Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/C433AADC24F611F0AC7208C4DAE4EC9C.roa
File: C433AADC24F611F0AC7208C4DAE4EC9C.roa (raw, json)
Hash identifier: myZR5K6jPICi/QSE2AYyTCTq53T3GwGb50gt3dAwMB8=
Subject key identifier: 7E:D8:6E:C4:1D:CA:35:91:1A:2D:F0:E2:77:C7:59:7E:71:B0:7D:04
Certificate issuer: /CN=F365646EAF/serialNumber=55A9A4D6774E3D1C9D6BC1010074DDFA2540AA02
Certificate serial: 0279
Authority key identifier: 55:A9:A4:D6:77:4E:3D:1C:9D:6B:C1:01:00:74:DD:FA:25:40:AA:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/C433AADC24F611F0AC7208C4DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 12:37:52 +0000
ROA not before: Tue 29 Apr 2025 12:37:48 +0000
ROA not after: Sun 29 Apr 2035 12:37:48 +0000
asID: 29286
IP address blocks: 154.73.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.crl
rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365646EAF, serialNumber=55A9A4D6774E3D1C9D6BC1010074DDFA2540AA02
Validity
Not Before: Apr 29 12:37:48 2025 GMT
Not After : Apr 29 12:37:48 2035 GMT
Subject: CN=6810c820-c4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:65:18:8a:66:d8:22:4f:c1:9d:37:38:c7:
b7:7b:26:ea:63:0a:8f:66:ca:9d:0e:54:e5:9d:81:
37:e1:9f:b0:0a:70:2b:00:0e:7f:4b:88:ef:81:0d:
59:71:98:11:f8:50:30:c3:fc:b4:4f:c5:36:ca:cc:
d2:a1:a1:64:4d:52:df:85:fb:e3:e5:d1:0a:02:56:
61:3b:c3:10:29:c4:29:7c:21:c0:67:66:60:d7:83:
3c:b1:90:5c:01:43:20:55:65:83:c9:27:c4:ca:a6:
d3:c0:86:83:f3:26:9a:65:f5:d7:5d:99:01:8b:15:
00:0d:e5:8a:55:07:e7:c4:23:5b:4d:3d:0a:62:98:
2a:eb:2f:c0:21:a1:dd:35:a8:33:9e:c6:9e:e4:21:
95:17:1e:c0:33:97:11:6c:69:1d:07:9c:a6:cc:2a:
63:1c:70:cf:d2:4c:b8:01:89:9e:fb:95:9b:cd:7e:
a8:02:d7:37:7a:86:08:31:b5:62:5c:61:fc:3a:91:
b6:e3:4d:52:fb:76:c8:87:83:7b:77:49:4a:26:5a:
9b:cd:b9:2a:07:86:9b:ca:ca:20:f8:1c:bb:ac:04:
1b:80:f2:c4:5f:0e:53:f6:eb:a0:cd:c5:0b:9e:df:
ed:fe:06:c5:df:d0:8d:f3:76:1b:41:e5:5d:b9:48:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:6E:C4:1D:CA:35:91:1A:2D:F0:E2:77:C7:59:7E:71:B0:7D:04
X509v3 Authority Key Identifier:
keyid:55:A9:A4:D6:77:4E:3D:1C:9D:6B:C1:01:00:74:DD:FA:25:40:AA:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/C433AADC24F611F0AC7208C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.235.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b6:8e:6e:cd:98:13:fe:7a:6a:4e:c9:5a:8e:86:59:ab:35:
74:46:de:c4:1a:cb:16:2b:8b:c5:0e:33:78:f0:37:e5:62:e6:
7b:07:ce:e9:6c:51:48:ed:f5:25:eb:bf:4b:84:07:b9:c4:b8:
19:74:fd:8e:89:84:a5:af:ee:19:7f:85:95:56:d2:d9:92:77:
69:5c:86:b2:1a:a6:f0:b8:b9:41:d9:44:26:8a:8c:c9:25:4c:
0d:7e:f8:fc:13:da:7f:d7:ed:3c:2e:14:b2:31:3b:12:15:f6:
20:23:35:4c:51:c2:27:29:1e:72:3f:4a:68:30:f2:0c:bf:8d:
12:52:aa:4a:9f:b7:04:8a:ae:ec:36:3e:a7:4c:02:28:3c:dc:
32:1c:d2:4e:d4:52:ca:82:99:03:83:10:1b:d8:81:31:e9:c5:
b9:6e:48:d6:61:46:46:05:47:93:56:ef:0e:c8:22:6f:7f:a8:
4c:37:56:f0:d0:54:8c:32:d1:d7:66:e5:b6:dd:dd:bc:b9:8d:
a4:9f:3f:99:bf:61:fa:69:16:08:36:ee:23:fb:55:60:ff:e0:
04:29:4c:be:42:ad:b9:53:03:e1:b1:15:e6:d2:25:39:ac:36:
3c:9e:ab:99:42:98:f8:6b:c0:02:f9:5a:4f:0a:f4:1b:c3:bc:
1b:85:18:30
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTY0NkVBRjExMC8GA1UEBRMoNTVBOUE0RDY3NzRFM0QxQzlENkJDMTAxMDA3NERE
RkEyNTQwQUEwMjAeFw0yNTA0MjkxMjM3NDhaFw0zNTA0MjkxMjM3NDhaMBgxFjAU
BgNVBAMTDTY4MTBjODIwLWM0YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC892UYimbYIk/BnTc4x7d7JupjCo9myp0OVOWdgTfhn7AKcCsADn9LiO+B
DVlxmBH4UDDD/LRPxTbKzNKhoWRNUt+F++Pl0QoCVmE7wxApxCl8IcBnZmDXgzyx
kFwBQyBVZYPJJ8TKptPAhoPzJppl9dddmQGLFQAN5YpVB+fEI1tNPQpimCrrL8Ah
od01qDOexp7kIZUXHsAzlxFsaR0HnKbMKmMccM/STLgBiZ77lZvNfqgC1zd6hggx
tWJcYfw6kbbjTVL7dsiHg3t3SUomWpvNuSoHhpvKyiD4HLusBBuA8sRfDlP266DN
xQue3+3+BsXf0I3zdhtB5V25SDj7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfthu
xB3KNZEaLfDid8dZfnGwfQQwHwYDVR0jBBgwFoAUVamk1ndOPRyda8EBAHTd+iVA
qgIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2NDZFL0IwQkY0QzdBNDU3QTExRUVBNkIzM0E0QjRBRDlFNkZDL1ZhbWsx
bmRPUFJ5ZGE4RUJBSFRkLWlWQXFnSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ZhbWsxbmRPUFJ5ZGE4RUJBSFRkLWlWQXFnSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU2NDZFL0IwQkY0QzdBNDU3QTExRUVBNkIzM0E0QjRB
RDlFNkZDL0M0MzNBQURDMjRGNjExRjBBQzcyMDhDNERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaSeswDQYJKoZIhvcNAQEL
BQADggEBAFe2jm7NmBP+empOyVqOhlmrNXRG3sQayxYri8UOM3jwN+Vi5nsHzuls
UUjt9SXrv0uEB7nEuBl0/Y6JhKWv7hl/hZVW0tmSd2lchrIapvC4uUHZRCaKjMkl
TA1++PwT2n/X7TwuFLIxOxIV9iAjNUxRwicpHnI/Smgw8gy/jRJSqkqftwSKruw2
PqdMAig83DIc0k7UUsqCmQODEBvYgTHpxbluSNZhRkYFR5NW7w7IIm9/qEw3VvDQ
VIwy0ddm5bbd3by5jaSfP5m/YfppFgg27iP7VWD/4AQpTL5CrblTA+GxFebSJTms
Njyeq5lCmPhrwAL5Wk8K9BvDvBuFGDA=
-----END CERTIFICATE-----
Generated at Mon May 5 09:46:19 2025 by rpki-client