:3f:af:ba:b5:34:f9:c5:e7:91:69:00:48:23:c2:de:
be:77:5a:d2:eb:ce:2a:3b:aa:26:2f:81:e7:b2:ed:72:94:83:
0b:9f:7f:a6:e4:8d:41:b0:5d:4e:15:7a:a0:f2:6e:f6:45:75:
f8:41:99:b9:99:b5:95:ad:76:22:51:47:77:76:c5:70:0e:06:
66:99:b6:95:64:f6:bf:4a:6f:83:74:23:38:73:e2:9c:71:87:
e2:7b:7d:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXtyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTA1MzE1WhcNMjUwNTMxMTA1MzE1WjAYMRYw
FAYDVQQDEw02ODBmNWUyMC04ZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA42fiHol36J22TbNgyL0A7goedRqfrDibUB50P7d5ebtPm3XPQLQRIySQ
eNSifgtd9692cfJ8bQLcrSip10/Apa7n/peJJm5ObZlz8M/INOmW3peaCAjmpNVC
B4X5SwQs6n/o3FHenANED9gWFeyclbqtT/Bg8OnGNiu0l1B+U8nFvA5xhtfEB2O1
IR/n0tcCwPhAqrZXGgWs5vpXwJC/LGU+FlP+wPtQqq3I4e2kjGvNHTQ3p2C6Kajd
SYCtWI7JRmSItZmyvwS5JLCTiQ0JQYYHirWlKI+AfHAM4AK/OjWh1XH07mKSIH0p
YCfhP2vbGY8t50gtGO3odJYgrLrrwQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNXP
XmzcjQzAgOB/HgMoa5bm3hDVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjIxOEFFODI0MUUxMUYwQjc3RkU4OUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlyAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBXY4goRGug4ILCe+92E175aab7c6ABfQJVlxhOJB2tfz0AkvQKU6H
wOreb7HFGAj+Vkh4yTxYkYaVKZjd1CrFN6JHPnHlKPzA+sMWrU+KstMdBxVEH2YV
GBVXXFUYIxBadQrkmg1DG0CE01PZRlku11tQJJ9ij2NzP/iPSARnIf7L4uO9DKGi
h8czkqGr+kKbEEkN5SRT6sQ4Jc59iR24rEpQ4AQ/r7q1NPnF55FpAEgjwt6+d1rS
684qO6omL4Hnsu1ylIMLn3+m5I1BsF1OFXqg8m72RXX4QZm5mbWVrXYiUUd3dsVw
DgZmmbaVZPa/Sm+DdCM4c+KccYfie32k
-----END CERTIFICATE-----
Generated at Sun May 11 01:48:30 2025 by rpki-client