Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D1915E2095711F0B9B3204C762E951A.roa
File: 3D1915E2095711F0B9B3204C762E951A.roa (raw, json)
Hash identifier: ahDB9vep7iIFhXq5cnfCAP1vb2BSCELXbtVagdQiUKc=
Subject key identifier: 06:FA:08:AB:24:A2:51:E3:27:17:F3:15:5A:4F:68:68:E9:10:25:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017603
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D1915E2095711F0B9B3204C762E951A.roa
Signing time: Tue 25 Mar 2025 08:57:54 +0000
ROA not before: Tue 25 Mar 2025 08:57:46 +0000
ROA not after: Thu 15 May 2025 08:57:46 +0000
asID: 63139
IP address blocks: 154.203.160.0/24 maxlen: 24
154.203.161.0/24 maxlen: 24
154.203.184.0/24 maxlen: 24
154.203.185.0/24 maxlen: 24
154.203.186.0/24 maxlen: 24
154.203.187.0/24 maxlen: 24
154.203.188.0/24 maxlen: 24
154.203.189.0/24 maxlen: 24
154.203.190.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95747 (0x17603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 08:57:46 2025 GMT
Not After : May 15 08:57:46 2025 GMT
Subject: CN=67e27012-097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:b0:8b:4d:0e:43:5c:ea:7e:85:5f:cb:06:
12:56:46:a6:dd:c9:1f:0b:45:ac:2d:d9:cf:64:e0:
a8:81:bf:c3:98:45:54:a3:b3:4e:46:72:1c:e6:bc:
d8:c6:d1:89:0d:63:4e:f7:7e:52:00:ae:5d:4b:ee:
df:b1:f6:a6:d8:ac:e1:8f:64:08:c6:db:15:f8:e6:
b1:72:f6:4a:d2:e5:fe:ef:cf:95:4b:75:7e:c6:6b:
dd:74:9f:92:79:8b:f9:a9:cb:c7:1d:c9:fa:e4:99:
22:39:ab:68:8e:a0:a5:7b:7d:4a:b7:72:d3:c0:59:
2d:cc:a5:4f:f9:c8:2c:25:22:05:df:3f:a3:a2:87:
b1:ff:8d:b2:70:0d:95:41:f8:49:7c:26:73:2a:64:
39:98:96:72:bd:2d:32:2d:7c:a5:2e:cc:e0:9c:53:
5d:b1:48:a7:21:62:6c:bb:1a:65:7e:f8:24:25:23:
67:21:d6:3a:70:72:25:21:65:54:59:27:4f:4b:2d:
7b:88:2b:2f:4a:aa:ba:e5:0f:7a:6b:74:17:59:76:
ed:07:dc:c9:af:49:3c:f2:41:f7:fb:5e:5b:34:53:
f9:f9:d5:46:50:d8:2e:bf:e2:da:c8:82:e9:e3:ce:
3f:01:97:cd:af:b9:bc:1f:a4:5d:fa:8e:1e:f1:76:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:08:AB:24:A2:51:E3:27:17:F3:15:5A:4F:68:68:E9:10:25:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D1915E2095711F0B9B3204C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/23
154.203.184.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:9c:8a:72:61:37:46:05:98:82:19:79:48:1c:7d:4d:61:08:
34:15:d0:cc:4e:46:98:98:2f:06:e6:86:96:5a:e2:62:93:d5:
15:89:ae:02:26:94:da:76:ba:a5:6c:0d:e3:e1:cd:41:c1:82:
85:f5:52:85:3b:b8:f0:55:2b:3b:a5:e0:1e:ba:27:80:f9:dd:
97:79:d3:77:80:87:40:81:98:2d:f4:83:c5:1e:13:fc:e0:86:
8c:7a:84:a1:44:04:5c:b4:4d:37:94:90:98:18:2f:b2:32:09:
98:d4:cc:c1:2e:77:e8:4a:5c:d8:b2:e6:bf:b4:88:13:89:d8:
5d:ad:2e:55:8b:b5:95:84:f0:7c:59:5c:48:fb:34:77:b9:0e:
b4:03:6c:1d:e8:74:ef:d4:66:d7:99:fa:1d:18:c7:a1:4a:00:
18:9a:51:84:7c:56:01:43:4f:54:23:88:15:1c:65:15:a0:8c:
d8:7e:b6:47:c2:68:1d:3f:74:1c:1b:ea:d2:0b:53:7d:cd:2b:
8f:27:fb:71:8e:be:d1:78:39:86:74:30:d8:b6:78:05:74:e6:
46:b4:47:68:20:11:c4:42:c2:f8:a7:73:b0:00:59:b3:4b:5e:
7c:55:19:9c:9d:1a:c4:77:6d:9b:a6:03:b5:af:2f:80:16:84:
62:b7:c6:6c
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXYDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI1MDg1NzQ2WhcNMjUwNTE1MDg1NzQ2WjAYMRYw
FAYDVQQDEw02N2UyNzAxMi0wOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzWawi00OQ1zqfoVfywYSVkam3ckfC0WsLdnPZOCogb/DmEVUo7NORnIc
5rzYxtGJDWNO935SAK5dS+7fsfam2Kzhj2QIxtsV+OaxcvZK0uX+78+VS3V+xmvd
dJ+SeYv5qcvHHcn65JkiOatojqCle31Kt3LTwFktzKVP+cgsJSIF3z+jooex/42y
cA2VQfhJfCZzKmQ5mJZyvS0yLXylLszgnFNdsUinIWJsuxplfvgkJSNnIdY6cHIl
IWVUWSdPSy17iCsvSqq65Q96a3QXWXbtB9zJr0k88kH3+15bNFP5+dVGUNguv+La
yILp484/AZfNr7m8H6Rd+o4e8XYBSQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAb6
CKskolHjJxfzFVpPaGjpECW9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRDE5MTVFMjA5NTcxMUYwQjlCMzIwNEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmsugAwQDmsu4MA0GCSqG
SIb3DQEBCwUAA4IBAQBvnIpyYTdGBZiCGXlIHH1NYQg0FdDMTkaYmC8G5oaWWuJi
k9UVia4CJpTadrqlbA3j4c1BwYKF9VKFO7jwVSs7peAeuieA+d2XedN3gIdAgZgt
9IPFHhP84IaMeoShRARctE03lJCYGC+yMgmY1MzBLnfoSlzYsua/tIgTidhdrS5V
i7WVhPB8WVxI+zR3uQ60A2wd6HTv1GbXmfodGMehSgAYmlGEfFYBQ09UI4gVHGUV
oIzYfrZHwmgdP3QcG+rSC1N9zSuPJ/txjr7ReDmGdDDYtngFdOZGtEdoIBHEQsL4
p3OwAFmzS158VRmcnRrEd22bpgO1ry+AFoRit8Zs
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:17 2025 by rpki-client