Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1F0E2825B211F08F3940AEDAE4EC9C.roa
File: CC1F0E2825B211F08F3940AEDAE4EC9C.roa (raw, json)
Hash identifier: 8z2tPOV7n0HTOIun7no4VWP18A30eYXyJSfZSJfQYSA=
Subject key identifier: E7:B1:AB:E9:9A:84:F8:AB:BB:BB:20:6D:8F:85:6C:35:0D:00:CD:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1F0E2825B211F08F3940AEDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 11:03:51 +0000
ROA not before: Wed 30 Apr 2025 11:03:45 +0000
ROA not after: Wed 26 Apr 2028 11:03:45 +0000
asID: 17561
IP address blocks: 154.195.8.0/24 maxlen: 24
154.195.9.0/24 maxlen: 24
154.195.10.0/24 maxlen: 24
154.195.11.0/24 maxlen: 24
154.195.12.0/24 maxlen: 24
154.195.13.0/24 maxlen: 24
154.207.178.0/24 maxlen: 24
154.207.179.0/24 maxlen: 24
154.207.182.0/24 maxlen: 24
154.207.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97612 (0x17d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:03:45 2025 GMT
Not After : Apr 26 11:03:45 2028 GMT
Subject: CN=68120397-3a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:e9:e8:50:38:1a:a7:45:19:46:e6:74:23:
17:52:52:ea:84:11:f2:9c:a7:49:b8:b0:a2:de:89:
84:88:60:41:57:25:44:cf:5a:6a:cb:0d:43:f9:43:
24:cf:62:51:a9:2a:32:08:7d:5d:30:1c:7b:a7:19:
63:88:be:50:39:75:6a:df:36:49:94:da:82:ed:0a:
ba:3b:88:02:b1:24:d9:e0:3d:38:50:ce:54:90:1a:
d6:d7:9c:ff:cc:53:c3:ff:f4:20:e8:7e:3e:97:5c:
a5:8f:89:4b:5c:81:aa:e4:56:24:a6:af:9f:68:22:
64:2f:4a:0b:b8:8b:bb:ae:d4:6e:2f:cc:7b:3a:76:
62:d3:2b:c6:d1:d3:ed:e4:3c:02:47:1f:cd:35:7f:
59:55:64:3b:da:12:a4:29:23:24:9e:51:56:a6:a3:
d6:5f:a7:9e:db:e7:6b:26:77:a7:a8:dc:2d:b3:72:
bc:06:26:f6:38:55:b1:c2:3e:81:89:b0:57:65:e2:
a5:fe:ff:32:ab:39:79:81:16:15:a3:cf:9d:4d:fd:
49:89:88:10:d6:0f:01:8a:2f:97:f0:ee:50:a9:68:
95:3f:58:c2:1d:c2:3b:24:13:18:6b:e8:a2:2f:c9:
70:6b:95:4e:7a:ef:35:39:26:6c:9f:2f:83:32:fa:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:AB:E9:9A:84:F8:AB:BB:BB:20:6D:8F:85:6C:35:0D:00:CD:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC1F0E2825B211F08F3940AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.8.0-154.195.13.255
154.207.178.0/23
154.207.182.0/23
Signature Algorithm: sha256WithRSAEncryption
88:c0:9d:64:7e:2f:fa:f0:80:63:fd:14:61:83:3d:b6:5b:d7:
74:0e:57:39:00:8a:79:52:cd:2c:4d:4d:a2:c7:f1:da:1b:5f:
53:a4:41:00:38:53:cf:3f:82:f9:2f:bc:65:80:0f:c0:52:75:
a5:22:b3:12:da:ab:e8:a9:28:28:bc:0e:93:63:dd:f3:71:66:
6a:c0:07:4b:2e:a1:94:c9:2a:75:70:c2:a2:cf:6e:71:b1:1a:
e6:ef:86:49:ea:be:3e:64:cc:72:7d:ab:5d:7b:c0:00:0d:ba:
53:9e:2b:60:15:7a:f9:a2:2b:55:65:38:ce:9f:41:b6:28:fe:
2c:a3:51:28:ff:b8:b4:23:02:18:7c:9e:2f:c9:3f:72:55:25:
13:30:e9:94:b2:2c:51:71:93:c3:61:45:57:9e:70:06:c4:5d:
09:73:fc:cd:ea:cd:d4:c3:c0:17:fb:15:69:1b:b5:35:e3:92:
c0:8f:b5:d5:21:11:9e:31:f9:d5:a9:ae:24:47:17:01:2a:ca:
4e:4e:f2:26:51:f6:f8:43:ed:e2:8f:25:e0:d1:e6:ce:de:2f:
06:5f:34:b3:4e:01:34:23:99:4b:3c:9f:b8:b5:1f:87:db:1c:
28:74:19:38:14:a2:15:ed:b8:d1:19:8c:f6:b3:d9:42:6d:56:
1d:ef:21:1c
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAX1MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMTEwMzQ1WhcNMjgwNDI2MTEwMzQ1WjAYMRYw
FAYDVQQDEw02ODEyMDM5Ny0zYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAonnp6FA4GqdFGUbmdCMXUlLqhBHynKdJuLCi3omEiGBBVyVEz1pqyw1D
+UMkz2JRqSoyCH1dMBx7pxljiL5QOXVq3zZJlNqC7Qq6O4gCsSTZ4D04UM5UkBrW
15z/zFPD//Qg6H4+l1ylj4lLXIGq5FYkpq+faCJkL0oLuIu7rtRuL8x7OnZi0yvG
0dPt5DwCRx/NNX9ZVWQ72hKkKSMknlFWpqPWX6ee2+drJnenqNwts3K8Bib2OFWx
wj6BibBXZeKl/v8yqzl5gRYVo8+dTf1JiYgQ1g8Bii+X8O5QqWiVP1jCHcI7JBMY
a+iiL8lwa5VOeu81OSZsny+DMvocewIDAQABo4ICuTCCArUwHQYDVR0OBBYEFOex
q+mahPiru7sgbY+FbDUNAM21MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQzFGMEUyODI1QjIxMUYwOEYzOTQwQUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAOawwgDBAGawwwDBAGa
z7IDBAGaz7YwDQYJKoZIhvcNAQELBQADggEBAIjAnWR+L/rwgGP9FGGDPbZb13QO
VzkAinlSzSxNTaLH8dobX1OkQQA4U88/gvkvvGWAD8BSdaUisxLaq+ipKCi8DpNj
3fNxZmrAB0suoZTJKnVwwqLPbnGxGubvhknqvj5kzHJ9q117wAANulOeK2AVevmi
K1VlOM6fQbYo/iyjUSj/uLQjAhh8ni/JP3JVJRMw6ZSyLFFxk8NhRVeecAbEXQlz
/M3qzdTDwBf7FWkbtTXjksCPtdUhEZ4x+dWpriRHFwEqyk5O8iZR9vhD7eKPJeDR
5s7eLwZfNLNOATQjmUs8n7i1H4fbHCh0GTgUohXtuNEZjPaz2UJtVh3vIRw=
-----END CERTIFICATE-----
Generated at Fri May 9 02:59:55 2025 by rpki-client