Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7CAC5C299811F0BAD7AEC1DAE4EC9C.roa
File: 1C7CAC5C299811F0BAD7AEC1DAE4EC9C.roa (raw, json)
Hash identifier: XhdTQJVv+WtkRfznGHFN2gHmu3++lAy/vllaw8KwtuM=
Subject key identifier: F0:B3:54:77:3D:AF:3A:2F:06:10:D6:10:6A:51:2B:80:8C:3A:8C:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7CAC5C299811F0BAD7AEC1DAE4EC9C.roa
Signing time: Mon 05 May 2025 10:02:54 +0000
ROA not before: Mon 05 May 2025 10:02:49 +0000
ROA not after: Wed 03 May 2028 10:02:49 +0000
asID: 17561
IP address blocks: 154.218.2.0/24 maxlen: 24
154.218.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98049 (0x17f01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 10:02:49 2025 GMT
Not After : May 3 10:02:49 2028 GMT
Subject: CN=68188cce-360a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:10:7b:4d:f3:37:b0:b7:84:34:4d:b9:13:
17:c4:44:e8:33:01:b4:d9:1b:44:e7:81:23:8b:51:
23:e4:0f:01:e9:a8:d9:19:82:d3:1b:52:ad:ab:99:
6f:78:0a:a9:19:cd:02:47:e6:8e:7c:3c:89:0f:4a:
28:b0:57:06:0f:5a:bc:17:a1:1a:1c:db:8f:97:8e:
4c:4c:58:3f:1b:11:ec:94:26:a7:3c:7f:ad:60:90:
48:4a:1b:0c:d6:0c:c6:3f:f7:3f:53:de:31:2a:7a:
e8:ce:8d:2c:8f:9d:fc:2d:cd:f9:a2:5c:b7:84:49:
18:20:da:3a:8a:26:29:be:05:d6:a9:70:4e:08:66:
7b:78:ed:ad:80:43:b5:d6:c5:1a:42:d1:11:1b:fb:
2e:e6:ec:cf:b9:be:ed:71:7b:6d:4a:25:f6:8a:13:
09:e1:5c:f2:29:b6:ce:ab:a0:d4:9c:e4:2a:0f:2c:
04:43:07:2e:19:72:34:e8:00:87:88:ce:97:23:14:
3e:18:9e:37:fb:8e:7d:13:1a:dc:69:5e:14:0d:47:
c3:5e:e6:54:5f:ee:b5:99:0e:5c:95:4e:a0:66:e9:
6c:d7:1d:d4:59:8b:c8:d3:61:dd:ff:df:29:df:e9:
1e:7e:de:aa:dc:ac:b3:ca:30:19:72:cc:ae:7c:48:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:54:77:3D:AF:3A:2F:06:10:D6:10:6A:51:2B:80:8C:3A:8C:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7CAC5C299811F0BAD7AEC1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.2.0/24
154.218.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1d:31:51:9b:95:9e:de:f4:39:7e:3f:27:7e:29:a3:b0:57:
ff:6b:29:1b:0d:58:c4:2e:46:fc:c0:f4:e1:ac:c8:89:aa:4f:
e9:cd:07:d7:14:98:8c:99:29:11:75:61:9a:94:fc:61:8e:f3:
0e:53:d2:4f:06:87:06:ac:10:a5:ab:ff:ee:36:a1:92:b4:06:
fe:52:45:3e:8e:f2:0e:28:23:a8:4b:ba:6f:4d:84:97:ec:19:
e0:69:6d:bc:b3:b2:2a:68:7d:f9:ba:75:d6:0c:36:1d:13:83:
fd:ed:74:93:43:01:76:3d:ee:51:5b:03:2e:c4:62:4b:27:03:
c7:07:59:2d:77:e1:4e:a7:7d:e4:3c:1e:50:23:83:aa:1d:ce:
c9:72:f9:37:24:0d:90:67:4d:0e:43:8c:bc:6d:3b:fd:f4:e2:
af:aa:26:eb:bc:eb:cc:5d:cf:51:47:6c:e0:8e:93:02:6b:5e:
69:54:62:57:60:0a:b5:9c:40:ae:32:3a:64:b5:7e:a3:18:8f:
6c:6e:3e:3c:41:5f:d6:6d:eb:cb:ce:85:75:55:70:41:db:95:
88:fd:c7:01:4b:e0:36:36:cb:9e:1d:ad:4c:56:22:8b:bc:fd:
7e:0c:f3:47:5f:51:7b:3c:05:27:05:be:16:0f:c1:96:aa:e7:
ea:4f:af:6e
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAX8BMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA1MTAwMjQ5WhcNMjgwNTAzMTAwMjQ5WjAYMRYw
FAYDVQQDEw02ODE4OGNjZS0zNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArK8Qe03zN7C3hDRNuRMXxEToMwG02RtE54Eji1Ej5A8B6ajZGYLTG1Kt
q5lveAqpGc0CR+aOfDyJD0oosFcGD1q8F6EaHNuPl45MTFg/GxHslCanPH+tYJBI
ShsM1gzGP/c/U94xKnrozo0sj538Lc35oly3hEkYINo6iiYpvgXWqXBOCGZ7eO2t
gEO11sUaQtERG/su5uzPub7tcXttSiX2ihMJ4VzyKbbOq6DUnOQqDywEQwcuGXI0
6ACHiM6XIxQ+GJ43+459ExrcaV4UDUfDXuZUX+61mQ5clU6gZuls1x3UWYvI02Hd
/98p3+keft6q3KyzyjAZcsyufEigLQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPCz
VHc9rzovBhDWEGpRK4CMOowlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQzdDQUM1QzI5OTgxMUYwQkFEN0FFQzFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmtoCAwQAmtoEMA0GCSqG
SIb3DQEBCwUAA4IBAQCoHTFRm5We3vQ5fj8nfimjsFf/aykbDVjELkb8wPThrMiJ
qk/pzQfXFJiMmSkRdWGalPxhjvMOU9JPBocGrBClq//uNqGStAb+UkU+jvIOKCOo
S7pvTYSX7BngaW28s7IqaH35unXWDDYdE4P97XSTQwF2Pe5RWwMuxGJLJwPHB1kt
d+FOp33kPB5QI4OqHc7Jcvk3JA2QZ00OQ4y8bTv99OKvqibrvOvMXc9RR2zgjpMC
a15pVGJXYAq1nECuMjpktX6jGI9sbj48QV/WbevLzoV1VXBB25WI/ccBS+A2Nsue
Ha1MViKLvP1+DPNHX1F7PAUnBb4WD8GWqufqT69u
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:02:05 2025 by rpki-client