Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59B76AB824F111F0BB56F89EDAE4EC9C.roa
File: 59B76AB824F111F0BB56F89EDAE4EC9C.roa (raw, json)
Hash identifier: G/lE3L1O60t7LkZ9Mk8hxR3OksYE5tW/lzR5iGOlOLU=
Subject key identifier: 53:DA:42:F4:BC:1C:47:1D:62:7E:C7:75:5B:C4:6E:B2:6A:92:D8:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59B76AB824F111F0BB56F89EDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 11:59:06 +0000
ROA not before: Tue 29 Apr 2025 11:59:01 +0000
ROA not after: Fri 04 Jul 2025 11:59:01 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
154.94.70.0/24 maxlen: 24
154.94.71.0/24 maxlen: 24
154.94.72.0/24 maxlen: 24
154.94.73.0/24 maxlen: 24
154.94.74.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
154.94.90.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97515 (0x17ceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 11:59:01 2025 GMT
Not After : Jul 4 11:59:01 2025 GMT
Subject: CN=6810bf0a-8b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:1e:1b:4b:9b:3e:1b:a6:e9:d9:3f:76:aa:
02:2b:b4:1a:04:e5:fb:95:60:67:0a:f8:60:7e:10:
a0:7f:04:6c:1e:1f:26:5f:77:08:ae:c7:77:da:fb:
10:bf:cb:cc:47:5e:1f:70:5e:5c:a2:3a:32:d0:a7:
c7:ae:f5:20:76:05:db:d6:f9:09:31:b4:c2:d0:16:
6d:66:f4:66:7b:f1:11:77:42:c4:a9:d8:c2:f9:9c:
f4:71:ce:20:a6:a0:b6:5d:32:7f:8e:d9:ba:cf:f3:
ec:46:49:37:4a:4e:b8:6e:22:00:54:79:ae:ef:95:
f7:0c:f9:eb:d2:e8:13:c4:a1:2a:54:b0:7d:e7:7e:
e0:44:ba:85:9c:bb:53:74:d5:36:1d:53:17:99:54:
4c:a4:0b:2b:46:5e:33:62:61:83:75:a5:7d:17:32:
c7:21:02:6c:61:6a:54:e4:45:f3:f0:37:a7:ff:cf:
69:25:e2:4b:12:c0:46:3d:fa:a4:86:a6:4f:01:5f:
f5:94:3c:c8:93:7f:fe:d3:c5:7d:5b:0f:3a:0a:55:
45:5c:f8:8c:59:e9:5e:e9:c9:6a:e1:81:d6:af:31:
46:43:af:83:73:25:7a:f5:bc:77:7a:73:13:88:ff:
aa:9b:42:b0:da:f0:5e:44:89:80:d8:6e:67:75:e7:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DA:42:F4:BC:1C:47:1D:62:7E:C7:75:5B:C4:6E:B2:6A:92:D8:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59B76AB824F111F0BB56F89EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0-154.94.74.255
154.94.86.0-154.94.93.255
154.94.96.0-154.94.100.255
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8a:ef:40:40:4a:04:1e:78:a4:1b:a3:a8:e4:35:43:3b:b5:
f8:3b:06:09:81:37:67:33:0e:b2:12:25:42:c5:77:d0:4e:dc:
18:cb:b0:1d:30:d7:b0:ad:3e:e2:f6:82:7d:54:62:13:99:2c:
7b:d9:0c:a1:04:88:49:fd:b4:9b:17:66:5b:94:7e:fb:ec:5d:
87:8c:15:01:bf:42:19:ab:23:00:8c:13:c8:23:88:0d:a9:d4:
b2:ab:c7:ca:cc:35:c7:4b:11:43:d9:60:bc:ed:44:af:6c:d3:
36:51:ab:3a:78:a9:fe:af:8d:08:31:27:a4:eb:ba:c9:6e:d2:
3f:a5:9a:77:d6:0f:5e:5f:5f:95:c1:c2:1e:c3:50:51:e5:4c:
a8:7c:af:07:48:5e:cd:1b:9a:93:98:46:33:a0:55:a6:08:91:
33:67:7e:4a:11:40:e2:8b:43:b4:45:bf:ca:f0:ae:3f:d8:2e:
fe:07:ec:6e:45:8c:9c:05:8b:57:09:93:7b:60:97:99:82:8d:
78:ba:b6:08:de:f9:11:3e:2a:10:25:49:51:18:72:fe:21:16:
97:b6:ef:6f:41:be:92:29:51:a2:a9:9b:cf:75:da:90:cd:21:
92:f9:a0:cf:e8:a2:fd:80:8c:d6:94:84:6b:d5:4a:48:bb:ce:
68:0f:d1:65
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIDAXzrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDI5MTE1OTAxWhcNMjUwNzA0MTE1OTAxWjAYMRYw
FAYDVQQDEw02ODEwYmYwYS04YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtNQeG0ubPhum6dk/dqoCK7QaBOX7lWBnCvhgfhCgfwRsHh8mX3cIrsd3
2vsQv8vMR14fcF5cojoy0KfHrvUgdgXb1vkJMbTC0BZtZvRme/ERd0LEqdjC+Zz0
cc4gpqC2XTJ/jtm6z/PsRkk3Sk64biIAVHmu75X3DPnr0ugTxKEqVLB9537gRLqF
nLtTdNU2HVMXmVRMpAsrRl4zYmGDdaV9FzLHIQJsYWpU5EXz8Den/89pJeJLEsBG
PfqkhqZPAV/1lDzIk3/+08V9Ww86ClVFXPiMWele6clq4YHWrzFGQ6+DcyV69bx3
enMTiP+qm0Kw2vBeRImA2G5ndecfLQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFFPa
QvS8HEcdYn7HdVvEbrJqkthAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OUI3NkFCODI0RjExMUYwQkI1NkY4OUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBACaXkUDBACaXkowDAME
AZpeVgMEAZpeXDAMAwQFml5gAwQAml5kAwQAml59MA0GCSqGSIb3DQEBCwUAA4IB
AQB+iu9AQEoEHnikG6Oo5DVDO7X4OwYJgTdnMw6yEiVCxXfQTtwYy7AdMNewrT7i
9oJ9VGITmSx72QyhBIhJ/bSbF2ZblH777F2HjBUBv0IZqyMAjBPII4gNqdSyq8fK
zDXHSxFD2WC87USvbNM2Uas6eKn+r40IMSek67rJbtI/pZp31g9eX1+VwcIew1BR
5UyofK8HSF7NG5qTmEYzoFWmCJEzZ35KEUDii0O0Rb/K8K4/2C7+B+xuRYycBYtX
CZN7YJeZgo14urYI3vkRPioQJUlRGHL+IRaXtu9vQb6SKVGiqZvPddqQzSGS+aDP
6KL9gIzWlIRr1UpIu85oD9Fl
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:51:22 2025 by rpki-client