Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B06A561825B411F08EB3CABCDAE4EC9C.roa
File: B06A561825B411F08EB3CABCDAE4EC9C.roa (raw, json)
Hash identifier: EzsvxzlnJXDHRnBkui+9XyRihQQx3H/Ke3xGgC3Lo5Q=
Subject key identifier: 23:5E:EB:01:52:43:91:94:51:97:F2:49:B7:4B:B1:29:8A:DF:C5:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B06A561825B411F08EB3CABCDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 11:17:24 +0000
ROA not before: Wed 30 Apr 2025 11:17:19 +0000
ROA not after: Wed 26 Apr 2028 11:17:19 +0000
asID: 17561
IP address blocks: 154.195.49.0/24 maxlen: 24
154.195.51.0/24 maxlen: 24
154.195.52.0/24 maxlen: 24
154.195.53.0/24 maxlen: 24
154.195.54.0/24 maxlen: 24
154.195.55.0/24 maxlen: 24
154.195.56.0/24 maxlen: 24
154.195.57.0/24 maxlen: 24
154.195.58.0/24 maxlen: 24
154.195.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97616 (0x17d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:17:19 2025 GMT
Not After : Apr 26 11:17:19 2028 GMT
Subject: CN=681206c3-29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:26:91:47:89:06:e3:13:71:44:e0:ec:79:
69:0e:13:fb:d2:2b:6e:c8:1c:4e:8d:a9:43:7e:50:
cd:3d:8e:b6:43:63:5e:b8:08:91:10:fc:63:12:8a:
73:fe:d7:42:1e:00:4f:11:da:97:4a:db:c4:69:f2:
c7:46:f2:a3:3c:2e:e6:27:a4:cb:e7:b8:6c:9b:35:
3b:4c:d4:7b:d6:80:f9:cd:62:49:08:b7:35:19:71:
dc:f8:d1:72:78:44:cb:97:b8:c3:3e:eb:e9:54:42:
ba:76:df:37:0a:d8:b6:eb:97:7f:68:a2:77:04:0d:
bb:25:d4:e6:90:f3:46:70:8c:c5:4e:80:46:77:0b:
c9:89:ce:c4:45:6a:61:a8:b7:cf:0e:16:78:b5:33:
8c:c0:83:1f:90:ee:21:4c:47:cc:84:0a:8b:3e:47:
b8:53:1d:69:8f:28:15:f1:1e:a9:9f:55:b1:a0:6b:
1d:af:f2:12:a6:6c:84:d9:38:a4:9e:e6:a8:ca:98:
88:b4:bc:dc:2d:95:78:24:57:53:60:32:89:eb:39:
5b:ca:93:df:15:29:03:61:ff:99:9a:18:a8:d8:63:
6d:5f:df:dd:7e:9b:29:7d:8c:20:37:28:a4:55:f9:
41:0b:54:10:b1:46:c3:69:d2:7b:29:4e:92:dc:59:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:EB:01:52:43:91:94:51:97:F2:49:B7:4B:B1:29:8A:DF:C5:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B06A561825B411F08EB3CABCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.49.0/24
154.195.51.0-154.195.59.255
Signature Algorithm: sha256WithRSAEncryption
9a:a1:39:c7:5f:e2:74:68:53:8e:a2:1d:13:fe:e3:1e:5b:0b:
e5:25:40:ba:8b:1a:6f:60:44:44:87:f2:b4:83:ba:73:f6:41:
21:8a:10:a0:83:5b:bd:9f:e1:5a:5c:4f:5f:49:b1:c2:f6:c9:
d8:52:06:90:70:72:c9:de:ee:54:78:43:22:10:04:03:bc:49:
bb:78:28:19:2f:5f:72:ce:f6:65:2d:16:6c:34:41:05:96:42:
49:1b:69:90:f3:29:df:c9:41:6c:aa:2f:71:e7:7e:3b:da:91:
2d:ed:68:2a:9a:14:f5:8a:b7:af:47:7f:24:64:8e:ee:8c:1b:
b6:af:52:90:8a:29:f9:b0:61:4b:ad:c0:09:70:89:1c:76:13:
8c:c5:f8:6b:61:09:51:79:db:71:ff:4b:9a:1d:e7:d3:35:3e:
00:84:56:35:d7:2d:5b:4b:04:9d:d3:31:32:bd:4e:76:0a:fb:
27:8e:43:95:c4:ab:1a:a3:61:14:15:54:61:48:1d:42:a3:48:
3b:09:5a:b8:ff:12:2b:ed:6c:b9:60:95:7d:24:2a:0c:5e:b2:
b1:64:06:04:cc:c5:f7:29:99:81:46:cd:d9:0a:41:d4:09:1f:
44:16:c9:a7:98:53:71:0b:8c:0c:90:fe:6a:ca:ff:ac:83:e0:
45:b4:a3:15
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAX1QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDMwMTExNzE5WhcNMjgwNDI2MTExNzE5WjAYMRYw
FAYDVQQDEw02ODEyMDZjMy0yOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAucgmkUeJBuMTcUTg7HlpDhP70ituyBxOjalDflDNPY62Q2NeuAiREPxj
Eopz/tdCHgBPEdqXStvEafLHRvKjPC7mJ6TL57hsmzU7TNR71oD5zWJJCLc1GXHc
+NFyeETLl7jDPuvpVEK6dt83Cti265d/aKJ3BA27JdTmkPNGcIzFToBGdwvJic7E
RWphqLfPDhZ4tTOMwIMfkO4hTEfMhAqLPke4Ux1pjygV8R6pn1WxoGsdr/ISpmyE
2TiknuaoypiItLzcLZV4JFdTYDKJ6zlbypPfFSkDYf+Zmhio2GNtX9/dfpspfYwg
NyikVflBC1QQsUbDadJ7KU6S3FmcbQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFCNe
6wFSQ5GUUZfySbdLsSmK38U1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMDZBNTYxODI1QjQxMUYwOEVCM0NBQkNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmsMxMAwDBACawzMDBAKa
wzgwDQYJKoZIhvcNAQELBQADggEBAJqhOcdf4nRoU46iHRP+4x5bC+UlQLqLGm9g
RESH8rSDunP2QSGKEKCDW72f4VpcT19JscL2ydhSBpBwcsne7lR4QyIQBAO8Sbt4
KBkvX3LO9mUtFmw0QQWWQkkbaZDzKd/JQWyqL3HnfjvakS3taCqaFPWKt69HfyRk
ju6MG7avUpCKKfmwYUutwAlwiRx2E4zF+GthCVF523H/S5od59M1PgCEVjXXLVtL
BJ3TMTK9TnYK+yeOQ5XEqxqjYRQVVGFIHUKjSDsJWrj/EivtbLlglX0kKgxesrFk
BgTMxfcpmYFGzdkKQdQJH0QWyaeYU3ELjAyQ/mrK/6yD4EW0oxU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:33:33 2025 by rpki-client