Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016E90C0269A11F099087DB6DAE4EC9C.roa
File: 016E90C0269A11F099087DB6DAE4EC9C.roa (raw, json)
Hash identifier: +P24kkswBOP3tPHa7wT7mCKc6ewhIBdNjOxhajMKN4g=
Subject key identifier: FF:D3:CC:1E:80:A9:16:6A:AC:69:27:77:95:B4:AF:F0:D6:61:9F:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016E90C0269A11F099087DB6DAE4EC9C.roa
Signing time: Thu 01 May 2025 14:38:54 +0000
ROA not before: Thu 01 May 2025 14:38:49 +0000
ROA not after: Fri 28 Apr 2028 14:38:49 +0000
asID: 17561
IP address blocks: 154.93.237.0/24 maxlen: 24
154.93.239.0/24 maxlen: 24
154.93.241.0/24 maxlen: 24
154.93.242.0/24 maxlen: 24
154.93.245.0/24 maxlen: 24
154.93.246.0/24 maxlen: 24
154.93.247.0/24 maxlen: 24
154.93.248.0/24 maxlen: 24
154.93.249.0/24 maxlen: 24
154.93.250.0/24 maxlen: 24
154.93.252.0/24 maxlen: 24
154.93.253.0/24 maxlen: 24
154.93.254.0/24 maxlen: 24
154.93.255.0/24 maxlen: 24
154.95.128.0/24 maxlen: 24
154.95.129.0/24 maxlen: 24
154.95.130.0/24 maxlen: 24
154.95.131.0/24 maxlen: 24
154.95.132.0/24 maxlen: 24
154.95.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97822 (0x17e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 14:38:49 2025 GMT
Not After : Apr 28 14:38:49 2028 GMT
Subject: CN=6813877e-8519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:89:46:8b:e2:48:9d:c0:53:03:c1:7c:dc:
25:45:63:75:b6:82:68:06:c8:a8:52:63:41:6c:8b:
e1:8d:91:91:93:61:54:2a:3c:e6:81:21:0c:af:21:
a0:76:6a:1b:09:62:d0:4c:94:c8:e2:81:2e:79:d2:
ee:83:98:28:cc:f8:1b:6d:3f:45:65:be:c7:54:ad:
10:b5:7d:98:7c:24:82:4d:c3:84:d6:7d:f4:50:7e:
63:34:b5:00:ff:aa:02:6a:b1:53:eb:06:4c:b6:ff:
36:7e:a6:85:97:e6:a3:89:73:b2:e7:fa:8f:a2:a5:
20:14:80:73:f2:00:75:62:6a:27:77:f7:17:6c:f9:
9d:c3:db:58:82:89:b6:98:2a:58:b5:c7:b8:6c:20:
92:7b:d2:ba:c3:c0:53:91:ab:44:2b:32:5c:27:94:
87:39:f6:11:5a:bf:e6:96:36:ce:d5:40:77:56:00:
8a:20:06:61:1e:f9:40:79:ec:62:39:a2:aa:2e:b2:
df:f4:d6:56:fe:a3:e8:f7:00:40:8a:59:73:d5:28:
5d:71:67:61:53:6c:d1:e4:66:0d:50:5b:15:36:6b:
1b:bd:2a:b4:4c:15:a5:83:e6:a0:6d:ef:b6:63:db:
50:c7:59:67:2a:fa:1d:cf:51:55:77:1f:eb:26:b3:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:CC:1E:80:A9:16:6A:AC:69:27:77:95:B4:AF:F0:D6:61:9F:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/016E90C0269A11F099087DB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.237.0/24
154.93.239.0/24
154.93.241.0-154.93.242.255
154.93.245.0-154.93.250.255
154.93.252.0/22
154.95.128.0-154.95.133.255
Signature Algorithm: sha256WithRSAEncryption
bd:4a:82:ed:a9:46:0a:c3:3d:32:73:dd:7b:2d:b0:d4:ef:ef:
cb:a8:3d:52:54:58:f5:cb:37:08:1a:b5:48:7a:46:92:43:9c:
bc:c6:55:d2:19:bb:2c:85:61:21:57:6d:5e:88:fb:44:88:29:
c0:55:56:69:91:6c:c9:d2:43:38:45:29:d1:c7:b6:f8:b1:bd:
87:63:31:d9:2e:f1:ea:08:5f:c9:a2:5b:b7:42:7d:ee:a2:65:
8c:ea:2a:ea:4c:02:d8:82:09:9c:94:d0:16:2b:bd:a6:33:57:
fc:02:2a:ff:07:b4:1a:70:16:da:02:78:27:82:f6:0f:a6:df:
b2:02:49:e1:49:47:57:f1:22:f0:6d:20:24:cd:ca:e8:34:d2:
2e:c1:31:eb:07:c9:eb:ff:49:41:f3:ee:55:71:98:25:56:c8:
c3:67:3f:2c:57:c0:36:b3:3f:df:bb:5f:5b:fb:d9:f2:88:ec:
76:4b:c8:98:88:1d:86:ae:ed:99:ae:5d:dd:8a:ea:d2:ba:3c:
90:13:43:4f:c8:7e:11:52:04:f7:fd:9b:c2:dc:bf:37:92:af:
96:93:4a:da:11:ba:2c:02:fc:71:e0:e9:e5:c9:ec:5c:e8:ea:
9b:5b:63:8c:cc:f2:e2:df:80:85:1f:5c:78:d7:27:10:32:5d:
b7:3b:9d:3d
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAX4eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMTQzODQ5WhcNMjgwNDI4MTQzODQ5WjAYMRYw
FAYDVQQDEw02ODEzODc3ZS04NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4n+JRoviSJ3AUwPBfNwlRWN1toJoBsioUmNBbIvhjZGRk2FUKjzmgSEM
ryGgdmobCWLQTJTI4oEuedLug5gozPgbbT9FZb7HVK0QtX2YfCSCTcOE1n30UH5j
NLUA/6oCarFT6wZMtv82fqaFl+ajiXOy5/qPoqUgFIBz8gB1Ymond/cXbPmdw9tY
gom2mCpYtce4bCCSe9K6w8BTkatEKzJcJ5SHOfYRWr/mljbO1UB3VgCKIAZhHvlA
eexiOaKqLrLf9NZW/qPo9wBAillz1ShdcWdhU2zR5GYNUFsVNmsbvSq0TBWlg+ag
be+2Y9tQx1lnKvodz1FVdx/rJrM2pwIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFP/T
zB6AqRZqrGknd5W0r/DWYZ+wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMTZFOTBDMDI2OUExMUYwOTkwODdEQjZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAml3tAwQAml3vMAwDBACa
XfEDBACaXfIwDAMEAJpd9QMEAJpd+gMEAppd/DAMAwQHml+AAwQBml+EMA0GCSqG
SIb3DQEBCwUAA4IBAQC9SoLtqUYKwz0yc917LbDU7+/LqD1SVFj1yzcIGrVIekaS
Q5y8xlXSGbsshWEhV21eiPtEiCnAVVZpkWzJ0kM4RSnRx7b4sb2HYzHZLvHqCF/J
olu3Qn3uomWM6irqTALYggmclNAWK72mM1f8Air/B7QacBbaAngngvYPpt+yAknh
SUdX8SLwbSAkzcroNNIuwTHrB8nr/0lB8+5VcZglVsjDZz8sV8A2sz/fu19b+9ny
iOx2S8iYiB2Gru2Zrl3diurSujyQE0NPyH4RUgT3/ZvC3L83kq+Wk0raEbosAvxx
4Onlyexc6OqbW2OMzPLi34CFH1x41ycQMl23O509
-----END CERTIFICATE-----
Generated at Thu May 8 09:36:51 2025 by rpki-client