Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C42A8D62151511F09D63C0B86DB8BCC6.roa
File: C42A8D62151511F09D63C0B86DB8BCC6.roa (raw, json)
Hash identifier: ya4YjfZJcUeB4fyCPCyZHA+LeKRmMX+LEXd6bVKKEME=
Subject key identifier: B6:C7:44:C9:23:F3:23:EA:27:53:39:24:9A:FB:8A:88:AB:C8:05:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017870
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C42A8D62151511F09D63C0B86DB8BCC6.roa
Signing time: Wed 09 Apr 2025 07:39:28 +0000
ROA not before: Wed 09 Apr 2025 07:39:24 +0000
ROA not after: Sat 19 Apr 2025 07:39:24 +0000
asID: 5065
IP address blocks: 154.94.43.0/24 maxlen: 24
154.94.46.0/24 maxlen: 24
154.94.47.0/24 maxlen: 24
154.94.48.0/24 maxlen: 24
154.94.50.0/24 maxlen: 24
154.94.52.0/24 maxlen: 24
154.94.53.0/24 maxlen: 24
154.94.56.0/24 maxlen: 24
154.94.60.0/24 maxlen: 24
154.94.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 19 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96368 (0x17870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 9 07:39:24 2025 GMT
Not After : Apr 19 07:39:24 2025 GMT
Subject: CN=67f62430-d847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:a7:65:3a:10:d4:80:fd:7e:fd:8e:fc:9f:
d5:65:f8:6b:4d:b2:6f:ed:80:77:be:7f:d2:03:16:
9c:42:36:cb:9d:d7:ac:66:59:ac:73:fa:22:f3:2f:
44:38:a8:3f:49:e0:38:bb:13:0b:f7:d9:e9:f3:f5:
c0:d7:d9:04:8f:f8:d2:52:4a:4f:45:55:ee:25:69:
72:03:9f:2a:0c:1a:a3:c6:a7:00:78:cd:4e:fd:0f:
3e:86:36:2a:66:f1:42:e2:9b:16:21:c3:0d:c3:74:
3a:d7:50:df:a6:02:aa:86:b7:b2:02:ce:9c:42:02:
fa:b0:32:44:48:92:3e:4f:9a:35:06:a9:c6:b2:dc:
a6:33:13:d4:a9:36:7b:62:8e:73:bd:87:f5:50:7b:
c1:c1:4e:c7:28:b0:6c:40:50:95:01:2e:74:c8:22:
1d:a6:f6:ea:dd:1e:88:8e:ab:93:51:31:f1:b5:f2:
fe:e6:68:17:7f:95:56:09:06:fe:9d:64:1c:1c:42:
40:79:2d:12:28:6f:78:f3:cb:28:c4:7b:7d:40:c2:
2a:da:60:67:92:80:62:af:a4:b1:72:c1:03:e4:e4:
e8:e5:b2:a6:42:0e:a7:de:af:1e:f7:06:05:0d:4c:
8b:7b:cd:f7:2b:36:7c:a1:94:d9:69:ed:65:b9:fe:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C7:44:C9:23:F3:23:EA:27:53:39:24:9A:FB:8A:88:AB:C8:05:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C42A8D62151511F09D63C0B86DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.43.0/24
154.94.46.0-154.94.48.255
154.94.50.0/24
154.94.52.0/23
154.94.56.0/24
154.94.60.0/24
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
36:27:b3:ed:61:38:cc:fa:ec:53:16:87:1d:3e:0e:7f:2c:8a:
1d:ad:05:3a:ce:f1:fc:53:61:5e:9c:9d:5e:64:40:40:77:9a:
e9:4b:60:4e:42:ce:4e:7d:b7:e5:6e:c2:cc:40:43:eb:ae:02:
ca:29:0d:21:29:dc:e1:4e:a6:46:dd:91:c8:51:28:54:26:9c:
64:6e:6b:ad:1c:0e:65:92:af:e1:11:9e:ad:ef:49:22:fd:f8:
d1:7a:77:4a:bf:34:1f:dc:ae:39:10:11:8d:df:ba:56:31:d2:
e2:c4:24:e2:27:f9:15:7d:e2:73:71:97:e1:bb:86:cd:19:2d:
92:63:47:7a:cc:e2:ba:a7:c2:ef:46:2f:43:1a:19:b9:75:8c:
97:15:53:e6:a8:90:fa:95:5d:fc:2c:be:15:48:42:13:17:54:
56:c8:a4:37:5c:98:f0:aa:6e:3b:49:12:3b:e8:37:75:14:79:
11:02:ad:27:65:3b:c2:8d:5e:64:5c:17:af:8b:97:62:b3:8d:
79:d5:fb:57:78:3e:08:1e:92:21:ca:35:86:2b:d4:8b:86:b4:
ef:d1:82:df:27:02:eb:18:17:9d:ca:28:94:68:da:bc:be:7a:
8b:ab:5d:22:41:fb:5a:8b:e2:01:76:fa:6b:17:81:c8:43:d4:
47:b6:95:49
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDAXhwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA5MDczOTI0WhcNMjUwNDE5MDczOTI0WjAYMRYw
FAYDVQQDEw02N2Y2MjQzMC1kODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAweqnZToQ1ID9fv2O/J/VZfhrTbJv7YB3vn/SAxacQjbLndesZlmsc/oi
8y9EOKg/SeA4uxML99np8/XA19kEj/jSUkpPRVXuJWlyA58qDBqjxqcAeM1O/Q8+
hjYqZvFC4psWIcMNw3Q611DfpgKqhreyAs6cQgL6sDJESJI+T5o1BqnGstymMxPU
qTZ7Yo5zvYf1UHvBwU7HKLBsQFCVAS50yCIdpvbq3R6IjquTUTHxtfL+5mgXf5VW
CQb+nWQcHEJAeS0SKG9488soxHt9QMIq2mBnkoBir6SxcsED5OTo5bKmQg6n3q8e
9wYFDUyLe833KzZ8oZTZae1luf4z1wIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFLbH
RMkj8yPqJ1M5JJr7ioiryAXDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDJBOEQ2MjE1MTUxMUYwOUQ2M0MwQjg2REI4QkNDNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAml4rMAwDBAGaXi4DBACa
XjADBACaXjIDBAGaXjQDBACaXjgDBACaXjwDBACaXj8wDQYJKoZIhvcNAQELBQAD
ggEBADYns+1hOMz67FMWhx0+Dn8sih2tBTrO8fxTYV6cnV5kQEB3mulLYE5Czk59
t+VuwsxAQ+uuAsopDSEp3OFOpkbdkchRKFQmnGRua60cDmWSr+ERnq3vSSL9+NF6
d0q/NB/crjkQEY3fulYx0uLEJOIn+RV94nNxl+G7hs0ZLZJjR3rM4rqnwu9GL0Ma
Gbl1jJcVU+aokPqVXfwsvhVIQhMXVFbIpDdcmPCqbjtJEjvoN3UUeRECrSdlO8KN
XmRcF6+Ll2KzjXnV+1d4PggekiHKNYYr1IuGtO/Rgt8nAusYF53KKJRo2ry+eour
XSJB+1qL4gF2+msXgchD1Ee2lUk=
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:28 2025 by rpki-client