Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF871306269211F081FAB288DAE4EC9C.roa
File: FF871306269211F081FAB288DAE4EC9C.roa (raw, json)
Hash identifier: unW7Sg5dzHH9QQ5UK979RsRgL1P2oxt4enJKDssKef4=
Subject key identifier: 55:0D:54:D2:80:1F:1A:D7:8E:BA:D8:61:35:02:13:14:1D:D5:B8:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF871306269211F081FAB288DAE4EC9C.roa
Signing time: Thu 01 May 2025 13:48:45 +0000
ROA not before: Thu 01 May 2025 13:48:33 +0000
ROA not after: Fri 28 Apr 2028 13:48:33 +0000
asID: 17561
IP address blocks: 154.86.230.0/24 maxlen: 24
154.86.231.0/24 maxlen: 24
154.86.232.0/24 maxlen: 24
154.86.233.0/24 maxlen: 24
154.86.234.0/24 maxlen: 24
154.86.235.0/24 maxlen: 24
154.86.236.0/24 maxlen: 24
154.86.237.0/24 maxlen: 24
154.86.238.0/24 maxlen: 24
154.86.239.0/24 maxlen: 24
154.86.240.0/24 maxlen: 24
154.86.241.0/24 maxlen: 24
154.86.242.0/24 maxlen: 24
154.86.243.0/24 maxlen: 24
154.86.244.0/24 maxlen: 24
154.86.245.0/24 maxlen: 24
154.86.246.0/24 maxlen: 24
154.86.247.0/24 maxlen: 24
154.86.248.0/24 maxlen: 24
154.86.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97810 (0x17e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 13:48:33 2025 GMT
Not After : Apr 28 13:48:33 2028 GMT
Subject: CN=68137bbd-b4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:53:84:f0:fb:db:77:17:47:5e:b8:f5:5f:
09:5b:50:a2:ad:98:eb:b3:50:b4:71:56:31:fb:7e:
a8:6d:0b:49:d8:f3:af:d8:b9:35:94:7c:42:5b:e2:
64:53:74:64:c8:52:31:90:2d:d0:29:d7:20:bb:05:
2b:84:db:ca:14:be:de:c7:c9:5b:09:3b:5a:cc:10:
0e:39:04:53:b8:fb:49:44:3a:6d:21:af:da:a7:c7:
85:77:d0:54:2a:9d:01:11:1a:92:d2:d7:a6:7b:33:
4d:62:a5:98:ba:b5:78:cb:2f:c7:d0:9b:4c:43:81:
d6:60:38:54:28:36:fb:7e:3b:7e:8a:5c:40:a4:57:
30:84:2a:fb:63:2d:f3:98:eb:29:27:72:90:bf:9c:
18:28:7b:2d:96:be:c9:9e:85:98:29:09:2f:07:f8:
b3:0b:86:8d:e6:2e:18:0f:21:8f:a1:88:8d:ba:3c:
c5:78:49:28:0e:d1:37:4c:3d:d3:9a:4a:88:e0:34:
e5:9a:7a:27:06:a6:1c:8b:1e:41:b3:6c:36:99:6f:
f2:f9:34:77:2b:47:b2:bf:c4:00:21:6b:ce:1b:ab:
3f:44:72:60:28:29:40:02:55:cd:02:7b:0b:af:ae:
cc:7e:a8:e3:15:c5:22:87:7e:3c:72:1d:e8:d5:97:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0D:54:D2:80:1F:1A:D7:8E:BA:D8:61:35:02:13:14:1D:D5:B8:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF871306269211F081FAB288DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.230.0-154.86.249.255
Signature Algorithm: sha256WithRSAEncryption
a8:a2:b6:51:6c:5b:0e:09:f2:4d:0e:f7:1e:0a:8f:e3:db:a0:
1f:ef:a4:51:87:3f:8a:c0:48:ea:fb:c1:f8:9b:67:8e:36:15:
5b:4c:58:6c:1a:80:95:67:27:ad:98:55:80:41:be:36:cd:0f:
a0:6f:b8:ec:fc:0d:a3:b9:d7:56:e5:2e:95:67:72:39:08:79:
6b:6c:26:a7:10:fe:a9:f2:ed:14:4c:bd:6f:ff:19:49:9e:6d:
3c:3b:04:4a:8e:f1:dc:22:8e:a3:a0:33:41:1e:08:95:fe:41:
04:db:d3:6d:5a:e6:26:18:f8:d9:7d:d5:fe:5d:ab:24:83:4e:
a5:16:7f:7e:8c:85:3b:a5:f7:85:26:77:f4:15:21:0e:60:f1:
84:58:62:7d:1d:c4:fd:e7:30:3a:26:13:a7:91:c9:ac:9c:53:
68:7f:dd:df:2b:8c:12:89:30:49:c7:9a:3d:31:e3:6a:83:c4:
60:03:2c:10:3b:07:b8:98:46:5c:0d:9d:2a:69:fc:94:11:22:
b9:25:b5:9b:04:ca:65:7d:42:13:e6:85:19:59:09:b1:38:e6:
c0:78:15:0d:cd:2e:65:77:e1:ab:fb:82:7d:3e:dc:e7:ec:37:
28:11:6f:c8:80:84:a1:79:cd:5f:f9:ca:45:cb:26:c5:00:8e:
17:9c:85:3e
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAX4SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTAxMTM0ODMzWhcNMjgwNDI4MTM0ODMzWjAYMRYw
FAYDVQQDEw02ODEzN2JiZC1iNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3UlThPD723cXR1649V8JW1CirZjrs1C0cVYx+36obQtJ2POv2Lk1lHxC
W+JkU3RkyFIxkC3QKdcguwUrhNvKFL7ex8lbCTtazBAOOQRTuPtJRDptIa/ap8eF
d9BUKp0BERqS0temezNNYqWYurV4yy/H0JtMQ4HWYDhUKDb7fjt+ilxApFcwhCr7
Yy3zmOspJ3KQv5wYKHstlr7JnoWYKQkvB/izC4aN5i4YDyGPoYiNujzFeEkoDtE3
TD3TmkqI4DTlmnonBqYcix5Bs2w2mW/y+TR3K0eyv8QAIWvOG6s/RHJgKClAAlXN
AnsLr67MfqjjFcUih348ch3o1Zd87QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFUN
VNKAHxrXjrrYYTUCExQd1bhgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjg3MTMwNjI2OTIxMUYwODFGQUIyODhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaVuYDBAGaVvgwDQYJ
KoZIhvcNAQELBQADggEBAKiitlFsWw4J8k0O9x4Kj+PboB/vpFGHP4rASOr7wfib
Z442FVtMWGwagJVnJ62YVYBBvjbND6BvuOz8DaO511blLpVncjkIeWtsJqcQ/qny
7RRMvW//GUmebTw7BEqO8dwijqOgM0EeCJX+QQTb021a5iYY+Nl91f5dqySDTqUW
f36MhTul94Umd/QVIQ5g8YRYYn0dxP3nMDomE6eRyaycU2h/3d8rjBKJMEnHmj0x
42qDxGADLBA7B7iYRlwNnSpp/JQRIrkltZsEymV9QhPmhRlZCbE45sB4FQ3NLmV3
4av7gn0+3OfsNygRb8iAhKF5zV/5ykXLJsUAjhechT4=
-----END CERTIFICATE-----
Generated at Thu May 8 00:44:29 2025 by rpki-client