Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E66EA7E245411F0A6FA177CDAE4EC9C.roa
File: 3E66EA7E245411F0A6FA177CDAE4EC9C.roa (raw, json)
Hash identifier: Y+ijz/yYRekxU0fwA1y5zCA3BIDT7UgSrAwpwGEIexM=
Subject key identifier: C1:8C:3B:0D:28:95:DD:8B:41:6B:19:79:7B:21:92:02:B8:95:00:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C37
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E66EA7E245411F0A6FA177CDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:14:30 +0000
ROA not before: Mon 28 Apr 2025 17:14:25 +0000
ROA not after: Sat 25 Apr 2026 17:14:25 +0000
asID: 984
IP address blocks: 154.196.137.0/24 maxlen: 24
154.198.165.0/24 maxlen: 24
154.198.167.0/24 maxlen: 24
154.199.25.0/24 maxlen: 24
154.200.25.0/24 maxlen: 24
154.207.145.0/24 maxlen: 24
154.207.146.0/24 maxlen: 24
154.207.148.0/24 maxlen: 24
154.207.149.0/24 maxlen: 24
154.211.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97335 (0x17c37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:14:25 2025 GMT
Not After : Apr 25 17:14:25 2026 GMT
Subject: CN=680fb775-303f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:6d:b8:9b:5e:66:9a:6a:97:c7:6f:1b:a7:
6b:1e:32:5a:ed:d5:32:38:e3:08:be:a4:b0:5b:3d:
c6:5d:c1:bb:4b:16:22:51:5c:1b:f7:63:79:4a:7c:
0e:8f:01:04:95:20:29:00:33:bb:1c:b6:d8:2b:17:
46:b3:d3:4a:b8:79:af:a1:26:d0:f0:0a:10:02:f5:
b7:1d:8d:d8:ca:47:5d:88:68:fd:cf:c8:b4:c2:2d:
9f:78:17:0c:b6:17:c2:67:3a:09:87:c3:1d:97:43:
e8:55:00:0a:b5:e7:66:b4:d9:a2:f9:71:7a:5c:00:
71:1b:d2:58:69:28:6c:d6:b3:e3:29:59:ae:5e:4c:
d7:92:cf:9e:fb:34:79:fd:6b:2e:11:00:b2:bb:39:
ac:0f:cb:fd:c3:34:92:a6:d9:e1:81:49:b8:ea:ae:
df:a1:ff:32:82:dd:bb:49:f9:56:b8:cc:bf:ae:a1:
95:c4:87:28:04:9f:68:e1:69:9d:30:f2:d8:19:1a:
b6:1b:e2:b1:1b:1c:82:bb:b7:bf:c3:3e:67:d9:05:
fa:94:72:1b:ad:3c:59:82:22:ab:d6:f2:e8:da:73:
c9:6d:65:3b:97:e5:a4:6d:75:39:c6:23:f3:48:f5:
7a:1d:0b:22:38:6a:46:da:d8:4a:de:4b:88:78:06:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:3B:0D:28:95:DD:8B:41:6B:19:79:7B:21:92:02:B8:95:00:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E66EA7E245411F0A6FA177CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.137.0/24
154.198.165.0/24
154.198.167.0/24
154.199.25.0/24
154.200.25.0/24
154.207.145.0-154.207.146.255
154.207.148.0/23
154.211.143.0/24
Signature Algorithm: sha256WithRSAEncryption
98:65:e2:0b:b1:b7:64:91:9a:b0:a8:6a:99:79:13:69:e5:2c:
94:ad:c8:0c:1c:2f:ff:bd:b6:06:64:bb:0f:c7:e8:d5:62:7c:
52:b8:d5:0a:27:92:16:50:af:65:17:8b:1c:e8:4a:84:3d:34:
31:f4:71:1f:b7:14:fd:96:48:f2:72:5e:f8:45:ed:84:fb:36:
2f:98:4a:36:f8:1b:8c:1c:e8:f9:24:e6:c5:25:10:1a:5a:e8:
08:17:c7:17:1f:ad:c9:a9:de:c3:10:ca:bd:a2:57:7d:58:28:
3f:6e:39:e0:38:7d:9f:a1:d4:5d:45:2d:79:09:82:60:e4:3d:
ae:f4:11:42:2b:71:62:de:d5:dc:9a:a5:b7:b5:d8:a7:87:6d:
b6:be:e6:84:32:ee:49:db:5d:83:10:85:b5:0e:18:31:0b:b5:
a3:b9:4c:0b:1b:a9:27:5b:1e:b4:54:ea:e8:3d:0d:cf:19:32:
f6:9f:30:b5:06:2e:1d:5c:6d:90:39:4d:dc:45:19:3e:d1:8c:
a9:f3:62:27:79:71:0c:19:b7:ed:80:9b:cc:79:e1:d7:4a:87:
51:6e:de:5d:bd:20:a4:68:7c:d9:f5:a7:c5:26:a4:d7:d6:5e:
28:3d:1d:dc:bb:b5:08:86:a1:6c:1b:58:bf:92:4d:33:49:a7:
2a:ab:ee:29
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIDAXw3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI4MTcxNDI1WhcNMjYwNDI1MTcxNDI1WjAYMRYw
FAYDVQQDEw02ODBmYjc3NS0zMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy6ZtuJteZppql8dvG6drHjJa7dUyOOMIvqSwWz3GXcG7SxYiUVwb92N5
SnwOjwEElSApADO7HLbYKxdGs9NKuHmvoSbQ8AoQAvW3HY3YykddiGj9z8i0wi2f
eBcMthfCZzoJh8Mdl0PoVQAKtedmtNmi+XF6XABxG9JYaShs1rPjKVmuXkzXks+e
+zR5/WsuEQCyuzmsD8v9wzSSptnhgUm46q7fof8ygt27SflWuMy/rqGVxIcoBJ9o
4WmdMPLYGRq2G+KxGxyCu7e/wz5n2QX6lHIbrTxZgiKr1vLo2nPJbWU7l+WkbXU5
xiPzSPV6HQsiOGpG2thK3kuIeAbLpQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMGM
Ow0old2LQWsZeXshkgK4lQB6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRTY2RUE3RTI0NTQxMUYwQTZGQTE3N0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAmsSJAwQAmsalAwQAmsan
AwQAmscZAwQAmsgZMAwDBACaz5EDBACaz5IDBAGaz5QDBACa048wDQYJKoZIhvcN
AQELBQADggEBAJhl4guxt2SRmrCoapl5E2nlLJStyAwcL/+9tgZkuw/H6NVifFK4
1QonkhZQr2UXixzoSoQ9NDH0cR+3FP2WSPJyXvhF7YT7Ni+YSjb4G4wc6Pkk5sUl
EBpa6AgXxxcfrcmp3sMQyr2iV31YKD9uOeA4fZ+h1F1FLXkJgmDkPa70EUIrcWLe
1dyapbe12KeHbba+5oQy7knbXYMQhbUOGDELtaO5TAsbqSdbHrRU6ug9Dc8ZMvaf
MLUGLh1cbZA5TdxFGT7RjKnzYid5cQwZt+2Am8x54ddKh1Fu3l29IKRofNn1p8Um
pNfWXig9Hdy7tQiGoWwbWL+STTNJpyqr7ik=
-----END CERTIFICATE-----
Generated at Fri May 9 07:49:34 2025 by rpki-client