Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE20BD8413DC11F0B334D8BE762E951A.roa
File: DE20BD8413DC11F0B334D8BE762E951A.roa (raw, json)
Hash identifier: jV1G5MRrKpwB2mOKbZaAcNWots00dmymmHrD3keW0Us=
Subject key identifier: 84:4A:B2:D2:5C:FF:03:2C:22:06:4D:F7:53:9D:04:89:F2:27:8C:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01781C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE20BD8413DC11F0B334D8BE762E951A.roa
Signing time: Mon 07 Apr 2025 18:19:39 +0000
ROA not before: Mon 07 Apr 2025 18:19:35 +0000
ROA not after: Wed 14 May 2025 18:19:35 +0000
asID: 20473
IP address blocks: 154.197.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96284 (0x1781c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 18:19:35 2025 GMT
Not After : May 14 18:19:35 2025 GMT
Subject: CN=67f4173b-7c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:53:92:c4:07:87:b5:dd:cf:ad:59:b1:20:
fd:ec:bb:c1:e6:8f:b5:ed:02:31:2e:c2:c4:8a:d5:
5d:fd:2d:68:93:e7:2c:ca:4a:4c:65:76:98:6d:cc:
d2:02:f9:c3:99:e1:69:dc:7f:86:2e:d8:23:1b:f3:
8f:97:3e:7c:81:0f:39:95:c1:b6:ec:0f:5a:4a:38:
f7:b2:f8:42:9d:e3:a2:fe:f6:7e:60:9b:d3:44:d0:
36:14:1f:c5:1e:30:f7:f0:01:4b:55:52:d6:fb:e6:
07:9f:b4:ef:fe:12:0d:b9:b5:7b:a9:59:1f:1e:19:
46:e7:65:33:98:c7:df:21:91:ad:af:fe:14:7d:b1:
b6:50:c8:5f:43:db:f4:90:b8:63:4e:29:3f:1c:90:
3b:31:4d:b0:3f:fe:6a:ec:41:68:de:93:cd:8f:76:
77:f1:42:89:d8:13:3f:17:4d:a4:ed:73:e7:2f:b7:
b9:62:b8:8f:de:3a:b3:4f:b7:a2:ba:cd:ba:fc:f2:
4e:1e:dc:cf:17:c2:e8:b7:66:a8:f9:f4:7b:93:75:
2d:f9:1d:22:c0:3f:76:30:4c:30:50:46:f7:72:7d:
c7:d7:3c:6b:18:5b:da:b1:55:00:da:f9:96:e5:ba:
a8:5b:82:db:33:27:f6:a0:76:f6:81:4f:a7:f4:76:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4A:B2:D2:5C:FF:03:2C:22:06:4D:F7:53:9D:04:89:F2:27:8C:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE20BD8413DC11F0B334D8BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e0:df:c6:93:02:c7:6c:d4:10:1c:1c:53:bd:bf:b8:10:0d:
ae:5c:a8:66:fd:e9:bf:03:6d:2e:11:75:a7:f4:d3:87:55:61:
2b:0d:4c:9a:e4:7c:9b:d8:31:1c:0d:0d:c4:ba:3b:b3:37:62:
84:74:92:e8:af:37:70:24:ab:b6:3b:16:81:a6:d8:13:90:7f:
eb:07:05:ba:89:43:54:44:c7:20:96:f9:3f:93:fa:2a:75:04:
17:3c:c8:14:cd:07:a2:0c:12:74:5b:9c:68:7e:ba:14:11:88:
62:b7:d3:1b:b4:28:d2:17:8e:02:7c:47:e6:e2:11:44:d1:09:
21:06:f8:0f:ac:c0:2c:54:0e:36:8a:80:07:6d:bf:a9:cf:e7:
74:61:8d:48:f8:de:18:bc:72:e8:86:77:01:5c:8f:a3:bd:62:
16:d7:4a:13:5b:7a:2e:98:fd:62:3b:f3:98:ce:9c:4f:36:f0:
1b:9a:82:e9:c7:ae:03:52:c3:ae:db:f8:bd:f0:c7:a3:e4:c6:
1f:ad:35:aa:2a:fa:d5:9d:26:9b:e9:43:f9:4a:69:b9:65:a1:
81:26:f0:9f:8c:2a:33:75:ae:b3:80:ca:61:d8:7c:0b:d7:8c:
4c:43:87:2f:a1:41:10:33:25:d9:fa:f2:e8:94:72:e4:e8:ae:
7e:20:51:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXgcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA3MTgxOTM1WhcNMjUwNTE0MTgxOTM1WjAYMRYw
FAYDVQQDEw02N2Y0MTczYi03YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAov1TksQHh7Xdz61ZsSD97LvB5o+17QIxLsLEitVd/S1ok+csykpMZXaY
bczSAvnDmeFp3H+GLtgjG/OPlz58gQ85lcG27A9aSjj3svhCneOi/vZ+YJvTRNA2
FB/FHjD38AFLVVLW++YHn7Tv/hINubV7qVkfHhlG52UzmMffIZGtr/4UfbG2UMhf
Q9v0kLhjTik/HJA7MU2wP/5q7EFo3pPNj3Z38UKJ2BM/F02k7XPnL7e5YriP3jqz
T7eius26/PJOHtzPF8Lot2ao+fR7k3Ut+R0iwD92MEwwUEb3cn3H1zxrGFvasVUA
2vmW5bqoW4LbMyf2oHb2gU+n9HY3hQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIRK
stJc/wMsIgZN91OdBInyJ4wmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERTIwQkQ4NDEzREMxMUYwQjMzNEQ4QkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUgMA0GCSqGSIb3DQEB
CwUAA4IBAQBq4N/GkwLHbNQQHBxTvb+4EA2uXKhm/em/A20uEXWn9NOHVWErDUya
5Hyb2DEcDQ3EujuzN2KEdJLorzdwJKu2OxaBptgTkH/rBwW6iUNURMcglvk/k/oq
dQQXPMgUzQeiDBJ0W5xofroUEYhit9MbtCjSF44CfEfm4hFE0QkhBvgPrMAsVA42
ioAHbb+pz+d0YY1I+N4YvHLohncBXI+jvWIW10oTW3oumP1iO/OYzpxPNvAbmoLp
x64DUsOu2/i98Mej5MYfrTWqKvrVnSab6UP5Smm5ZaGBJvCfjCozda6zgMph2HwL
14xMQ4cvoUEQMyXZ+vLolHLk6K5+IFGR
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:05:52 2025 by rpki-client