Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF6947461CF711F0B88731C6DAE4EC9C.roa
File: DF6947461CF711F0B88731C6DAE4EC9C.roa (raw, json)
Hash identifier: IyS4p//xaOW29CI0YErVNEsw6EwLOjA7//Mrlaqreig=
Subject key identifier: 5E:02:AB:6F:BA:10:F6:D3:59:8C:8D:50:F0:9E:AD:EA:6F:DC:6B:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF6947461CF711F0B88731C6DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:25:38 +0000
ROA not before: Sat 19 Apr 2025 08:25:34 +0000
ROA not after: Mon 28 Apr 2025 08:25:34 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96775 (0x17a07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:25:34 2025 GMT
Not After : Apr 28 08:25:34 2025 GMT
Subject: CN=68035e02-0b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:53:a3:a0:19:51:50:22:ff:a3:97:4b:8d:
38:3c:cf:d6:11:b9:fa:7f:65:ef:f9:88:d5:b1:8a:
b1:47:4c:3a:c8:a3:7b:9f:d0:94:8b:07:dc:0b:46:
f0:a7:3e:ec:ce:24:9c:1c:f8:3e:89:82:3f:8e:21:
7c:36:4b:50:88:37:69:e9:ef:09:5e:17:72:bd:37:
4e:ba:32:17:31:6e:bd:23:84:a2:df:76:bc:7e:1c:
e3:00:16:30:13:95:0b:9f:33:cb:f1:3c:e6:a2:a0:
0e:78:20:20:5a:69:1d:66:41:af:ce:b6:c3:e4:2e:
fc:fd:49:bc:69:38:04:44:3d:55:3f:28:d6:bf:5d:
c1:1e:ea:85:5c:78:6a:c2:62:ed:db:0b:46:b6:e7:
bf:91:23:e2:21:b5:47:87:23:b8:66:a0:ec:f0:31:
0f:84:b3:f9:e5:f5:dc:88:9b:6d:3c:0e:f2:63:a9:
8f:23:3c:3b:6e:48:a3:d8:94:16:82:73:4d:17:f6:
5c:1c:64:eb:78:84:a5:a1:1e:4b:96:74:55:7c:96:
f7:0d:d4:bf:6a:af:a9:cf:e4:04:c8:b5:5d:02:b7:
d0:4d:fc:e8:f5:aa:61:da:5b:c2:5c:2c:1e:a4:43:
46:b8:d1:29:f3:64:13:b5:99:cf:d0:8e:3a:51:03:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:AB:6F:BA:10:F6:D3:59:8C:8D:50:F0:9E:AD:EA:6F:DC:6B:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF6947461CF711F0B88731C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
87:f4:ca:08:77:ef:f4:51:9f:b3:57:ba:4a:44:17:1c:6b:ee:
36:8a:32:1c:83:a0:45:a6:d1:de:0a:1b:f4:e6:2b:6e:54:e2:
89:17:6d:dd:c7:24:ad:6b:7b:5d:76:e3:82:da:4e:88:00:c2:
18:4b:a8:a1:91:3c:78:e9:57:38:96:d1:aa:cf:57:e3:9b:59:
08:0f:56:b5:15:54:75:9f:fb:87:7a:a7:ab:45:b6:49:17:a1:
7a:47:42:15:3d:d1:fb:33:f5:38:65:df:9b:5f:fb:15:33:c7:
bf:46:eb:36:46:5d:90:4f:15:2c:96:ed:7d:07:b0:59:e9:82:
c0:f6:c8:ef:82:5b:c4:ea:d6:b7:62:22:c8:42:99:8c:0b:a4:
e1:d0:fa:b2:6f:ee:4d:95:17:d4:0c:3d:99:bd:78:a4:d6:35:
bd:59:c1:b6:37:4f:80:4c:c6:6f:61:47:ff:e2:1d:51:a5:a2:
70:29:22:2d:ca:9f:fb:12:67:62:6a:95:54:da:25:d0:21:33:
b9:9f:cc:c9:2a:a0:d0:0c:e9:c8:da:ca:09:51:6b:31:17:9c:
38:7d:9c:fe:b8:ae:58:eb:79:f3:91:33:e6:5f:9d:3d:33:9a:
8a:61:fa:84:92:c9:27:10:38:e1:a3:fd:c7:93:b0:28:de:7c:
a2:44:e1:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXoHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDE5MDgyNTM0WhcNMjUwNDI4MDgyNTM0WjAYMRYw
FAYDVQQDEw02ODAzNWUwMi0wYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu9dTo6AZUVAi/6OXS404PM/WEbn6f2Xv+YjVsYqxR0w6yKN7n9CUiwfc
C0bwpz7sziScHPg+iYI/jiF8NktQiDdp6e8JXhdyvTdOujIXMW69I4Si33a8fhzj
ABYwE5ULnzPL8TzmoqAOeCAgWmkdZkGvzrbD5C78/Um8aTgERD1VPyjWv13BHuqF
XHhqwmLt2wtGtue/kSPiIbVHhyO4ZqDs8DEPhLP55fXciJttPA7yY6mPIzw7bkij
2JQWgnNNF/ZcHGTreISloR5LlnRVfJb3DdS/aq+pz+QEyLVdArfQTfzo9aph2lvC
XCwepENGuNEp82QTtZnP0I46UQPdUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF4C
q2+6EPbTWYyNUPCerepv3GsZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERjY5NDc0NjFDRjcxMUYwQjg4NzMxQzZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlIgMA0GCSqGSIb3DQEB
CwUAA4IBAQCH9MoId+/0UZ+zV7pKRBcca+42ijIcg6BFptHeChv05ituVOKJF23d
xySta3tdduOC2k6IAMIYS6ihkTx46Vc4ltGqz1fjm1kID1a1FVR1n/uHeqerRbZJ
F6F6R0IVPdH7M/U4Zd+bX/sVM8e/Rus2Rl2QTxUslu19B7BZ6YLA9sjvglvE6ta3
YiLIQpmMC6Th0Pqyb+5NlRfUDD2ZvXik1jW9WcG2N0+ATMZvYUf/4h1RpaJwKSIt
yp/7EmdiapVU2iXQITO5n8zJKqDQDOnI2soJUWsxF5w4fZz+uK5Y63nzkTPmX509
M5qKYfqEksknEDjho/3Hk7Ao3nyiROFu
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:15:26 2025 by rpki-client