Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A29308631211F08E339FADDAE4EC9C.roa
File: B4A29308631211F08E339FADDAE4EC9C.roa (raw, json)
Hash identifier: zv5JCsZ36GEvQW5D+F5S9YqhUPZN1WsdfsA76f7yQKg=
Subject key identifier: 40:A6:22:00:04:11:A1:03:84:CF:34:3F:75:63:74:77:7C:F6:A7:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018E3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A29308631211F08E339FADDAE4EC9C.roa
Signing time: Thu 17 Jul 2025 13:34:04 +0000
ROA not before: Thu 17 Jul 2025 13:33:59 +0000
ROA not after: Sat 30 Aug 2025 13:33:59 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
154.194.7.0/24 maxlen: 24
154.194.38.0/24 maxlen: 24
154.194.70.0/24 maxlen: 24
154.194.71.0/24 maxlen: 24
154.194.86.0/24 maxlen: 24
154.194.87.0/24 maxlen: 24
154.194.88.0/24 maxlen: 24
154.194.90.0/24 maxlen: 24
154.194.91.0/24 maxlen: 24
154.195.0.0/24 maxlen: 24
154.195.1.0/24 maxlen: 24
154.195.100.0/24 maxlen: 24
154.195.126.0/24 maxlen: 24
154.196.16.0/24 maxlen: 24
154.196.17.0/24 maxlen: 24
154.196.19.0/24 maxlen: 24
154.196.47.0/24 maxlen: 24
154.196.48.0/24 maxlen: 24
154.196.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101948 (0x18e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 13:33:59 2025 GMT
Not After : Aug 30 13:33:59 2025 GMT
Subject: CN=6878fbcc-1c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:d6:60:a4:2f:9e:21:e5:36:62:52:69:a8:
ea:f7:d6:4e:25:20:4a:06:ac:5d:3d:a1:1f:e7:b0:
13:ac:be:20:00:61:ec:11:73:31:ef:db:2b:c2:9d:
ad:1d:33:cb:d0:16:17:2d:90:49:ef:0a:f2:fb:43:
01:ea:6f:19:ae:d1:94:ca:f7:37:20:d7:63:55:08:
39:c3:3e:25:aa:e4:71:c9:f6:5c:2e:9a:4f:2e:c4:
9b:21:4b:61:e3:a4:b2:94:ae:31:6d:68:59:c7:04:
ce:ab:b4:87:32:14:e4:c6:4c:47:be:e0:b6:b5:81:
15:87:86:1c:b2:78:d2:f1:e6:c9:4e:80:58:09:0a:
f6:9e:b1:5d:83:05:d3:77:2e:ff:13:fb:24:b5:eb:
71:e3:72:5d:fb:8e:53:19:e6:d0:d1:d9:ea:2d:0d:
dd:38:6c:8c:b5:21:9b:28:50:84:74:08:59:57:9e:
bb:a2:d3:7e:20:4d:1f:69:81:94:db:6d:a3:e0:7b:
f0:7e:09:7e:b2:8d:9e:37:4d:c0:38:af:4c:90:1b:
a8:2d:a5:58:73:10:1d:a7:0b:05:e6:eb:72:23:90:
b4:5e:b1:54:7f:27:bd:93:46:ba:10:03:82:2d:40:
a3:05:43:3b:a5:20:6a:cb:a9:dc:6f:fe:3a:a9:aa:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:22:00:04:11:A1:03:84:CF:34:3F:75:63:74:77:7C:F6:A7:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4A29308631211F08E339FADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
154.194.7.0/24
154.194.38.0/24
154.194.70.0/23
154.194.86.0-154.194.88.255
154.194.90.0/23
154.195.0.0/23
154.195.100.0/24
154.195.126.0/24
154.196.16.0/23
154.196.19.0/24
154.196.47.0-154.196.49.255
Signature Algorithm: sha256WithRSAEncryption
42:85:d3:32:8a:be:3f:f5:89:d6:94:4d:4d:bb:43:80:d5:9c:
f9:4b:ca:c9:e2:c2:7d:0a:4e:98:2a:40:1f:76:34:66:de:3a:
a9:e7:3e:6b:a6:48:46:24:fa:67:80:34:db:68:35:97:a9:78:
a3:73:84:18:bc:7e:31:4d:36:a4:43:e8:40:ac:c1:97:3f:14:
35:81:ae:06:40:d7:39:18:61:88:70:f4:96:b4:9f:14:52:6e:
49:80:ad:60:77:68:13:43:86:35:b5:71:d9:db:3c:0e:91:d6:
f0:33:94:ed:3b:8b:32:2d:b8:a2:97:4f:99:0a:f1:ea:bd:9d:
54:59:e3:07:94:86:62:db:f0:9e:3f:15:d8:50:5a:37:c9:60:
ae:6e:9f:d3:05:d7:47:ff:9c:aa:3c:34:2b:4d:8a:30:24:01:
79:8a:06:56:26:ad:3f:72:a9:3f:e3:7f:cd:61:e1:b3:d2:a5:
e0:bb:32:45:a1:78:24:f3:e1:83:7e:44:f8:b6:8f:97:9a:cf:
f5:41:24:06:bd:b1:2d:20:e3:bc:4e:68:e4:27:14:4b:bd:6a:
96:45:14:4d:68:68:c6:2c:0d:dc:5c:40:a8:81:48:58:a3:c8:
2c:91:5f:29:53:d4:10:27:8c:63:f6:7d:4f:ec:29:33:6b:57:
97:53:19:79
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIDAY48MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzE3MTMzMzU5WhcNMjUwODMwMTMzMzU5WjAYMRYw
FAYDVQQDEw02ODc4ZmJjYy0xYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxgfWYKQvniHlNmJSaajq99ZOJSBKBqxdPaEf57ATrL4gAGHsEXMx79sr
wp2tHTPL0BYXLZBJ7wry+0MB6m8ZrtGUyvc3INdjVQg5wz4lquRxyfZcLppPLsSb
IUth46SylK4xbWhZxwTOq7SHMhTkxkxHvuC2tYEVh4YcsnjS8ebJToBYCQr2nrFd
gwXTdy7/E/sktetx43Jd+45TGebQ0dnqLQ3dOGyMtSGbKFCEdAhZV567otN+IE0f
aYGU222j4Hvwfgl+so2eN03AOK9MkBuoLaVYcxAdpwsF5utyI5C0XrFUfye9k0a6
EAOCLUCjBUM7pSBqy6ncb/46qaqJ9wIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFECm
IgAEEaEDhM80P3VjdHd89qfFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNEEyOTMwODYzMTIxMUYwOEUzMzlGQUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQAmsIEAwQAmsIHAwQAmsIm
AwQBmsJGMAwDBAGawlYDBACawlgDBAGawloDBAGawwADBACaw2QDBACaw34DBAGa
xBADBACaxBMwDAMEAJrELwMEAZrEMDANBgkqhkiG9w0BAQsFAAOCAQEAQoXTMoq+
P/WJ1pRNTbtDgNWc+UvKyeLCfQpOmCpAH3Y0Zt46qec+a6ZIRiT6Z4A022g1l6l4
o3OEGLx+MU02pEPoQKzBlz8UNYGuBkDXORhhiHD0lrSfFFJuSYCtYHdoE0OGNbVx
2ds8DpHW8DOU7TuLMi24opdPmQrx6r2dVFnjB5SGYtvwnj8V2FBaN8lgrm6f0wXX
R/+cqjw0K02KMCQBeYoGViatP3KpP+N/zWHhs9Kl4LsyRaF4JPPhg35E+LaPl5rP
9UEkBr2xLSDjvE5o5CcUS71qlkUUTWhoxiwN3FxAqIFIWKPILJFfKVPUECeMY/Z9
T+wpM2tXl1MZeQ==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:02:44 2025 by rpki-client