Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5FF51E408811F0846B86F1DAE4EC9C.roa
File: DB5FF51E408811F0846B86F1DAE4EC9C.roa (raw, json)
Hash identifier: yTJF1ULmsL0UkXFYGFvGIdJa69AdvFn22hkBcEhHi6o=
Subject key identifier: 9C:BE:47:D1:53:1D:AB:4B:82:0B:CC:E1:F1:82:75:86:FD:45:3A:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01849B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5FF51E408811F0846B86F1DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 14:41:39 +0000
ROA not before: Tue 03 Jun 2025 14:41:33 +0000
ROA not after: Sun 03 Aug 2025 14:41:33 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
154.94.70.0/24 maxlen: 24
154.94.71.0/24 maxlen: 24
154.94.72.0/24 maxlen: 24
154.94.73.0/24 maxlen: 24
154.94.74.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99483 (0x1849b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 14:41:33 2025 GMT
Not After : Aug 3 14:41:33 2025 GMT
Subject: CN=683f09a3-a087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:71:6b:40:d8:de:91:76:cf:0c:aa:d6:1c:
94:3c:4d:4d:66:eb:8b:86:c0:70:b3:4f:3e:0a:f8:
fe:8a:9d:a3:36:83:c4:4f:ff:6a:c7:6e:dd:18:40:
7e:11:99:18:12:d9:2d:66:a8:d3:70:c8:69:87:11:
e7:54:7b:30:24:41:08:ed:a2:bf:91:d4:5e:b0:f4:
ba:2a:0b:d3:73:10:da:ac:b8:a3:1f:cd:61:fb:28:
3e:ad:de:3b:31:92:65:b8:f0:0a:4c:51:4b:fc:4c:
89:77:54:2e:01:11:2b:5d:80:82:ac:9b:03:e7:4b:
72:a5:cb:56:68:f5:34:f1:62:c6:ba:4b:89:55:1e:
20:7e:3a:4d:4c:4f:64:be:2e:0f:05:55:64:1c:61:
7e:da:73:ac:8a:43:31:9a:2b:a7:74:6c:0d:3d:9e:
03:77:b9:93:f2:21:3b:8a:43:79:d7:40:13:a9:69:
e8:83:de:2f:c6:16:cf:55:74:24:94:58:5b:81:3c:
da:e8:3b:d2:95:97:d7:eb:e7:ea:45:ea:a5:05:45:
23:52:2e:c0:c4:79:71:35:14:fe:78:71:08:0d:60:
79:dd:3a:85:a6:05:89:38:05:0c:fd:9d:52:0b:59:
14:e8:46:b0:6b:9b:34:49:ca:d3:25:d6:ad:af:b3:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:47:D1:53:1D:AB:4B:82:0B:CC:E1:F1:82:75:86:FD:45:3A:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5FF51E408811F0846B86F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0-154.94.74.255
154.94.86.0-154.94.89.255
Signature Algorithm: sha256WithRSAEncryption
1c:c0:19:1f:ae:b9:13:3e:7c:14:4c:8b:37:31:ea:31:1f:ce:
34:c5:65:91:4b:49:22:65:f7:54:4f:d4:33:55:c6:40:f5:a8:
d6:a5:fa:fe:c8:84:ce:1e:52:ae:5a:8a:35:1b:2d:cf:74:dd:
a8:67:12:70:55:f8:5d:55:4d:d2:c5:20:15:4a:e8:2e:f4:12:
0e:5d:c3:2d:0a:c6:b8:b4:f1:77:a6:c6:cb:b2:c1:92:ff:45:
d4:f8:c3:f1:6c:63:ad:9f:53:51:26:73:18:c7:f9:fa:e7:c1:
6d:ef:a7:04:e1:2e:9d:eb:5a:9f:02:f7:9d:54:b0:66:22:7f:
91:4d:45:82:d1:bb:9d:5e:ed:0a:ad:78:7c:c3:81:7f:21:e2:
e5:09:ee:fa:ae:e0:b0:df:0a:77:06:89:cf:22:08:1d:2b:e3:
35:f5:9b:43:9a:4e:6a:87:1a:84:a3:fe:18:a6:c5:3b:44:0a:
ea:89:8c:e7:d6:96:d6:d1:98:a1:c6:4f:54:da:96:89:13:66:
e1:f2:7b:75:e3:ef:be:d6:15:dd:00:72:9b:a5:76:41:4b:53:
6b:b4:71:ca:53:33:b9:fa:cf:7a:31:b9:18:4f:45:f8:4e:a8:
de:c8:aa:27:a9:44:f4:2e:9b:9a:a0:4e:0d:07:22:61:c5:05:
ef:56:c2:fd
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgIDAYSbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNjAzMTQ0MTMzWhcNMjUwODAzMTQ0MTMzWjAYMRYw
FAYDVQQDEw02ODNmMDlhMy1hMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvvtxa0DY3pF2zwyq1hyUPE1NZuuLhsBws08+Cvj+ip2jNoPET/9qx27d
GEB+EZkYEtktZqjTcMhphxHnVHswJEEI7aK/kdResPS6KgvTcxDarLijH81h+yg+
rd47MZJluPAKTFFL/EyJd1QuARErXYCCrJsD50typctWaPU08WLGukuJVR4gfjpN
TE9kvi4PBVVkHGF+2nOsikMxmiundGwNPZ4Dd7mT8iE7ikN510ATqWnog94vxhbP
VXQklFhbgTza6DvSlZfX6+fqReqlBUUjUi7AxHlxNRT+eHEIDWB53TqFpgWJOAUM
/Z1SC1kU6Eawa5s0ScrTJdatr7PhoQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFJy+
R9FTHatLggvM4fGCdYb9RTq4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjVGRjUxRTQwODgxMUYwODQ2Qjg2RjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACaXkUDBACaXkowDAME
AZpeVgMEAZpeWDANBgkqhkiG9w0BAQsFAAOCAQEAHMAZH665Ez58FEyLNzHqMR/O
NMVlkUtJImX3VE/UM1XGQPWo1qX6/siEzh5SrlqKNRstz3TdqGcScFX4XVVN0sUg
FUroLvQSDl3DLQrGuLTxd6bGy7LBkv9F1PjD8WxjrZ9TUSZzGMf5+ufBbe+nBOEu
netanwL3nVSwZiJ/kU1FgtG7nV7tCq14fMOBfyHi5Qnu+q7gsN8KdwaJzyIIHSvj
NfWbQ5pOaocahKP+GKbFO0QK6omM59aW1tGYocZPVNqWiRNm4fJ7dePvvtYV3QBy
m6V2QUtTa7RxylMzufrPejG5GE9F+E6o3siqJ6lE9C6bmqBODQciYcUF71bC/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:29 2025 by rpki-client