Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69295FEC21A411F0ACE3968CDAE4EC9C.roa
File: 69295FEC21A411F0ACE3968CDAE4EC9C.roa (raw, json)
Hash identifier: TZRE56uCoMI04FWSHzHgzuk7lO5zDYN4GmJj6guimcc=
Subject key identifier: 0D:17:F5:F4:48:26:A2:77:4A:91:B0:19:6D:8E:72:3D:4C:CD:D0:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69295FEC21A411F0ACE3968CDAE4EC9C.roa
Signing time: Fri 25 Apr 2025 07:10:47 +0000
ROA not before: Fri 25 Apr 2025 07:10:43 +0000
ROA not after: Fri 09 May 2025 07:10:43 +0000
asID: 135097
IP address blocks: 154.91.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97009 (0x17af1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 07:10:43 2025 GMT
Not After : May 9 07:10:43 2025 GMT
Subject: CN=680b3577-be76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:5b:3a:c5:b6:9e:65:5c:c7:8a:1e:e7:ef:
eb:c5:23:d4:fb:ce:ca:6d:a2:17:37:49:3d:0c:0c:
e6:c4:27:f0:12:47:4c:82:d2:12:ad:3a:7d:34:69:
39:fc:c5:1d:85:2c:3a:57:fb:d5:82:e4:02:62:a4:
ad:f5:0c:02:71:53:ea:29:34:22:89:c0:77:10:48:
a0:15:de:eb:b1:51:c0:1b:b2:7a:5b:5e:9f:97:13:
d1:98:83:ac:0e:ec:0a:47:38:b4:65:a2:5a:09:0b:
68:e7:ab:dc:f9:43:73:4d:22:fd:31:f2:4f:b8:d7:
f7:ad:15:e9:3e:0c:1d:f5:91:cd:05:ef:9d:d3:75:
e4:1c:d6:5a:4b:a2:3e:85:37:05:ec:3d:c8:f3:cf:
06:ed:2b:ff:6d:64:57:38:46:82:6f:bd:bf:67:ff:
4b:35:fc:cf:62:0c:dc:79:cd:16:98:7c:b8:fa:4f:
ad:23:5e:6b:26:26:7b:73:51:92:36:23:a1:e8:f3:
c3:12:1b:ed:40:30:bc:ec:32:4c:03:a2:c3:f7:c6:
47:12:e1:36:f3:fe:b5:58:8f:1e:e8:c8:ee:47:a2:
3d:30:34:f9:6f:91:64:1d:b5:9f:f3:49:d5:f0:31:
d1:75:84:56:38:35:8a:c3:86:97:3c:07:fd:4d:d6:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:F5:F4:48:26:A2:77:4A:91:B0:19:6D:8E:72:3D:4C:CD:D0:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69295FEC21A411F0ACE3968CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:a8:5d:48:30:00:f2:7e:16:57:af:d4:c7:b1:99:95:da:b8:
0c:c4:26:e9:1c:5f:fb:c8:b1:7c:61:23:cd:f0:4b:1c:af:98:
cb:ab:fd:3c:9c:ec:aa:4b:82:bf:fb:51:e8:5d:bf:9e:8e:8d:
3e:73:de:1e:5f:be:39:cf:3d:5a:26:be:15:37:c7:0d:d9:96:
1a:36:fd:a5:65:da:be:ee:2b:8f:c0:80:05:4a:5f:b2:29:03:
cb:84:a0:9a:56:de:2d:24:87:60:22:b5:1e:49:4b:ab:3c:0f:
ed:3d:cf:cd:6c:d3:71:2e:53:49:a5:2c:17:5d:19:87:5e:ca:
1a:e5:43:a8:a9:f1:cc:12:90:d3:12:51:40:4c:27:9e:1e:20:
9f:6e:29:76:af:0f:20:d0:b5:42:f3:87:b8:56:ff:db:9e:24:
94:a0:2b:5a:18:ff:8e:01:2a:fd:c2:e3:1b:3a:8e:6d:8c:c7:
0c:d1:f9:4a:34:cf:b5:c7:f7:73:fa:fc:39:ee:79:5f:d4:04:
55:7a:90:bc:b3:e4:61:e4:fd:e3:46:e8:b2:4f:6b:98:9b:66:
9e:0f:1d:96:5a:44:ec:29:69:0a:ad:dc:6b:4d:4c:bf:25:74:
3c:f5:e0:38:2a:69:af:24:d7:c5:55:7f:28:b1:87:bb:ee:2c:
be:f8:15:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXrxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI1MDcxMDQzWhcNMjUwNTA5MDcxMDQzWjAYMRYw
FAYDVQQDEw02ODBiMzU3Ny1iZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzgdbOsW2nmVcx4oe5+/rxSPU+87KbaIXN0k9DAzmxCfwEkdMgtISrTp9
NGk5/MUdhSw6V/vVguQCYqSt9QwCcVPqKTQiicB3EEigFd7rsVHAG7J6W16flxPR
mIOsDuwKRzi0ZaJaCQto56vc+UNzTSL9MfJPuNf3rRXpPgwd9ZHNBe+d03XkHNZa
S6I+hTcF7D3I888G7Sv/bWRXOEaCb72/Z/9LNfzPYgzcec0WmHy4+k+tI15rJiZ7
c1GSNiOh6PPDEhvtQDC87DJMA6LD98ZHEuE28/61WI8e6MjuR6I9MDT5b5FkHbWf
80nV8DHRdYRWODWKw4aXPAf9TdZ/QQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA0X
9fRIJqJ3SpGwGW2Ocj1MzdBtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OTI5NUZFQzIxQTQxMUYwQUNFMzk2OENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlsEMA0GCSqGSIb3DQEB
CwUAA4IBAQC6qF1IMADyfhZXr9THsZmV2rgMxCbpHF/7yLF8YSPN8Escr5jLq/08
nOyqS4K/+1HoXb+ejo0+c94eX745zz1aJr4VN8cN2ZYaNv2lZdq+7iuPwIAFSl+y
KQPLhKCaVt4tJIdgIrUeSUurPA/tPc/NbNNxLlNJpSwXXRmHXsoa5UOoqfHMEpDT
ElFATCeeHiCfbil2rw8g0LVC84e4Vv/bniSUoCtaGP+OASr9wuMbOo5tjMcM0flK
NM+1x/dz+vw57nlf1ARVepC8s+Rh5P3jRuiyT2uYm2aeDx2WWkTsKWkKrdxrTUy/
JXQ89eA4KmmvJNfFVX8osYe77iy++BV/
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:48:27 2025 by rpki-client