Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB33C6E1F5D11F08EACCDCDDAE4EC9C.roa
File: 7EB33C6E1F5D11F08EACCDCDDAE4EC9C.roa (raw, json)
Hash identifier: fuhYaTkgiY3GIglw4YFkocYVJvEb7GkOPd9Xvd0jPz4=
Subject key identifier: B0:31:8A:05:F0:D4:66:DD:A2:FA:2E:CA:8E:A2:42:A7:A1:D9:C6:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB33C6E1F5D11F08EACCDCDDAE4EC9C.roa
Signing time: Tue 22 Apr 2025 09:38:07 +0000
ROA not before: Tue 22 Apr 2025 09:38:02 +0000
ROA not after: Sun 08 Jun 2025 09:38:02 +0000
asID: 21859
IP address blocks: 154.83.71.0/24 maxlen: 24
154.83.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96906 (0x17a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 22 09:38:02 2025 GMT
Not After : Jun 8 09:38:02 2025 GMT
Subject: CN=6807637f-a509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:b6:b7:3c:71:7f:69:b0:1b:bc:b5:94:11:
54:6a:7f:a7:86:df:64:e9:67:cb:93:6a:45:fb:0a:
57:ec:8a:c0:bf:ed:32:ad:80:85:15:0d:10:b8:36:
47:5d:d4:cc:33:3c:c1:e6:17:4e:d5:e3:06:a8:23:
0f:82:75:9c:17:b8:34:c9:31:bd:72:bb:ab:5f:53:
d9:06:f2:a8:09:9b:bc:c7:04:cf:33:b1:8d:c5:b2:
44:44:61:43:81:ed:a7:da:fe:ae:e3:9e:1f:59:eb:
0b:36:16:a1:9c:2f:1c:c7:4b:0b:1c:e8:63:b0:b3:
1a:d1:f2:b7:e3:7c:cb:83:ce:f8:fb:47:83:d8:11:
be:f5:d7:f6:d0:d9:03:da:74:96:fc:c0:a8:b7:cd:
e0:69:41:a9:92:f9:d7:9e:02:59:68:49:ce:8c:8a:
79:3a:a3:9e:0c:59:a0:45:9a:3e:2c:79:80:44:1b:
6c:ea:09:e1:3b:de:74:98:56:16:b9:b6:63:8d:05:
ac:32:cd:a6:bd:74:87:0d:d0:f7:54:bd:66:88:a1:
8c:02:88:6b:4e:6c:df:3e:a7:26:f2:b9:f6:f9:43:
91:ba:0b:52:35:9e:36:71:89:8c:c5:90:c3:31:a2:
91:18:25:fe:ee:d1:f5:4f:4e:5a:35:3a:2e:36:7e:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:8A:05:F0:D4:66:DD:A2:FA:2E:CA:8E:A2:42:A7:A1:D9:C6:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EB33C6E1F5D11F08EACCDCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.71.0/24
154.83.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b9:6f:3e:d9:12:9b:ef:43:c1:bd:8b:b3:4e:1b:08:eb:48:
c0:12:11:74:c8:c8:6b:7f:85:69:64:6e:21:fc:a7:f5:cf:43:
50:24:0e:d1:24:82:ed:dd:1f:74:68:43:4a:a8:8e:d3:61:69:
3f:27:ec:9f:82:fd:19:e7:30:cf:69:d1:a1:23:bd:82:07:da:
54:d6:3c:e9:c7:0d:ea:d5:ec:c8:f2:a8:0f:af:22:45:f4:34:
3e:50:48:49:c4:25:31:18:0d:7a:33:63:95:67:f6:c1:10:43:
ff:91:17:95:69:0a:98:a6:6c:2b:fa:60:5b:a2:05:86:e3:91:
46:d4:b1:4e:26:26:86:b7:c5:cb:78:0e:7f:ee:19:44:ba:3f:
ad:08:b7:61:82:02:8d:60:a2:85:60:f5:40:63:cc:ed:0a:61:
48:1e:96:c1:fb:69:b5:a1:ac:72:b0:0b:3d:9c:ef:1f:9c:66:
af:86:23:b3:8f:fa:78:05:e9:1e:29:4b:03:da:bd:89:de:78:
7e:fd:cb:b5:5b:db:ae:51:a7:1b:3a:95:85:24:00:b7:63:7a:
54:af:56:b8:e7:51:7f:7e:ee:f7:2a:86:16:4a:eb:89:df:49:
2a:2e:e5:a1:6e:54:87:0c:e0:7d:cc:c0:42:c8:64:38:e0:92:
67:4a:b6:70
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXqKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDIyMDkzODAyWhcNMjUwNjA4MDkzODAyWjAYMRYw
FAYDVQQDEw02ODA3NjM3Zi1hNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvXm2tzxxf2mwG7y1lBFUan+nht9k6WfLk2pF+wpX7IrAv+0yrYCFFQ0Q
uDZHXdTMMzzB5hdO1eMGqCMPgnWcF7g0yTG9crurX1PZBvKoCZu8xwTPM7GNxbJE
RGFDge2n2v6u454fWesLNhahnC8cx0sLHOhjsLMa0fK343zLg874+0eD2BG+9df2
0NkD2nSW/MCot83gaUGpkvnXngJZaEnOjIp5OqOeDFmgRZo+LHmARBts6gnhO950
mFYWubZjjQWsMs2mvXSHDdD3VL1miKGMAohrTmzfPqcm8rn2+UORugtSNZ42cYmM
xZDDMaKRGCX+7tH1T05aNTouNn6mmQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLAx
igXw1Gbdovouyo6iQqeh2cZSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RUIzM0M2RTFGNUQxMUYwOEVBQ0NEQ0REQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlNHAwQAmlNOMA0GCSqG
SIb3DQEBCwUAA4IBAQBsuW8+2RKb70PBvYuzThsI60jAEhF0yMhrf4VpZG4h/Kf1
z0NQJA7RJILt3R90aENKqI7TYWk/J+yfgv0Z5zDPadGhI72CB9pU1jzpxw3q1ezI
8qgPryJF9DQ+UEhJxCUxGA16M2OVZ/bBEEP/kReVaQqYpmwr+mBbogWG45FG1LFO
JiaGt8XLeA5/7hlEuj+tCLdhggKNYKKFYPVAY8ztCmFIHpbB+2m1oaxysAs9nO8f
nGavhiOzj/p4BekeKUsD2r2J3nh+/cu1W9uuUacbOpWFJAC3Y3pUr1a451F/fu73
KoYWSuuJ30kqLuWhblSHDOB9zMBCyGQ44JJnSrZw
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:53 2025 by rpki-client