Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D7522225BF11F0B7C8FB81DAE4EC9C.roa
File: 37D7522225BF11F0B7C8FB81DAE4EC9C.roa (raw, json)
Hash identifier: ENPlKnp9y7uqu/3F9gQO+8rZgUzdhks2tA6JmqyUw6w=
Subject key identifier: 3C:23:F5:AF:67:98:00:F6:F9:19:0C:95:DB:EB:41:39:F6:CC:93:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D7522225BF11F0B7C8FB81DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 12:32:46 +0000
ROA not before: Wed 30 Apr 2025 12:32:41 +0000
ROA not after: Wed 26 Apr 2028 12:32:41 +0000
asID: 17561
IP address blocks: 154.214.29.0/24 maxlen: 24
154.214.30.0/24 maxlen: 24
154.214.31.0/24 maxlen: 24
154.219.6.0/24 maxlen: 24
154.219.7.0/24 maxlen: 24
154.219.8.0/24 maxlen: 24
154.219.12.0/24 maxlen: 24
154.219.13.0/24 maxlen: 24
154.219.14.0/24 maxlen: 24
154.219.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97640 (0x17d68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:32:41 2025 GMT
Not After : Apr 26 12:32:41 2028 GMT
Subject: CN=6812186e-704b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:d2:9d:87:a5:b3:4c:53:40:1c:bc:c4:38:
a6:74:f2:45:ad:2b:81:de:01:05:fb:83:cf:3c:98:
be:74:76:93:39:26:cc:dc:23:c8:31:16:41:bb:c6:
98:30:fc:54:88:db:c7:b8:6c:56:69:da:ab:2e:b3:
72:a0:0d:a1:35:43:36:1a:f3:06:d2:c4:6c:a9:7a:
fa:11:53:71:61:26:46:13:8e:25:cf:33:75:f0:ba:
01:8e:37:8e:f8:cd:01:24:93:72:19:7e:be:75:46:
8d:d1:8e:22:f4:04:03:22:5b:6f:0a:ba:49:79:94:
70:3e:08:0c:30:03:f9:3a:0f:41:e6:8f:af:7c:59:
94:cb:b5:2b:f4:14:e7:e5:a8:c6:0e:3d:9e:0e:27:
d9:df:ec:43:20:6e:44:2c:a1:d3:28:32:ec:45:91:
08:15:0a:e1:e4:c2:38:30:1f:1e:94:ce:57:87:14:
c7:dd:e7:e5:fe:04:92:bc:b4:a4:60:b0:31:ac:97:
4b:fc:e4:e2:16:cd:fc:13:fe:b9:31:ae:13:7d:8b:
72:22:18:bb:46:b6:6e:3a:7d:84:8b:16:fc:bd:fb:
22:0d:8b:74:6a:da:a9:20:97:74:8f:f6:07:6a:a9:
15:dd:f1:6a:ba:fb:9b:91:d6:b5:4e:e9:b7:ef:13:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:F5:AF:67:98:00:F6:F9:19:0C:95:DB:EB:41:39:F6:CC:93:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37D7522225BF11F0B7C8FB81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.29.0-154.214.31.255
154.219.6.0-154.219.8.255
154.219.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:02:5b:a2:24:a8:57:d5:fc:2a:5d:34:87:c9:30:30:2a:27:
dd:18:42:8d:90:67:a0:35:2d:7d:c4:c7:91:fa:e3:c8:cd:f5:
db:5f:40:90:00:15:81:55:43:9a:e3:21:77:56:e1:4d:eb:a9:
4e:66:35:37:b6:8a:24:c3:59:56:d3:7e:6b:e3:d5:b2:3c:50:
8b:31:f3:9d:1a:6e:9f:d0:8d:a8:f9:dd:06:ab:d9:0e:3a:c1:
03:7b:df:39:5d:23:3c:cb:74:76:d5:b4:07:fa:83:1f:28:85:
fb:60:0f:e7:11:ec:5a:90:7e:cc:33:49:a1:2a:34:e2:fd:21:
2e:49:2a:67:57:34:ad:f7:e8:33:d6:59:7b:4b:bd:fb:3f:b7:
89:ca:8a:c8:26:75:24:0c:38:31:20:e4:e5:86:58:ad:25:b2:
bb:6e:10:93:11:df:cc:70:22:73:11:d9:04:6a:95:88:6f:df:
4d:a9:6a:05:1b:60:74:c2:bf:93:24:03:c0:a2:e0:69:c7:ef:
e3:be:be:34:37:85:c6:cd:4e:d0:12:8c:e0:45:09:93:8f:93:
f6:94:1a:59:3d:62:71:e5:19:46:7d:7a:5c:3a:69:01:94:50:
5c:c8:06:16:4d:4f:62:34:09:6d:48:52:92:c5:6d:55:62:70:
4f:80:26:74
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAX1oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMTIzMjQxWhcNMjgwNDI2MTIzMjQxWjAYMRYw
FAYDVQQDEw02ODEyMTg2ZS03MDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqX/SnYels0xTQBy8xDimdPJFrSuB3gEF+4PPPJi+dHaTOSbM3CPIMRZB
u8aYMPxUiNvHuGxWadqrLrNyoA2hNUM2GvMG0sRsqXr6EVNxYSZGE44lzzN18LoB
jjeO+M0BJJNyGX6+dUaN0Y4i9AQDIltvCrpJeZRwPggMMAP5Og9B5o+vfFmUy7Ur
9BTn5ajGDj2eDifZ3+xDIG5ELKHTKDLsRZEIFQrh5MI4MB8elM5XhxTH3efl/gSS
vLSkYLAxrJdL/OTiFs38E/65Ma4TfYtyIhi7RrZuOn2Eixb8vfsiDYt0atqpIJd0
j/YHaqkV3fFquvubkda1Tum37xOPjQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFDwj
9a9nmAD2+RkMldvrQTn2zJOdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zN0Q3NTIyMjI1QkYxMUYwQjdDOEZCODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACa1h0DBAWa1gAwDAME
AZrbBgMEAJrbCAMEAprbDDANBgkqhkiG9w0BAQsFAAOCAQEAXAJboiSoV9X8Kl00
h8kwMCon3RhCjZBnoDUtfcTHkfrjyM31219AkAAVgVVDmuMhd1bhTeupTmY1N7aK
JMNZVtN+a+PVsjxQizHznRpun9CNqPndBqvZDjrBA3vfOV0jPMt0dtW0B/qDHyiF
+2AP5xHsWpB+zDNJoSo04v0hLkkqZ1c0rffoM9ZZe0u9+z+3icqKyCZ1JAw4MSDk
5YZYrSWyu24QkxHfzHAicxHZBGqViG/fTalqBRtgdMK/kyQDwKLgacfv476+NDeF
xs1O0BKM4EUJk4+T9pQaWT1iceUZRn16XDppAZRQXMgGFk1PYjQJbUhSksVtVWJw
T4AmdA==
-----END CERTIFICATE-----
Generated at Sun May 11 22:58:40 2025 by rpki-client