Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37CCEF2225D211F0A540077EDAE4EC9C.roa
File: 37CCEF2225D211F0A540077EDAE4EC9C.roa (raw, json)
Hash identifier: dY087cXGTVVyA/i4NPZCwjiMdtiSbdolZy0vmgjPxO0=
Subject key identifier: F8:82:D3:B9:2C:C6:32:50:CE:56:D4:B4:63:2F:48:DF:B1:30:E9:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37CCEF2225D211F0A540077EDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 14:48:46 +0000
ROA not before: Wed 30 Apr 2025 14:48:41 +0000
ROA not after: Tue 28 Apr 2026 14:48:41 +0000
asID: 984
IP address blocks: 154.93.240.0/24 maxlen: 24
154.93.243.0/24 maxlen: 24
154.93.244.0/24 maxlen: 24
154.93.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97685 (0x17d95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:48:41 2025 GMT
Not After : Apr 28 14:48:41 2026 GMT
Subject: CN=6812384e-b816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:5f:09:0f:3f:04:ef:40:6b:b5:29:78:df:
a8:af:cf:41:fd:78:43:5a:5f:a4:6d:50:07:bd:22:
2f:48:f3:b4:15:ee:c2:b7:fe:c3:9f:fe:c4:62:7b:
bf:81:63:d4:91:a3:22:7d:39:40:1b:32:88:08:6e:
05:4b:fe:1b:06:c0:96:3a:e5:3c:e4:08:bd:2d:f5:
52:6d:61:20:45:0e:c4:c7:22:a3:8b:0e:31:18:5d:
3f:ba:9c:af:8e:f7:88:16:78:80:4b:59:75:87:52:
d0:57:fe:bf:bb:3f:01:63:ac:28:e8:7d:e3:0d:26:
a6:fc:02:89:07:8d:d1:94:d7:00:89:f1:ee:4b:0f:
c7:fb:85:84:0a:10:fb:63:69:8e:5c:d4:dd:b3:26:
10:68:24:97:00:bf:4a:cf:be:f5:6e:b6:14:64:11:
80:4b:82:55:af:d8:30:f1:56:20:fb:2e:0f:8a:5d:
48:a3:cd:40:5f:93:fb:7c:9c:fb:7a:a7:85:a5:c9:
a2:74:84:49:18:1f:eb:aa:98:01:25:b5:5d:23:fc:
76:b7:2c:4f:7c:27:16:09:ba:62:66:b3:9c:85:57:
d3:d0:b8:ed:ec:03:6e:f3:d7:ad:c1:0d:ee:67:2c:
d6:ed:6d:fd:1d:e9:1f:ad:43:f6:4c:e2:22:b5:82:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:D3:B9:2C:C6:32:50:CE:56:D4:B4:63:2F:48:DF:B1:30:E9:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37CCEF2225D211F0A540077EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.240.0/24
154.93.243.0-154.93.244.255
154.93.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e9:be:8e:d2:18:07:38:60:b9:6c:50:d7:78:63:6b:d3:4c:
dc:13:89:15:60:6c:7c:ba:53:7d:ed:29:5a:ae:57:ee:1e:3f:
f1:05:31:50:13:f5:b7:28:81:16:37:06:05:de:a5:ca:a4:bb:
86:a5:8f:3b:d7:fe:5e:49:bf:19:b6:5d:30:b8:46:37:86:5e:
8f:b6:6c:16:f2:88:ba:a2:4d:21:13:0e:aa:a4:c4:36:bb:7e:
7d:40:ee:e6:0c:f2:b8:f6:c1:c5:1c:1a:af:b8:e5:c2:65:0a:
c7:89:1e:7e:e2:fb:75:fc:b3:21:17:39:2c:fd:0b:bf:37:16:
7e:ce:3a:4f:59:84:c0:55:2a:a9:d3:a0:15:58:ac:81:df:ee:
2b:a4:75:07:60:b6:ea:e6:e8:27:ce:08:54:61:2d:83:b3:d3:
a8:da:d3:1e:45:de:c5:8c:b8:6a:d1:5e:16:a2:5d:49:d1:14:
50:53:93:dd:f4:9a:41:2b:df:17:e1:a9:77:36:0f:9f:fb:2d:
0d:89:a1:05:e7:ee:d0:a5:9f:2a:16:b5:a9:b7:68:af:74:00:
06:65:a4:29:04:e5:f4:2a:fc:f6:de:6c:76:90:c2:7e:1f:7e:
ea:df:d4:78:bc:a8:80:74:23:32:65:c4:07:8f:ab:f7:54:79:
c2:7c:79:be
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAX2VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMTQ0ODQxWhcNMjYwNDI4MTQ0ODQxWjAYMRYw
FAYDVQQDEw02ODEyMzg0ZS1iODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvx5fCQ8/BO9Aa7UpeN+or89B/XhDWl+kbVAHvSIvSPO0Fe7Ct/7Dn/7E
Ynu/gWPUkaMifTlAGzKICG4FS/4bBsCWOuU85Ai9LfVSbWEgRQ7ExyKjiw4xGF0/
upyvjveIFniAS1l1h1LQV/6/uz8BY6wo6H3jDSam/AKJB43RlNcAifHuSw/H+4WE
ChD7Y2mOXNTdsyYQaCSXAL9Kz771brYUZBGAS4JVr9gw8VYg+y4Pil1Io81AX5P7
fJz7eqeFpcmidIRJGB/rqpgBJbVdI/x2tyxPfCcWCbpiZrOchVfT0Ljt7ANu89et
wQ3uZyzW7W39HekfrUP2TOIitYK7YwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPiC
07ksxjJQzlbUtGMvSN+xMOm5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zN0NDRUYyMjI1RDIxMUYwQTU0MDA3N0VEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAml3wMAwDBACaXfMDBACa
XfQDBACaXfswDQYJKoZIhvcNAQELBQADggEBAGvpvo7SGAc4YLlsUNd4Y2vTTNwT
iRVgbHy6U33tKVquV+4eP/EFMVAT9bcogRY3BgXepcqku4aljzvX/l5Jvxm2XTC4
RjeGXo+2bBbyiLqiTSETDqqkxDa7fn1A7uYM8rj2wcUcGq+45cJlCseJHn7i+3X8
syEXOSz9C783Fn7OOk9ZhMBVKqnToBVYrIHf7iukdQdgturm6CfOCFRhLYOz06ja
0x5F3sWMuGrRXhaiXUnRFFBTk930mkEr3xfhqXc2D5/7LQ2JoQXn7tClnyoWtam3
aK90AAZlpCkE5fQq/PbebHaQwn4ffurf1Hi8qIB0IzJlxAePq/dUecJ8eb4=
-----END CERTIFICATE-----
Generated at Sun May 11 09:17:04 2025 by rpki-client