Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC497EA357D11F08A7885D6DAE4EC9C.roa
File: 6EC497EA357D11F08A7885D6DAE4EC9C.roa (raw, json)
Hash identifier: HsCf0L34bcG2AIr1AhrzcO/hnb0HArPcGKwBtBzYzD4=
Subject key identifier: F7:CA:82:75:60:B9:5C:30:DD:26:7E:43:6B:80:42:F3:BA:97:93:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC497EA357D11F08A7885D6DAE4EC9C.roa
Signing time: Tue 20 May 2025 13:22:10 +0000
ROA not before: Tue 20 May 2025 13:22:04 +0000
ROA not after: Mon 30 Jun 2025 13:22:04 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.73.0/24 maxlen: 24
154.194.74.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.54.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 01:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98743 (0x181b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 13:22:04 2025 GMT
Not After : Jun 30 13:22:04 2025 GMT
Subject: CN=682c8202-ba48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:16:25:a5:50:95:a2:63:6e:8f:a7:d9:18:
4f:c1:d2:c2:cd:bb:29:76:da:37:28:d3:55:88:bf:
8f:0e:6e:00:83:d8:b8:f0:8e:8a:84:97:c7:f9:ae:
7e:f0:af:f3:1a:28:0d:da:27:88:75:8b:e3:d2:da:
f6:49:3a:e7:30:bb:16:61:fa:36:7e:01:7a:90:6f:
75:ac:dc:8f:81:56:b4:ee:97:06:f4:1d:6f:09:55:
e3:0b:70:f3:f3:b8:b6:4d:c2:58:dd:1b:32:e4:3c:
88:6c:fc:fc:23:b4:05:dc:6b:cd:b0:3c:ef:7d:43:
8d:52:aa:6b:18:99:e8:54:1b:da:41:bc:70:b6:69:
43:0c:ee:15:75:b3:70:2d:25:be:6f:c0:07:be:65:
8f:7b:0f:ae:ff:8e:69:cf:9b:19:15:51:73:fb:bb:
9f:f3:ea:9b:0a:04:f0:82:44:26:12:9e:ac:35:76:
20:7a:a5:e1:e3:70:82:d8:71:94:fc:8d:18:5c:a3:
4a:03:7e:69:25:b7:e6:bf:a8:fe:3d:0d:53:ca:f7:
10:cd:5c:63:06:c1:3f:bd:16:f3:d5:55:31:5e:b7:
71:46:eb:59:2d:fd:9c:ae:e9:9a:41:68:62:66:2a:
98:a7:97:8a:79:35:98:f6:a0:a6:11:c7:b3:d0:a0:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:82:75:60:B9:5C:30:DD:26:7E:43:6B:80:42:F3:BA:97:93:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EC497EA357D11F08A7885D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0-154.194.74.255
154.194.89.0/24
154.194.92.0/23
154.194.98.0/24
154.196.18.0/24
154.196.22.0/24
154.196.50.0/24
154.196.54.0-154.196.62.255
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d0:c1:bc:67:e1:22:f6:28:98:2c:a2:52:50:9a:d1:ac:44:
39:41:71:24:73:ed:ef:39:7f:10:87:70:c8:70:5f:35:50:98:
14:6a:70:67:ae:d6:9a:9d:8a:03:48:d2:7f:b8:2e:cb:27:6f:
c9:38:23:2b:63:db:50:ce:fd:e0:7a:ad:1b:97:7b:05:21:0b:
1f:c3:eb:b5:93:7e:88:3c:16:a2:bf:0d:9f:09:76:f6:9a:ff:
bf:84:66:21:4d:ca:5c:b9:ed:d7:6e:4b:16:3a:50:14:96:83:
6e:87:ec:9c:ed:6e:56:09:26:31:5c:9b:b0:48:97:3e:72:52:
4a:52:e4:0e:18:a7:13:23:32:f0:ee:07:9a:3e:50:a0:93:cf:
5a:a5:b2:87:48:02:31:fa:7b:76:09:b9:fa:ae:bc:91:81:f4:
e4:63:4f:df:69:83:a5:3b:51:ba:96:60:e7:8d:b0:a8:10:a4:
f8:9c:41:c4:49:f3:3c:5d:cd:b1:6e:12:1c:b8:77:0f:75:3d:
ca:50:4b:99:91:ed:6c:a5:af:08:9a:37:dd:07:c7:cb:d8:26:
12:a7:0d:c1:2c:4a:fc:4d:e9:e9:42:c8:b8:7b:45:7f:bb:96:
a1:af:59:79:10:f7:08:86:48:69:55:42:15:ae:74:6c:d5:43:
06:a7:9a:b7
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIDAYG3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIwMTMyMjA0WhcNMjUwNjMwMTMyMjA0WjAYMRYw
FAYDVQQDEw02ODJjODIwMi1iYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnPkWJaVQlaJjbo+n2RhPwdLCzbspdto3KNNViL+PDm4Ag9i48I6KhJfH
+a5+8K/zGigN2ieIdYvj0tr2STrnMLsWYfo2fgF6kG91rNyPgVa07pcG9B1vCVXj
C3Dz87i2TcJY3Rsy5DyIbPz8I7QF3GvNsDzvfUONUqprGJnoVBvaQbxwtmlDDO4V
dbNwLSW+b8AHvmWPew+u/45pz5sZFVFz+7uf8+qbCgTwgkQmEp6sNXYgeqXh43CC
2HGU/I0YXKNKA35pJbfmv6j+PQ1TyvcQzVxjBsE/vRbz1VUxXrdxRutZLf2cruma
QWhiZiqYp5eKeTWY9qCmEcez0KChcQIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFPfK
gnVguVww3SZ+Q2uAQvO6l5NiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RUM0OTdFQTM1N0QxMUYwOEE3ODg1RDZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGMAwDBAOawkgDBACawkoDBACa
wlkDBAGawlwDBACawmIDBACaxBIDBACaxBYDBACaxDIwDAMEAZrENgMEAJrEPgME
AJrEQDANBgkqhkiG9w0BAQsFAAOCAQEAFdDBvGfhIvYomCyiUlCa0axEOUFxJHPt
7zl/EIdwyHBfNVCYFGpwZ67Wmp2KA0jSf7guyydvyTgjK2PbUM794HqtG5d7BSEL
H8PrtZN+iDwWor8Nnwl29pr/v4RmIU3KXLnt125LFjpQFJaDbofsnO1uVgkmMVyb
sEiXPnJSSlLkDhinEyMy8O4Hmj5QoJPPWqWyh0gCMfp7dgm5+q68kYH05GNP32mD
pTtRupZg542wqBCk+JxBxEnzPF3NsW4SHLh3D3U9ylBLmZHtbKWvCJo33QfHy9gm
EqcNwSxK/E3p6ULIuHtFf7uWoa9ZeRD3CIZIaVVCFa50bNVDBqeatw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:34 2025 by rpki-client