Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FB08110439611F0BFA52CCADAE4EC9C.roa
File: 1FB08110439611F0BFA52CCADAE4EC9C.roa (raw, json)
Hash identifier: UiGbjYkNP6sGLbRaL2mthL35dHPEI/8lMl8ZtwlxAfg=
Subject key identifier: EB:4C:7D:8D:AC:84:BF:CE:5E:5C:57:A6:E4:CC:50:27:91:BA:1B:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01855C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FB08110439611F0BFA52CCADAE4EC9C.roa
Signing time: Sat 07 Jun 2025 11:54:11 +0000
ROA not before: Sat 07 Jun 2025 11:54:06 +0000
ROA not after: Sun 31 Aug 2025 11:54:06 +0000
asID: 399077
IP address blocks: 154.211.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99676 (0x1855c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 11:54:06 2025 GMT
Not After : Aug 31 11:54:06 2025 GMT
Subject: CN=68442863-a0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:01:ee:2f:85:fd:7c:13:ca:b2:94:96:65:
a3:8c:95:fb:5d:78:96:c5:50:8a:90:9d:00:92:d3:
24:1d:4a:b8:a1:61:b4:ef:75:32:59:24:a9:e3:a2:
04:54:0e:d6:e4:0a:9a:81:b6:3b:0c:3f:a9:62:88:
10:bb:df:2f:a9:2f:52:43:79:97:63:3c:68:41:8c:
8b:60:52:d7:27:a0:13:d3:a3:6c:10:88:e6:99:17:
7f:42:91:f1:de:89:57:90:85:0e:a8:fb:6f:1b:9d:
52:e3:f5:08:f7:6d:db:07:51:ae:47:01:6e:db:75:
9e:3d:b1:92:49:65:0c:56:af:34:67:0e:c5:36:30:
f1:76:51:0f:a1:02:3d:f2:f8:22:7c:c4:34:18:bf:
60:11:8a:ac:af:9e:e5:f3:1f:ad:cb:54:2b:ac:d8:
03:ca:00:28:c3:90:82:22:8b:35:81:28:73:f6:87:
02:76:08:4a:cd:37:8a:aa:6c:c0:02:34:fa:04:a3:
7b:73:0e:04:aa:cd:ec:f5:d2:22:81:9f:5b:6b:96:
19:c9:c7:14:53:48:5f:95:f3:00:46:c2:7f:10:8c:
22:ae:98:6e:29:87:84:f0:3c:be:9e:08:3b:af:91:
f9:3e:7b:64:53:5a:94:a9:55:99:41:65:fd:72:3c:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:7D:8D:AC:84:BF:CE:5E:5C:57:A6:E4:CC:50:27:91:BA:1B:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FB08110439611F0BFA52CCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.64.0/18
Signature Algorithm: sha256WithRSAEncryption
97:88:be:c6:a1:0a:f0:45:40:78:89:a0:bd:9e:7b:e6:74:7d:
a3:7d:82:98:e9:9e:8d:55:a2:26:06:cd:6b:38:69:3e:51:6d:
41:5c:bb:ab:3b:87:91:82:70:dd:cd:08:41:2b:65:12:72:83:
78:81:85:d5:80:be:27:59:ae:53:04:cb:c4:9d:29:f7:a2:37:
7a:00:b2:76:f7:20:f9:58:bf:01:81:72:a6:5d:29:31:54:62:
da:f9:17:0e:14:fe:35:64:c4:53:8e:32:10:13:8a:cf:8a:8d:
ef:e5:8e:8c:34:d9:b5:a3:48:a5:85:9e:3f:4e:ca:fd:0e:23:
95:90:b5:2c:81:63:d3:6b:54:56:6f:84:dc:dc:5f:7d:94:05:
ec:a2:dc:db:e2:1d:27:20:75:50:81:c5:c1:1b:54:09:05:f8:
33:7d:06:4a:b9:57:dc:43:5a:e1:f6:94:73:ed:fc:73:4e:cc:
d1:4f:6f:18:5c:0c:72:35:ea:1e:7e:6d:81:6a:eb:b9:24:8e:
60:c1:24:35:9e:e7:27:0d:99:1f:00:33:8b:9b:8f:0a:3d:eb:
64:ef:61:db:0b:bc:7a:51:30:90:3b:30:38:c0:a6:6e:e1:d5:
84:88:37:f7:8d:6f:fc:9a:45:2b:34:98:ef:ab:d6:cc:07:5c:
60:05:59:b4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYVcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA3MTE1NDA2WhcNMjUwODMxMTE1NDA2WjAYMRYw
FAYDVQQDEw02ODQ0Mjg2My1hMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3kUB7i+F/XwTyrKUlmWjjJX7XXiWxVCKkJ0AktMkHUq4oWG073UyWSSp
46IEVA7W5AqagbY7DD+pYogQu98vqS9SQ3mXYzxoQYyLYFLXJ6AT06NsEIjmmRd/
QpHx3olXkIUOqPtvG51S4/UI923bB1GuRwFu23WePbGSSWUMVq80Zw7FNjDxdlEP
oQI98vgifMQ0GL9gEYqsr57l8x+ty1QrrNgDygAow5CCIos1gShz9ocCdghKzTeK
qmzAAjT6BKN7cw4Eqs3s9dIigZ9ba5YZyccUU0hflfMARsJ/EIwirphuKYeE8Dy+
ngg7r5H5PntkU1qUqVWZQWX9cjwvHQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOtM
fY2shL/OXlxXpuTMUCeRuhvDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRkIwODExMDQzOTYxMUYwQkZBNTJDQ0FEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmtNAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXiL7GoQrwRUB4iaC9nnvmdH2jfYKY6Z6NVaImBs1rOGk+UW1BXLur
O4eRgnDdzQhBK2UScoN4gYXVgL4nWa5TBMvEnSn3ojd6ALJ29yD5WL8BgXKmXSkx
VGLa+RcOFP41ZMRTjjIQE4rPio3v5Y6MNNm1o0ilhZ4/Tsr9DiOVkLUsgWPTa1RW
b4Tc3F99lAXsotzb4h0nIHVQgcXBG1QJBfgzfQZKuVfcQ1rh9pRz7fxzTszRT28Y
XAxyNeoefm2Bauu5JI5gwSQ1nucnDZkfADOLm48KPetk72HbC7x6UTCQOzA4wKZu
4dWEiDf3jW/8mkUrNJjvq9bMB1xgBVm0
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:34:44 2025 by rpki-client