Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F7B10E267E11F0BF19CA81DAE4EC9C.roa
File: 57F7B10E267E11F0BF19CA81DAE4EC9C.roa (raw, json)
Hash identifier: 3NjIkkOFtqx8IqJ5gPg2MihHHsCo2tGxG77nOMn5Ex0=
Subject key identifier: 1B:E5:80:D8:B8:0D:FD:5F:63:A4:4D:A3:5A:51:BA:E8:BE:9B:CA:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F7B10E267E11F0BF19CA81DAE4EC9C.roa
Signing time: Thu 01 May 2025 11:20:54 +0000
ROA not before: Thu 01 May 2025 11:20:49 +0000
ROA not after: Wed 26 Apr 2028 11:20:49 +0000
asID: 17561
IP address blocks: 154.81.0.0/24 maxlen: 24
154.81.1.0/24 maxlen: 24
154.81.2.0/24 maxlen: 24
154.81.3.0/24 maxlen: 24
154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
154.83.34.0/24 maxlen: 24
154.85.245.0/24 maxlen: 24
154.85.246.0/24 maxlen: 24
154.85.247.0/24 maxlen: 24
154.85.248.0/24 maxlen: 24
154.85.249.0/24 maxlen: 24
154.85.250.0/24 maxlen: 24
154.85.251.0/24 maxlen: 24
154.85.252.0/24 maxlen: 24
154.85.253.0/24 maxlen: 24
154.85.254.0/24 maxlen: 24
154.85.255.0/24 maxlen: 24
154.91.144.0/24 maxlen: 24
154.91.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97770 (0x17dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 11:20:49 2025 GMT
Not After : Apr 26 11:20:49 2028 GMT
Subject: CN=68135916-19a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:9f:2c:6c:77:c4:4f:c8:97:fe:3c:40:a4:
af:55:b2:94:3f:3f:fd:5e:88:40:2c:8c:be:49:24:
12:55:d7:c4:64:64:c4:b7:32:64:03:cf:1e:7d:31:
e5:2d:6a:33:31:91:d9:45:5b:c5:e3:f6:ca:7a:32:
18:f0:3e:03:6b:13:a4:04:f6:47:b3:be:6c:60:84:
b2:97:e0:8a:14:45:30:45:0a:4f:ff:80:f0:3d:f3:
d3:d5:7f:ff:39:e8:24:82:1c:66:83:a3:6b:16:22:
74:ae:6d:c2:1e:33:37:f4:d2:57:a5:1d:e9:8b:b0:
e4:c9:0a:1d:f3:a4:56:b0:f6:ad:6b:be:b2:cd:b2:
19:6f:dc:8a:37:e9:da:be:ee:fd:0f:d5:a8:7c:dd:
8f:d5:e4:37:48:bb:be:39:8d:1d:fd:15:57:4f:74:
f8:de:db:7f:68:71:75:ce:a1:16:c0:8b:6a:af:27:
db:74:37:f5:3d:de:5f:14:b0:e9:0c:30:da:37:d9:
47:5e:16:2d:d6:7b:97:3b:f0:13:6c:12:cf:cc:d3:
b3:18:42:1d:3b:88:6b:9f:91:3f:d3:33:58:c7:e3:
14:dc:0c:ac:47:05:80:df:00:eb:da:76:50:b9:24:
c8:b0:c8:b5:0a:b6:93:dd:9d:3f:2e:08:a2:37:f6:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E5:80:D8:B8:0D:FD:5F:63:A4:4D:A3:5A:51:BA:E8:BE:9B:CA:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57F7B10E267E11F0BF19CA81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.0.0/22
154.82.159.0-154.82.160.255
154.83.34.0/24
154.85.245.0-154.85.255.255
154.91.144.0/23
Signature Algorithm: sha256WithRSAEncryption
87:a4:1c:9c:1b:4e:d9:17:4f:ff:94:53:06:52:9d:45:fe:5a:
7d:ae:26:11:ce:f2:e1:2c:fd:64:f5:f9:15:12:b2:2f:e4:e1:
4e:e7:db:bd:f0:80:2c:7b:65:40:59:c9:59:7f:50:6f:8f:5c:
1e:de:12:e6:c3:99:55:3d:0f:18:80:91:4f:98:f9:6f:f9:70:
ca:ca:98:d5:26:a1:eb:45:a4:a1:fe:6e:da:97:22:5f:ba:a8:
08:5b:f5:25:31:0a:9a:d9:84:46:95:df:4e:97:e0:5d:2c:57:
e2:e5:cc:c2:f0:b2:f1:8b:02:ac:8b:a1:d9:e8:11:a2:b4:87:
8f:53:2d:72:53:38:9b:ad:d0:f9:72:78:96:57:33:f2:0b:11:
7f:8f:1c:6c:fe:1b:be:2c:77:00:f7:52:45:1d:53:c3:97:7a:
6d:7f:95:a4:f9:08:96:db:93:53:86:f2:c6:de:71:c6:04:2e:
67:bd:37:1a:f8:82:a7:43:92:38:35:58:59:62:e5:97:e8:55:
09:c3:f5:21:59:51:3f:cb:dc:a9:83:76:37:11:fb:20:60:de:
e2:1e:5a:20:67:44:82:19:f8:53:87:2f:bd:16:46:79:69:18:
4f:fe:5a:1e:1d:0c:d6:b8:36:ba:94:8d:38:a2:2f:46:a2:c8:
3d:fd:fd:e1
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAX3qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMTEyMDQ5WhcNMjgwNDI2MTEyMDQ5WjAYMRYw
FAYDVQQDEw02ODEzNTkxNi0xOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsiyfLGx3xE/Il/48QKSvVbKUPz/9XohALIy+SSQSVdfEZGTEtzJkA88e
fTHlLWozMZHZRVvF4/bKejIY8D4DaxOkBPZHs75sYISyl+CKFEUwRQpP/4DwPfPT
1X//Oegkghxmg6NrFiJ0rm3CHjM39NJXpR3pi7DkyQod86RWsPata76yzbIZb9yK
N+navu79D9WofN2P1eQ3SLu+OY0d/RVXT3T43tt/aHF1zqEWwItqryfbdDf1Pd5f
FLDpDDDaN9lHXhYt1nuXO/ATbBLPzNOzGEIdO4hrn5E/0zNYx+MU3AysRwWA3wDr
2nZQuSTIsMi1CraT3Z0/LgiiN/bkIQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFBvl
gNi4Df1fY6RNo1pRuui+m8qEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81N0Y3QjEwRTI2N0UxMUYwQkYxOUNBODFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAATAtAwQCmlEAMAwDBACaUp8DBACa
UqADBACaUyIwCwMEAJpV9QMDAZpUAwQBmluQMA0GCSqGSIb3DQEBCwUAA4IBAQCH
pBycG07ZF0//lFMGUp1F/lp9riYRzvLhLP1k9fkVErIv5OFO59u98IAse2VAWclZ
f1Bvj1we3hLmw5lVPQ8YgJFPmPlv+XDKypjVJqHrRaSh/m7alyJfuqgIW/UlMQqa
2YRGld9Ol+BdLFfi5czC8LLxiwKsi6HZ6BGitIePUy1yUzibrdD5cniWVzPyCxF/
jxxs/hu+LHcA91JFHVPDl3ptf5Wk+QiW25NThvLG3nHGBC5nvTca+IKnQ5I4NVhZ
YuWX6FUJw/UhWVE/y9ypg3Y3EfsgYN7iHlogZ0SCGfhThy+9FkZ5aRhP/loeHQzW
uDa6lI04oi9Gosg9/f3h
-----END CERTIFICATE-----
Generated at Sun May 11 15:20:20 2025 by rpki-client