Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED9E4AC22F2211F0AB2F2BD0DAE4EC9C.roa
File: ED9E4AC22F2211F0AB2F2BD0DAE4EC9C.roa (raw, json)
Hash identifier: VF48bWLvSefE0j9sobnbWu/yEumlDy2o0sGPtocR0ZU=
Subject key identifier: CE:63:D3:59:89:2D:29:06:11:D7:19:54:DC:A6:0D:BC:2C:FD:10:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED9E4AC22F2211F0AB2F2BD0DAE4EC9C.roa
Signing time: Mon 12 May 2025 11:19:11 +0000
ROA not before: Mon 12 May 2025 11:19:07 +0000
ROA not after: Tue 20 May 2025 11:19:07 +0000
asID: 9009
IP address blocks: 154.216.204.0/24 maxlen: 24
154.216.213.0/24 maxlen: 24
154.216.215.0/24 maxlen: 24
154.216.222.0/24 maxlen: 24
154.216.229.0/24 maxlen: 24
154.216.232.0/24 maxlen: 24
154.216.237.0/24 maxlen: 24
154.216.240.0/24 maxlen: 24
154.216.243.0/24 maxlen: 24
154.216.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98281 (0x17fe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 11:19:07 2025 GMT
Not After : May 20 11:19:07 2025 GMT
Subject: CN=6821d92f-a2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:d9:02:3b:e0:64:80:9b:e4:97:6a:03:ca:
e4:be:35:f6:24:5f:55:cd:60:e5:6e:59:6a:e2:11:
36:0b:bc:b3:dc:bc:db:ce:17:2b:b9:66:ef:a7:f3:
e5:fd:fa:02:d3:b9:8a:c2:6b:ad:df:3d:20:4f:19:
66:0c:e8:fc:da:e3:fd:16:1b:a5:a9:8a:06:ee:91:
56:41:d9:c8:ed:5b:98:45:75:8b:72:03:5d:c5:c6:
70:06:30:5b:8b:0d:36:d9:d8:d1:e1:be:6f:a7:6d:
99:5a:42:ed:c1:95:6a:8f:d9:62:41:7e:e5:ee:50:
6c:a7:85:c8:60:5a:55:44:af:8a:c0:f2:9e:58:f7:
7c:f8:13:a4:74:f9:84:cd:d0:2b:33:27:83:23:53:
5d:3e:30:64:2a:51:72:9c:23:fb:e4:64:55:8b:04:
06:0e:e1:56:38:94:14:22:76:29:37:c2:5f:5e:9e:
c7:c6:ba:f5:9b:11:f5:ba:89:d0:e6:db:d0:ab:1d:
56:ae:14:32:b1:89:94:5f:63:06:a3:30:9c:3f:1a:
ee:a7:e2:50:b7:d3:7c:bf:13:68:0b:7f:f9:39:fc:
25:60:a0:41:7b:54:1e:06:e1:ff:8a:a8:75:7b:aa:
79:7a:da:17:17:e5:ee:bd:38:08:37:1b:23:c1:2e:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:D3:59:89:2D:29:06:11:D7:19:54:DC:A6:0D:BC:2C:FD:10:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED9E4AC22F2211F0AB2F2BD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.204.0/24
154.216.213.0/24
154.216.215.0/24
154.216.222.0/24
154.216.229.0/24
154.216.232.0/24
154.216.237.0/24
154.216.240.0/24
154.216.243.0/24
154.216.246.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7f:3e:e0:5a:db:8e:03:be:52:72:a5:ac:b4:d9:55:d1:10:
56:69:66:39:f8:fc:58:d3:b8:11:38:79:f7:8a:d3:30:6e:b7:
fb:7f:91:42:c6:35:70:ba:c6:ec:41:ec:b2:0a:c1:df:07:ec:
d5:53:25:a6:80:71:61:c1:49:5d:19:b3:8e:21:63:07:b9:ec:
50:49:94:76:7e:4b:7a:4c:9c:1c:a7:90:af:b7:1d:63:fe:7e:
51:51:b0:d6:7e:1d:24:42:53:a4:74:bb:e6:3a:fd:b3:ff:61:
b3:e8:95:5e:09:31:a8:56:2b:cd:87:4b:c5:70:26:fe:4f:82:
31:a6:24:ce:62:1c:24:9f:11:9b:5a:26:f1:00:90:81:dd:77:
f5:fa:01:f1:75:82:eb:ce:49:2d:5e:83:ad:e4:c4:87:59:6c:
25:bd:85:f6:85:af:80:bc:ad:3d:e1:c4:19:f9:ab:57:f7:15:
72:92:8e:cc:35:4b:31:e0:9d:09:14:ea:5c:40:04:ce:75:68:
00:59:30:c4:49:98:b5:6a:49:cb:9c:ab:cb:b9:67:38:0a:a0:
9b:fd:34:66:0a:ab:48:81:32:ba:55:9c:fc:27:ae:8a:9d:68:
eb:ed:b8:24:a8:f5:d3:2e:22:2e:8d:e5:68:84:61:3d:11:f6:
3a:3b:4a:28
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIDAX/pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTEyMTExOTA3WhcNMjUwNTIwMTExOTA3WjAYMRYw
FAYDVQQDEw02ODIxZDkyZi1hMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs/DZAjvgZICb5JdqA8rkvjX2JF9VzWDlbllq4hE2C7yz3LzbzhcruWbv
p/Pl/foC07mKwmut3z0gTxlmDOj82uP9FhulqYoG7pFWQdnI7VuYRXWLcgNdxcZw
BjBbiw022djR4b5vp22ZWkLtwZVqj9liQX7l7lBsp4XIYFpVRK+KwPKeWPd8+BOk
dPmEzdArMyeDI1NdPjBkKlFynCP75GRViwQGDuFWOJQUInYpN8JfXp7Hxrr1mxH1
uonQ5tvQqx1WrhQysYmUX2MGozCcPxrup+JQt9N8vxNoC3/5OfwlYKBBe1QeBuH/
iqh1e6p5etoXF+XuvTgINxsjwS7KFwIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFM5j
01mJLSkGEdcZVNymDbws/RCqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRDlFNEFDMjJGMjIxMUYwQUIyRjJCRDBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmtjMAwQAmtjVAwQAmtjX
AwQAmtjeAwQAmtjlAwQAmtjoAwQAmtjtAwQAmtjwAwQAmtjzAwQAmtj2MA0GCSqG
SIb3DQEBCwUAA4IBAQCufz7gWtuOA75ScqWstNlV0RBWaWY5+PxY07gROHn3itMw
brf7f5FCxjVwusbsQeyyCsHfB+zVUyWmgHFhwUldGbOOIWMHuexQSZR2fkt6TJwc
p5Cvtx1j/n5RUbDWfh0kQlOkdLvmOv2z/2Gz6JVeCTGoVivNh0vFcCb+T4IxpiTO
YhwknxGbWibxAJCB3Xf1+gHxdYLrzkktXoOt5MSHWWwlvYX2ha+AvK094cQZ+atX
9xVyko7MNUsx4J0JFOpcQATOdWgAWTDESZi1aknLnKvLuWc4CqCb/TRmCqtIgTK6
VZz8J66KnWjr7bgkqPXTLiIujeVohGE9EfY6O0oo
-----END CERTIFICATE-----
Generated at Thu May 15 23:49:18 2025 by rpki-client