Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E7C2A42413911F0B73074F1DAE4EC9C.roa
File: 6E7C2A42413911F0B73074F1DAE4EC9C.roa (raw, json)
Hash identifier: gqeTX2/XvW0VQ51hbFjhXs5OGrcYGnuoEj0YrmpeYXU=
Subject key identifier: AD:D7:37:01:60:1C:93:83:A6:65:A4:8C:F5:66:70:43:3E:39:67:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E7C2A42413911F0B73074F1DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 11:45:38 +0000
ROA not before: Wed 04 Jun 2025 11:45:30 +0000
ROA not after: Fri 12 Jun 2026 11:45:30 +0000
asID: 3491
IP address blocks: 154.194.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99536 (0x184d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 11:45:30 2025 GMT
Not After : Jun 12 11:45:30 2026 GMT
Subject: CN=684031e2-1a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3b:15:87:65:a4:db:6e:c1:a8:c1:67:01:e0:
32:50:c6:2d:34:b7:8c:b8:dc:86:8f:ed:c9:29:2d:
5b:29:8e:0e:f1:01:74:0e:dc:7d:af:d0:df:55:9c:
cd:f5:ed:9a:6a:ef:56:c8:a2:fd:77:20:17:0e:f0:
ce:e3:a4:21:1c:77:17:bf:0f:a3:2e:01:31:be:39:
52:0f:26:5c:e2:6c:7b:7a:44:bc:f8:1b:79:8d:79:
23:ff:c0:95:a1:85:a8:b6:04:94:85:69:58:24:64:
ba:37:af:07:74:f1:d4:b4:83:f1:1c:d5:03:fa:02:
0d:6c:b4:df:ce:0b:69:6f:98:12:89:36:1b:a4:3f:
8e:52:7b:08:32:2c:12:95:c7:26:b7:2d:84:c0:00:
88:17:5f:8b:60:25:0a:20:8d:23:b9:63:db:68:55:
92:21:cd:5b:ef:61:ce:8a:c7:5a:69:ae:30:54:b5:
44:ae:cf:a9:1d:a1:7e:18:fa:30:a3:69:3f:d2:ab:
a7:91:56:01:6d:92:62:3f:23:b6:18:67:74:7c:30:
0a:f9:29:a5:1e:2b:d7:58:92:e0:c6:1c:2e:cf:40:
3c:a4:18:b4:e0:12:38:31:5e:89:a8:06:5a:e0:f0:
91:a7:30:6c:9f:65:55:ed:c0:9a:bf:0a:f0:7e:a9:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D7:37:01:60:1C:93:83:A6:65:A4:8C:F5:66:70:43:3E:39:67:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E7C2A42413911F0B73074F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.34.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f8:2d:90:38:a4:b0:41:34:87:3a:67:66:63:cb:7f:e0:57:
72:d9:43:2f:37:38:b4:04:49:93:00:60:6c:18:e5:28:93:47:
01:78:b7:f7:41:2e:80:a4:79:d9:76:6d:09:8a:02:64:4c:b7:
02:2f:15:73:24:66:26:40:f9:8a:5c:55:09:3b:f9:0f:66:f8:
23:6a:d5:03:0c:89:e9:7c:f8:cf:71:33:ff:58:6a:85:23:4e:
d6:97:6a:3f:56:73:2b:1f:0c:80:54:53:8c:25:03:5b:65:70:
3f:6c:9d:8b:13:12:91:f2:e9:8c:0a:70:5b:ee:53:04:36:1d:
99:b1:bb:3a:ec:0e:4f:5e:f1:21:e8:ef:8a:43:79:1e:78:22:
15:5d:60:44:09:28:47:e9:da:26:0b:fa:52:98:a1:8e:7a:08:
25:a8:fa:2c:10:6a:1b:a2:31:8f:08:a5:91:93:a1:a8:97:75:
3c:b0:bc:ed:ae:1d:40:ad:28:ce:71:d9:ff:22:9d:e3:30:5c:
18:95:3c:fe:47:89:af:3b:4e:59:1e:ad:bf:fd:92:bc:5e:48:
87:3f:d4:25:1f:31:f8:2f:bb:40:86:5f:1a:e4:55:24:e1:01:
75:5c:64:bf:05:08:46:ef:79:83:91:a1:e6:e5:95:5b:d7:b2:
d3:25:19:60
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYTQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjA0MTE0NTMwWhcNMjYwNjEyMTE0NTMwWjAYMRYw
FAYDVQQDEw02ODQwMzFlMi0xYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8jsVh2Wk227BqMFnAeAyUMYtNLeMuNyGj+3JKS1bKY4O8QF0Dtx9r9Df
VZzN9e2aau9WyKL9dyAXDvDO46QhHHcXvw+jLgExvjlSDyZc4mx7ekS8+Bt5jXkj
/8CVoYWotgSUhWlYJGS6N68HdPHUtIPxHNUD+gINbLTfzgtpb5gSiTYbpD+OUnsI
MiwSlccmty2EwACIF1+LYCUKII0juWPbaFWSIc1b72HOisdaaa4wVLVErs+pHaF+
GPowo2k/0qunkVYBbZJiPyO2GGd0fDAK+SmlHivXWJLgxhwuz0A8pBi04BI4MV6J
qAZa4PCRpzBsn2VV7cCavwrwfqmaWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK3X
NwFgHJODpmWkjPVmcEM+OWfPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RTdDMkE0MjQxMzkxMUYwQjczMDc0RjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIiMA0GCSqGSIb3DQEB
CwUAA4IBAQBJ+C2QOKSwQTSHOmdmY8t/4Fdy2UMvNzi0BEmTAGBsGOUok0cBeLf3
QS6ApHnZdm0JigJkTLcCLxVzJGYmQPmKXFUJO/kPZvgjatUDDInpfPjPcTP/WGqF
I07Wl2o/VnMrHwyAVFOMJQNbZXA/bJ2LExKR8umMCnBb7lMENh2Zsbs67A5PXvEh
6O+KQ3keeCIVXWBECShH6domC/pSmKGOegglqPosEGobojGPCKWRk6Gol3U8sLzt
rh1ArSjOcdn/Ip3jMFwYlTz+R4mvO05ZHq2//ZK8XkiHP9QlHzH4L7tAhl8a5FUk
4QF1XGS/BQhG73mDkaHm5ZVb17LTJRlg
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:45:37 2025 by rpki-client