Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1D091C114011F08460F17E762E951A.roa
File: 3E1D091C114011F08460F17E762E951A.roa (raw, json)
Hash identifier: dHNMSezHMWtA4/g0TWbq+bmGaLFOPRQYVDQLNv05QFc=
Subject key identifier: F9:17:4D:42:D4:02:C5:08:F8:7F:39:0A:17:CA:B4:F3:7E:E7:A7:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1D091C114011F08460F17E762E951A.roa
Signing time: Fri 04 Apr 2025 10:33:27 +0000
ROA not before: Fri 04 Apr 2025 10:33:23 +0000
ROA not after: Tue 07 Apr 2026 10:33:23 +0000
asID: 13335
IP address blocks: 154.81.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96184 (0x177b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 4 10:33:23 2025 GMT
Not After : Apr 7 10:33:23 2026 GMT
Subject: CN=67efb577-b860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:ae:72:41:fc:46:be:be:f8:ae:c5:0d:4a:
40:be:70:79:9a:ed:96:aa:7b:f0:83:62:9e:90:df:
1e:d8:67:f1:50:30:ef:13:8e:d0:30:02:32:fb:55:
d5:9a:68:88:ca:72:1e:c4:2d:7f:96:aa:46:12:aa:
da:4c:9d:12:40:44:79:c3:6f:71:f4:c0:55:8b:af:
78:7b:d2:26:8a:24:51:58:c4:12:59:f7:7f:b9:ad:
cf:72:5f:a2:79:b7:63:ca:c2:59:16:7f:a5:a9:6f:
91:3a:bc:97:3b:fb:57:68:2f:51:49:4b:57:46:dd:
0e:a0:b7:08:4e:21:28:fc:cb:17:1b:18:81:61:3b:
5a:a8:fe:b0:b7:6e:c4:09:a4:2f:90:29:9c:8a:5b:
7c:9a:68:61:07:65:97:7f:51:6f:35:33:60:b0:10:
a9:79:ba:64:7f:12:50:b8:64:cd:af:43:9a:e0:a8:
a6:b0:76:05:4a:dd:f1:a2:be:4e:fe:39:ec:cb:f5:
50:7a:18:cf:a9:f4:13:a3:cd:5b:ef:d9:92:db:c8:
8c:46:89:fb:3e:88:bc:e1:dd:71:ec:12:c8:ce:71:
6a:75:ce:9b:a3:42:d2:19:c2:24:55:7c:bb:21:67:
7d:fa:8b:57:29:4e:50:18:d8:66:76:dc:88:8d:c4:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:4D:42:D4:02:C5:08:F8:7F:39:0A:17:CA:B4:F3:7E:E7:A7:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1D091C114011F08460F17E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.141.0/24
Signature Algorithm: sha256WithRSAEncryption
45:91:2d:6f:7e:d7:ef:82:79:b3:fc:b3:a1:9d:b3:7f:60:53:
f6:57:b9:0d:2f:a2:e7:30:4c:6c:db:b9:13:0a:ca:46:6c:17:
7c:02:b1:87:a7:b0:13:97:ce:75:c8:97:08:fc:4c:8e:82:7b:
97:97:b0:b0:b9:a9:f2:a6:47:88:d7:0f:08:6d:14:8f:bf:2e:
e9:dd:57:08:7b:49:8e:50:92:84:2e:e1:31:c0:f7:a2:c9:0e:
1d:bb:ce:8b:e9:ba:50:ee:87:4f:ce:e7:bc:87:b8:b8:24:bc:
13:11:05:c1:9f:85:f1:df:08:5d:82:93:66:5e:43:e6:08:13:
68:48:6d:0f:bf:3a:44:06:17:d4:ef:53:7b:d3:e0:40:79:21:
8e:c1:a6:cc:12:f9:75:4a:18:a5:ca:a4:40:90:f9:1c:65:d4:
e2:57:c0:38:35:16:2e:79:7b:6c:72:a5:ca:af:da:e0:f7:f0:
a9:de:09:45:14:57:12:83:3b:a6:0c:8e:00:35:47:ec:76:fb:
25:40:66:eb:cd:3f:d6:13:4f:c1:66:fe:52:87:5d:44:0c:d1:
88:3c:18:d2:ba:bc:7e:d4:e9:78:46:84:79:ec:c5:15:40:f4:
8d:74:95:fb:3c:dd:3a:99:ed:e4:16:bb:4c:a0:ac:c5:61:b3:
c3:f4:79:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXe4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA0MTAzMzIzWhcNMjYwNDA3MTAzMzIzWjAYMRYw
FAYDVQQDEw02N2VmYjU3Ny1iODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAujeuckH8Rr6++K7FDUpAvnB5mu2Wqnvwg2KekN8e2GfxUDDvE47QMAIy
+1XVmmiIynIexC1/lqpGEqraTJ0SQER5w29x9MBVi694e9ImiiRRWMQSWfd/ua3P
cl+iebdjysJZFn+lqW+ROryXO/tXaC9RSUtXRt0OoLcITiEo/MsXGxiBYTtaqP6w
t27ECaQvkCmcilt8mmhhB2WXf1FvNTNgsBCpebpkfxJQuGTNr0Oa4KimsHYFSt3x
or5O/jnsy/VQehjPqfQTo81b79mS28iMRon7Poi84d1x7BLIznFqdc6bo0LSGcIk
VXy7IWd9+otXKU5QGNhmdtyIjcRHnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPkX
TULUAsUI+H85ChfKtPN+56frMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRTFEMDkxQzExNDAxMUYwODQ2MEYxN0U3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlGNMA0GCSqGSIb3DQEB
CwUAA4IBAQBFkS1vftfvgnmz/LOhnbN/YFP2V7kNL6LnMExs27kTCspGbBd8ArGH
p7ATl851yJcI/EyOgnuXl7CwuanypkeI1w8IbRSPvy7p3VcIe0mOUJKELuExwPei
yQ4du86L6bpQ7odPzue8h7i4JLwTEQXBn4Xx3whdgpNmXkPmCBNoSG0PvzpEBhfU
71N70+BAeSGOwabMEvl1ShilyqRAkPkcZdTiV8A4NRYueXtscqXKr9rg9/Cp3glF
FFcSgzumDI4ANUfsdvslQGbrzT/WE0/BZv5Sh11EDNGIPBjSurx+1Ol4RoR57MUV
QPSNdJX7PN06me3kFrtMoKzFYbPD9HlU
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:36 2025 by rpki-client