Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCC20D8269D11F0A78DF4CCDAE4EC9C.roa
File: 6BCC20D8269D11F0A78DF4CCDAE4EC9C.roa (raw, json)
Hash identifier: VUa+d/dbj+5t3PUbAzb8ct6Ng3aXPGMK+a21xpDhuh0=
Subject key identifier: 66:5A:5D:54:E8:FC:48:C6:64:BA:FA:8A:A2:5A:FD:B6:E0:31:30:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCC20D8269D11F0A78DF4CCDAE4EC9C.roa
Signing time: Thu 01 May 2025 15:03:21 +0000
ROA not before: Thu 01 May 2025 15:03:16 +0000
ROA not after: Fri 28 Apr 2028 15:03:16 +0000
asID: 17561
IP address blocks: 154.95.174.0/24 maxlen: 24
154.95.175.0/24 maxlen: 24
154.95.176.0/24 maxlen: 24
154.95.177.0/24 maxlen: 24
154.95.178.0/24 maxlen: 24
154.95.179.0/24 maxlen: 24
154.95.180.0/24 maxlen: 24
154.95.181.0/24 maxlen: 24
154.95.182.0/24 maxlen: 24
154.95.183.0/24 maxlen: 24
154.95.184.0/24 maxlen: 24
154.95.185.0/24 maxlen: 24
154.95.186.0/24 maxlen: 24
154.95.187.0/24 maxlen: 24
154.95.188.0/24 maxlen: 24
154.95.189.0/24 maxlen: 24
154.95.190.0/24 maxlen: 24
154.95.191.0/24 maxlen: 24
154.95.192.0/24 maxlen: 24
154.95.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97828 (0x17e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 15:03:16 2025 GMT
Not After : Apr 28 15:03:16 2028 GMT
Subject: CN=68138d39-05e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:12:42:fc:40:73:7d:40:8a:20:46:20:93:
fa:d4:be:2a:ba:ca:4d:64:58:73:fb:af:55:51:07:
d6:e0:0f:4e:de:84:ba:b6:97:e5:42:8b:a6:2c:c5:
17:6b:15:65:c7:2f:bd:a6:b8:1a:2c:30:57:1e:33:
67:08:91:83:a8:78:d9:38:26:bc:0f:1e:a2:6d:65:
22:2f:0d:42:a6:17:30:6b:0e:19:91:93:e7:42:0e:
e2:fe:d4:c4:bf:f1:a6:1b:8c:c1:bb:06:52:9b:cd:
81:ef:5b:3f:30:e5:d5:c4:6e:f5:73:c2:3d:07:3c:
bb:2b:e5:55:53:ff:9a:f8:86:2c:58:6d:11:27:ab:
78:68:b8:4d:e9:0c:ee:e6:18:bd:05:a5:9d:f8:25:
21:7f:dd:fb:f3:8a:f7:f8:34:9b:78:3d:10:6b:68:
04:9b:bc:47:e7:f0:77:fa:21:ca:12:5c:21:f5:ec:
cb:bb:30:68:fe:9b:be:59:90:c2:ce:80:7c:37:5d:
4c:bb:a2:c7:3f:3d:ee:33:df:80:f5:7c:fc:b9:c3:
ba:2d:47:6f:75:e1:85:b2:9c:23:18:85:28:81:3b:
53:c3:82:90:e2:65:01:0b:11:cb:69:2e:77:ab:e3:
1b:34:16:80:e1:a0:51:25:0a:7b:c3:87:a5:29:04:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5A:5D:54:E8:FC:48:C6:64:BA:FA:8A:A2:5A:FD:B6:E0:31:30:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6BCC20D8269D11F0A78DF4CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.174.0-154.95.193.255
Signature Algorithm: sha256WithRSAEncryption
1a:65:d0:dd:0d:74:2a:a6:e1:af:9b:60:d4:76:fb:90:ad:96:
1f:0d:eb:2d:b8:25:6e:25:bb:db:63:d4:6c:6f:4f:07:0f:b8:
df:24:22:71:97:c0:93:63:d8:76:99:38:93:8a:4b:c8:0a:a7:
35:4d:a2:a2:54:f6:a1:08:5c:e4:ed:bb:14:02:66:b0:9d:b9:
75:bb:9c:a0:04:27:21:53:93:ea:dc:63:fa:5a:0d:ad:d6:36:
ee:2e:f8:dc:a4:e6:0d:4e:18:ff:95:e1:62:9b:d0:bf:eb:df:
d3:9d:5a:b6:27:18:45:30:bb:8d:f1:05:70:53:c4:38:a5:d5:
3c:90:14:11:64:b1:c4:04:4e:40:0b:73:e8:a4:98:91:5f:33:
5d:60:3d:83:99:49:57:22:78:4d:ef:73:56:8f:11:27:6e:96:
da:59:6d:bf:1f:45:58:a8:22:00:9a:25:6a:a9:7f:e4:7b:1c:
83:71:6e:f5:76:21:84:03:d7:b8:80:8d:0a:7e:75:5d:a6:75:
bb:08:1c:a2:ac:05:0f:83:e3:3d:de:d3:ba:6e:9d:93:8b:8c:
fa:70:28:a1:50:4e:6f:db:a3:d8:a5:37:07:4e:24:54:01:d1:
af:29:6e:96:80:6a:4c:61:f4:ac:8f:10:ff:22:2c:64:66:71:
57:f8:66:29
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAX4kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMTUwMzE2WhcNMjgwNDI4MTUwMzE2WjAYMRYw
FAYDVQQDEw02ODEzOGQzOS0wNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApoUSQvxAc31AiiBGIJP61L4quspNZFhz+69VUQfW4A9O3oS6tpflQoum
LMUXaxVlxy+9prgaLDBXHjNnCJGDqHjZOCa8Dx6ibWUiLw1Cphcwaw4ZkZPnQg7i
/tTEv/GmG4zBuwZSm82B71s/MOXVxG71c8I9Bzy7K+VVU/+a+IYsWG0RJ6t4aLhN
6Qzu5hi9BaWd+CUhf93784r3+DSbeD0Qa2gEm7xH5/B3+iHKElwh9ezLuzBo/pu+
WZDCzoB8N11Mu6LHPz3uM9+A9Xz8ucO6LUdvdeGFspwjGIUogTtTw4KQ4mUBCxHL
aS53q+MbNBaA4aBRJQp7w4elKQT0QQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGZa
XVTo/EjGZLr6iqJa/bbgMTCsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QkNDMjBEODI2OUQxMUYwQTc4REY0Q0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaX64DBAGaX8AwDQYJ
KoZIhvcNAQELBQADggEBABpl0N0NdCqm4a+bYNR2+5Ctlh8N6y24JW4lu9tj1Gxv
TwcPuN8kInGXwJNj2HaZOJOKS8gKpzVNoqJU9qEIXOTtuxQCZrCduXW7nKAEJyFT
k+rcY/paDa3WNu4u+Nyk5g1OGP+V4WKb0L/r39OdWrYnGEUwu43xBXBTxDil1TyQ
FBFkscQETkALc+ikmJFfM11gPYOZSVcieE3vc1aPESdultpZbb8fRVioIgCaJWqp
f+R7HINxbvV2IYQD17iAjQp+dV2mdbsIHKKsBQ+D4z3e07punZOLjPpwKKFQTm/b
o9ilNwdOJFQB0a8pbpaAakxh9KyPEP8iLGRmcVf4Zik=
-----END CERTIFICATE-----
Generated at Sat May 10 19:03:38 2025 by rpki-client