Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/919234CE26AC11F0A36374B1DAE4EC9C.roa
File: 919234CE26AC11F0A36374B1DAE4EC9C.roa (raw, json)
Hash identifier: fxZPhwoP+qeIFaq1JGe5KXEDFqbhai9VOSJ5EMqHtEY=
Subject key identifier: 69:67:57:00:64:07:C3:29:29:75:51:5F:12:F5:97:92:2E:D3:A0:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/919234CE26AC11F0A36374B1DAE4EC9C.roa
Signing time: Thu 01 May 2025 16:51:47 +0000
ROA not before: Thu 01 May 2025 16:51:42 +0000
ROA not after: Mon 01 May 2028 16:51:42 +0000
asID: 17561
IP address blocks: 154.221.106.0/24 maxlen: 24
154.221.107.0/24 maxlen: 24
154.221.112.0/24 maxlen: 24
154.221.115.0/24 maxlen: 24
154.221.116.0/24 maxlen: 24
154.221.118.0/24 maxlen: 24
154.221.119.0/24 maxlen: 24
154.221.121.0/24 maxlen: 24
154.221.122.0/24 maxlen: 24
154.221.124.0/24 maxlen: 24
154.221.125.0/24 maxlen: 24
154.221.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97854 (0x17e3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 16:51:42 2025 GMT
Not After : May 1 16:51:42 2028 GMT
Subject: CN=6813a6a3-d7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:71:92:55:2e:87:a7:c5:3e:65:fa:bc:7f:
8b:6b:52:20:5a:a8:b5:39:8f:a8:65:06:7d:fb:9c:
b0:cb:91:73:21:c5:62:4f:ff:f3:34:d8:87:b3:e1:
15:df:67:b8:db:1d:bc:88:0f:0c:38:ce:21:5a:63:
e7:00:5c:81:0a:21:02:9b:9b:09:bb:09:ed:6b:bd:
3a:22:68:34:20:24:8f:05:af:ad:1c:dc:19:67:eb:
f4:a4:f1:48:9c:b3:a5:8f:34:d8:c3:5c:5f:f0:40:
65:8a:98:63:f9:37:dc:74:b3:28:82:ef:67:ed:79:
30:d4:25:41:d3:f1:b2:21:4e:6d:ea:a5:a8:2c:07:
d6:b3:ae:e9:02:a5:cc:99:f2:ef:60:ba:5f:92:ba:
98:bf:97:56:24:8f:a9:4b:28:23:b3:fa:bd:54:9c:
aa:d8:e8:7b:37:46:b1:90:c7:f7:b5:5a:44:74:12:
a5:55:32:20:00:58:2b:da:03:97:56:68:64:a8:6a:
81:7e:87:07:b6:dc:e9:cf:9d:70:09:cb:f1:3f:b6:
da:ea:5f:ae:a3:98:29:e6:2d:97:7e:f5:a6:bd:33:
b3:d0:8f:50:25:c8:1f:84:2e:24:92:c0:af:d3:bf:
17:30:36:78:93:49:3d:31:93:e5:87:c4:2e:76:17:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:67:57:00:64:07:C3:29:29:75:51:5F:12:F5:97:92:2E:D3:A0:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/919234CE26AC11F0A36374B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.106.0/23
154.221.112.0/24
154.221.115.0-154.221.116.255
154.221.118.0/23
154.221.121.0-154.221.122.255
154.221.124.0/23
154.221.127.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8a:98:37:a4:6f:1d:f2:33:34:79:06:bb:81:ee:a9:83:58:
9e:c9:6c:39:aa:8c:8b:52:92:a5:97:0e:49:9c:ad:28:94:6e:
97:9d:36:35:a1:24:da:1b:b9:0f:f5:96:cc:c8:67:9c:ce:a6:
64:ee:b9:5f:5a:cf:6a:30:03:59:84:d1:29:0d:b8:8f:32:f0:
97:89:d9:62:54:9b:e7:62:11:2e:32:80:c3:d2:d3:24:55:69:
25:3c:29:cc:a5:40:4f:91:99:49:ab:f1:9b:38:de:55:df:5c:
ac:0e:56:f3:00:e9:a4:f8:51:f8:49:c4:b1:16:f5:af:e1:01:
b6:19:21:21:b6:99:15:30:73:b3:d8:90:23:ee:58:18:c7:6f:
48:e9:8f:00:05:70:39:e2:08:9a:d3:8d:a3:a2:5d:04:65:30:
4d:aa:61:ee:e8:7a:9d:e8:a5:9c:bc:2b:dd:93:8d:87:e4:e6:
a2:55:3e:b2:ba:7c:8c:a9:72:c4:77:ec:9b:a3:eb:19:ce:71:
d7:d1:f0:82:50:e3:be:53:06:6e:0a:7e:55:a4:e2:75:93:68:
99:ce:d0:ae:c9:b3:02:c1:77:5f:02:87:d2:78:6e:01:ea:77:
eb:11:19:76:a0:58:01:bd:29:8b:f0:22:e0:b8:c2:e8:d9:4a:
84:69:5a:a9
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIDAX4+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMTY1MTQyWhcNMjgwNTAxMTY1MTQyWjAYMRYw
FAYDVQQDEw02ODEzYTZhMy1kN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw01xklUuh6fFPmX6vH+La1IgWqi1OY+oZQZ9+5ywy5FzIcViT//zNNiH
s+EV32e42x28iA8MOM4hWmPnAFyBCiECm5sJuwnta706Img0ICSPBa+tHNwZZ+v0
pPFInLOljzTYw1xf8EBliphj+TfcdLMogu9n7Xkw1CVB0/GyIU5t6qWoLAfWs67p
AqXMmfLvYLpfkrqYv5dWJI+pSygjs/q9VJyq2Oh7N0axkMf3tVpEdBKlVTIgAFgr
2gOXVmhkqGqBfocHttzpz51wCcvxP7ba6l+uo5gp5i2XfvWmvTOz0I9QJcgfhC4k
ksCv078XMDZ4k0k9MZPlh8Qudhc+3wIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFGln
VwBkB8MpKXVRXxL1l5Iu06BAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MTkyMzRDRTI2QUMxMUYwQTM2Mzc0QjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQBmt1qAwQAmt1wMAwDBACa
3XMDBACa3XQDBAGa3XYwDAMEAJrdeQMEAJrdegMEAZrdfAMEAJrdfzANBgkqhkiG
9w0BAQsFAAOCAQEAI4qYN6RvHfIzNHkGu4HuqYNYnslsOaqMi1KSpZcOSZytKJRu
l502NaEk2hu5D/WWzMhnnM6mZO65X1rPajADWYTRKQ24jzLwl4nZYlSb52IRLjKA
w9LTJFVpJTwpzKVAT5GZSavxmzjeVd9crA5W8wDppPhR+EnEsRb1r+EBthkhIbaZ
FTBzs9iQI+5YGMdvSOmPAAVwOeIImtONo6JdBGUwTaph7uh6neilnLwr3ZONh+Tm
olU+srp8jKlyxHfsm6PrGc5x19HwglDjvlMGbgp+VaTidZNomc7QrsmzAsF3XwKH
0nhuAep36xEZdqBYAb0pi/Ai4LjC6NlKhGlaqQ==
-----END CERTIFICATE-----
Generated at Sat May 10 22:08:46 2025 by rpki-client