Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FFC2286151611F0BE8E31BD6DB8BCC6.roa
File: 6FFC2286151611F0BE8E31BD6DB8BCC6.roa (raw, json)
Hash identifier: A8mqcvjP9HMBDFceQ6kMU0hWx6eiu68Ue60OIQ942qQ=
Subject key identifier: 0E:0A:73:4D:B3:E0:5B:64:15:86:D8:82:00:F8:7B:E9:1C:93:5B:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017874
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FFC2286151611F0BE8E31BD6DB8BCC6.roa
Signing time: Wed 09 Apr 2025 07:44:16 +0000
ROA not before: Wed 09 Apr 2025 07:44:12 +0000
ROA not after: Tue 29 Apr 2025 07:44:12 +0000
asID: 5065
IP address blocks: 154.94.32.0/24 maxlen: 24
154.94.34.0/24 maxlen: 24
154.94.36.0/24 maxlen: 24
154.94.37.0/24 maxlen: 24
154.94.38.0/24 maxlen: 24
154.94.41.0/24 maxlen: 24
154.94.43.0/24 maxlen: 24
154.94.44.0/24 maxlen: 24
154.94.46.0/24 maxlen: 24
154.94.47.0/24 maxlen: 24
154.94.48.0/24 maxlen: 24
154.94.50.0/24 maxlen: 24
154.94.52.0/24 maxlen: 24
154.94.53.0/24 maxlen: 24
154.94.56.0/24 maxlen: 24
154.94.59.0/24 maxlen: 24
154.94.60.0/24 maxlen: 24
154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Apr 2025 05:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96372 (0x17874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 07:44:12 2025 GMT
Not After : Apr 29 07:44:12 2025 GMT
Subject: CN=67f62550-7aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:2c:3f:45:d1:b8:8f:21:f7:60:be:60:51:
c8:ea:78:96:86:3e:3b:a6:84:b8:e1:0b:33:d5:c8:
75:9d:20:ea:0a:19:da:1d:17:fa:ef:b0:4e:92:50:
4b:90:20:7c:b7:30:0d:d2:9f:7b:73:c4:83:e7:5f:
30:89:37:7c:5f:ff:99:1f:b7:c8:91:27:5c:09:e5:
0b:cb:fb:f8:fa:f2:19:58:2f:c2:0c:75:ca:f3:26:
3c:b0:0f:d4:38:8c:9c:22:a0:7a:8a:d8:17:70:16:
77:ab:91:6a:ae:d8:c4:03:33:a4:eb:75:8f:65:35:
8a:52:12:a0:76:6b:f1:21:2f:1f:5d:5b:d4:d4:32:
19:0f:af:d9:16:f4:e4:eb:5c:d7:27:1e:3e:cb:4d:
07:8b:a0:86:ea:9d:11:64:29:40:a4:f9:a1:7f:7d:
c5:4c:37:2e:b5:16:2d:1e:5c:0b:e1:f3:be:b4:30:
fc:c1:59:23:fb:62:a3:81:e6:69:8a:a3:10:a4:a9:
17:86:f8:fe:63:24:e5:85:f4:74:55:82:90:26:2b:
b4:d4:42:5c:24:7f:f0:42:d1:76:15:15:cb:74:9d:
67:c1:f2:7d:72:90:87:62:f0:82:57:49:8d:f8:9d:
2d:d8:9a:a7:7d:b4:04:32:2b:45:e0:7f:e9:b3:ed:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:73:4D:B3:E0:5B:64:15:86:D8:82:00:F8:7B:E9:1C:93:5B:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FFC2286151611F0BE8E31BD6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.32.0/24
154.94.34.0/24
154.94.36.0-154.94.38.255
154.94.41.0/24
154.94.43.0-154.94.44.255
154.94.46.0-154.94.48.255
154.94.50.0/24
154.94.52.0/23
154.94.56.0/24
154.94.59.0-154.94.60.255
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:cc:1d:ee:72:58:77:4d:36:a0:7b:f9:71:80:bb:f3:7b:63:
6a:db:48:29:2d:1f:94:10:19:3f:1a:8f:ae:89:b2:15:dd:15:
c9:71:1c:b7:5e:ba:97:56:4f:48:43:5d:a4:4f:0b:b2:a3:c1:
96:c2:6e:41:c6:86:27:6d:d3:d3:07:bb:5c:f7:01:99:a2:39:
0f:b6:8b:80:de:ce:7e:42:1e:57:34:05:2b:73:ee:d5:99:98:
a9:c7:b7:62:dc:54:cb:1b:2e:0b:8a:d4:b4:b3:c8:5f:6b:fb:
50:57:0d:15:ac:25:c6:4d:a8:ed:f4:95:16:43:36:bb:4b:0f:
b6:82:ba:be:67:41:7d:fc:7b:37:20:e6:21:73:8d:4a:58:56:
cd:b1:f4:e2:ee:c4:00:1e:f9:54:f1:21:e7:f9:f7:6e:3a:36:
1d:35:0e:bd:f5:32:4d:68:6b:a5:63:60:39:6c:e6:d4:10:e0:
30:94:db:c6:34:bb:34:e3:6f:2d:d5:62:c8:1a:c2:12:d0:4a:
a4:87:27:d2:45:c4:a3:be:98:47:34:29:09:89:73:32:c5:90:
eb:83:10:05:fa:7a:c4:49:5f:d9:c5:71:08:ec:71:fb:c5:c3:
08:c3:95:a9:e2:54:1c:86:fd:2f:af:f3:ca:34:67:6b:93:f5:
64:82:75:a1
-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIDAXh0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA5MDc0NDEyWhcNMjUwNDI5MDc0NDEyWjAYMRYw
FAYDVQQDEw02N2Y2MjU1MC03YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmtosP0XRuI8h92C+YFHI6niWhj47poS44Qsz1ch1nSDqChnaHRf677BO
klBLkCB8tzAN0p97c8SD518wiTd8X/+ZH7fIkSdcCeULy/v4+vIZWC/CDHXK8yY8
sA/UOIycIqB6itgXcBZ3q5FqrtjEAzOk63WPZTWKUhKgdmvxIS8fXVvU1DIZD6/Z
FvTk61zXJx4+y00Hi6CG6p0RZClApPmhf33FTDcutRYtHlwL4fO+tDD8wVkj+2Kj
geZpiqMQpKkXhvj+YyTlhfR0VYKQJiu01EJcJH/wQtF2FRXLdJ1nwfJ9cpCHYvCC
V0mN+J0t2JqnfbQEMitF4H/ps+2IFwIDAQABo4IDATCCAv0wHQYDVR0OBBYEFA4K
c02z4FtkFYbYggD4e+kck1sxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RkZDMjI4NjE1MTYxMUYwQkU4RTMxQkQ2REI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQAml4gAwQAml4iMAwDBAKa
XiQDBACaXiYDBACaXikwDAMEAJpeKwMEAJpeLDAMAwQBml4uAwQAml4wAwQAml4y
AwQBml40AwQAml44MAwDBACaXjsDBACaXjwDBACaXj8wDQYJKoZIhvcNAQELBQAD
ggEBALDMHe5yWHdNNqB7+XGAu/N7Y2rbSCktH5QQGT8aj66JshXdFclxHLdeupdW
T0hDXaRPC7KjwZbCbkHGhidt09MHu1z3AZmiOQ+2i4Dezn5CHlc0BStz7tWZmKnH
t2LcVMsbLguK1LSzyF9r+1BXDRWsJcZNqO30lRZDNrtLD7aCur5nQX38ezcg5iFz
jUpYVs2x9OLuxAAe+VTxIef59246Nh01Dr31Mk1oa6VjYDls5tQQ4DCU28Y0uzTj
by3VYsgawhLQSqSHJ9JFxKO+mEc0KQmJczLFkOuDEAX6esRJX9nFcQjscfvFwwjD
laniVByG/S+v88o0Z2uT9WSCdaE=
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:24:45 2025 by rpki-client