Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F49534267C11F08724DEF1DAE4EC9C.roa
File: 11F49534267C11F08724DEF1DAE4EC9C.roa (raw, json)
Hash identifier: q2++fw9z6PqwDX0JifJ/wSkACL9ztp7UfW1BKkM91Wg=
Subject key identifier: 1A:61:5A:FA:6B:72:8A:53:3A:3C:AA:76:BC:DF:B5:6B:1F:C1:58:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F49534267C11F08724DEF1DAE4EC9C.roa
Signing time: Thu 01 May 2025 11:04:37 +0000
ROA not before: Thu 01 May 2025 11:04:32 +0000
ROA not after: Fri 14 Apr 2028 11:04:32 +0000
asID: 17561
IP address blocks: 154.85.205.0/24 maxlen: 24
154.85.206.0/24 maxlen: 24
154.85.207.0/24 maxlen: 24
154.85.208.0/24 maxlen: 24
154.85.209.0/24 maxlen: 24
154.85.210.0/24 maxlen: 24
154.85.211.0/24 maxlen: 24
154.85.212.0/24 maxlen: 24
154.85.213.0/24 maxlen: 24
154.85.214.0/24 maxlen: 24
154.85.215.0/24 maxlen: 24
154.85.216.0/24 maxlen: 24
154.85.217.0/24 maxlen: 24
154.85.218.0/24 maxlen: 24
154.85.219.0/24 maxlen: 24
154.85.220.0/24 maxlen: 24
154.85.221.0/24 maxlen: 24
154.85.222.0/24 maxlen: 24
154.85.223.0/24 maxlen: 24
154.85.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97766 (0x17de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:04:32 2025 GMT
Not After : Apr 14 11:04:32 2028 GMT
Subject: CN=68135545-1a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:eb:a3:9c:53:08:b8:c9:f7:af:b1:36:ff:
5d:b5:b6:58:b6:9c:ed:13:60:c7:89:ce:81:da:f5:
0c:14:a4:fc:e2:1d:78:e9:f6:e5:bb:2b:71:68:76:
19:79:7e:ba:1e:5d:59:ff:76:a7:f3:b3:3e:4e:a9:
40:15:d8:49:17:c1:1c:69:0d:bb:5c:df:02:b6:0c:
48:c8:3e:e1:55:c3:79:07:c7:a1:3a:a6:c9:80:c4:
d5:a0:43:57:3a:0c:b1:7d:47:59:b4:e8:3c:20:8e:
3d:35:c9:05:cc:a2:4d:96:5d:b8:38:c2:f6:eb:58:
10:bc:7c:a8:06:df:12:da:33:9f:48:6e:8c:ce:9d:
56:d6:19:e2:05:81:d8:cc:55:a0:7b:d1:30:99:0c:
34:d1:7e:6a:27:ce:d0:f1:f7:47:34:31:76:27:f1:
ff:98:a0:31:36:d4:98:f2:82:dc:4a:85:65:4d:b2:
a7:c8:fa:73:97:ac:bf:4e:0a:7d:99:ac:b1:20:01:
8d:59:94:45:a4:3d:ad:5f:ef:67:93:2c:ec:78:c0:
3e:22:e4:68:0c:c4:e7:e4:07:c4:71:3c:dd:0a:e3:
d2:ff:6a:f9:f1:94:3f:50:cc:6d:eb:59:5f:e2:84:
a9:16:7c:da:5c:c6:e9:91:55:8f:79:12:af:c7:b6:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:5A:FA:6B:72:8A:53:3A:3C:AA:76:BC:DF:B5:6B:1F:C1:58:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11F49534267C11F08724DEF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.205.0-154.85.224.255
Signature Algorithm: sha256WithRSAEncryption
63:67:23:4b:ba:e5:84:10:c2:5d:42:91:95:d4:30:87:2d:92:
a1:6c:eb:ee:e7:eb:cf:4f:bd:7c:0d:a2:09:62:02:26:f9:d0:
21:51:d5:6d:cb:e4:52:e9:95:bb:d2:ca:04:29:e0:05:70:5c:
35:b3:e8:13:18:1c:56:b6:59:6c:c5:46:4b:2a:ee:31:70:05:
26:55:7e:8f:30:c9:14:9b:db:4b:c2:82:d3:b0:ef:18:a0:d9:
2b:76:1f:ee:39:1b:ab:ae:36:69:99:1b:b1:30:e0:19:48:75:
62:16:cc:bb:9b:38:22:db:f2:2b:7f:fc:d3:7e:3b:15:a2:70:
42:c8:bb:ed:8b:bb:42:25:39:68:2b:10:99:8c:74:b5:ff:1b:
f3:ff:d1:0c:06:2d:3e:4b:1b:19:e8:a2:21:40:ea:78:f2:4c:
5c:e2:4b:5a:bc:a0:49:6b:39:a8:53:39:6a:a7:6d:fb:dc:96:
ba:06:f1:29:b0:7e:8a:68:97:fa:66:dd:86:97:73:e7:d9:b5:
bb:f3:0f:7c:80:e2:93:b4:eb:26:5c:1c:04:96:a0:6b:c8:0c:
a2:f2:56:fb:a8:35:cd:68:ee:d4:84:0f:50:f2:20:60:a9:3e:
5d:98:c6:bd:fe:3b:a5:54:b2:41:1f:3d:44:29:fa:da:e6:ce:
46:b7:8f:4f
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAX3mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMTEwNDMyWhcNMjgwNDE0MTEwNDMyWjAYMRYw
FAYDVQQDEw02ODEzNTU0NS0xYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArKrro5xTCLjJ96+xNv9dtbZYtpztE2DHic6B2vUMFKT84h146fbluytx
aHYZeX66Hl1Z/3an87M+TqlAFdhJF8EcaQ27XN8CtgxIyD7hVcN5B8ehOqbJgMTV
oENXOgyxfUdZtOg8II49NckFzKJNll24OML261gQvHyoBt8S2jOfSG6Mzp1W1hni
BYHYzFWge9EwmQw00X5qJ87Q8fdHNDF2J/H/mKAxNtSY8oLcSoVlTbKnyPpzl6y/
Tgp9mayxIAGNWZRFpD2tX+9nkyzseMA+IuRoDMTn5AfEcTzdCuPS/2r58ZQ/UMxt
61lf4oSpFnzaXMbpkVWPeRKvx7ZOwwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBph
WvprcopTOjyqdrzftWsfwVgOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUY0OTUzNDI2N0MxMUYwODcyNERFRjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaVc0DBACaVeAwDQYJ
KoZIhvcNAQELBQADggEBAGNnI0u65YQQwl1CkZXUMIctkqFs6+7n689PvXwNogli
Aib50CFR1W3L5FLplbvSygQp4AVwXDWz6BMYHFa2WWzFRksq7jFwBSZVfo8wyRSb
20vCgtOw7xig2St2H+45G6uuNmmZG7Ew4BlIdWIWzLubOCLb8it//NN+OxWicELI
u+2Lu0IlOWgrEJmMdLX/G/P/0QwGLT5LGxnooiFA6njyTFziS1q8oElrOahTOWqn
bfvclroG8Smwfopol/pm3YaXc+fZtbvzD3yA4pO06yZcHASWoGvIDKLyVvuoNc1o
7tSED1DyIGCpPl2Yxr3+O6VUskEfPUQp+trmzka3j08=
-----END CERTIFICATE-----
Generated at Fri May 9 06:33:21 2025 by rpki-client