Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0397E81E2F2411F08CA402D9DAE4EC9C.roa
File: 0397E81E2F2411F08CA402D9DAE4EC9C.roa (raw, json)
Hash identifier: YGhW4ofT2NLsn6WGOKLd/kIcQ5GkxOfU7Muww3QRn44=
Subject key identifier: 17:75:F1:4D:43:54:5A:9A:00:B2:0F:BC:3F:E1:F6:F8:4A:03:C5:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0397E81E2F2411F08CA402D9DAE4EC9C.roa
Signing time: Mon 12 May 2025 11:26:58 +0000
ROA not before: Mon 12 May 2025 11:26:53 +0000
ROA not after: Sun 08 Jun 2025 11:26:53 +0000
asID: 45194
IP address blocks: 154.84.228.0/24 maxlen: 24
154.84.229.0/24 maxlen: 24
154.84.231.0/24 maxlen: 24
154.84.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98287 (0x17fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 11:26:53 2025 GMT
Not After : Jun 8 11:26:53 2025 GMT
Subject: CN=6821db02-e282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:04:be:3b:3f:80:69:a3:6a:18:50:e5:40:
3d:e1:3e:90:42:b8:61:55:97:2f:37:95:21:07:17:
68:e9:c3:81:4a:59:cc:39:a8:76:de:27:4a:be:4a:
6f:7a:5c:91:6b:99:b7:a9:be:3e:83:b8:63:f3:6d:
bc:23:c2:0d:3c:f4:fd:f8:53:c0:b6:db:37:99:d6:
83:c3:9e:69:5c:71:d7:54:57:cc:14:c2:27:67:10:
5f:9e:58:0b:b2:96:4b:00:42:e2:00:78:37:ec:18:
4f:9f:6d:7d:e1:e4:89:62:d2:99:2e:2b:ea:d5:ff:
22:ba:c9:fc:76:4b:78:32:82:d9:04:d3:8a:93:b1:
1c:9d:58:c4:d7:26:11:ad:bc:c5:7a:44:e6:77:5e:
2a:2f:b3:9c:0b:3f:c7:2a:e6:f3:47:0a:04:a8:e1:
df:af:ea:d4:d5:d4:5f:6a:ed:37:99:9c:86:aa:9f:
9f:56:cd:1a:50:90:0f:f0:d8:be:4c:e3:8b:fc:f8:
a5:2e:b3:a3:68:07:8e:e0:66:31:d9:42:ac:32:6a:
ac:9a:d9:77:02:e8:cc:fd:46:44:00:95:24:8e:a7:
cd:fa:dc:a7:1a:47:bd:6e:28:90:1b:06:50:6c:b3:
df:fa:c7:e5:d8:13:50:77:46:de:ea:84:5f:5a:2c:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:75:F1:4D:43:54:5A:9A:00:B2:0F:BC:3F:E1:F6:F8:4A:03:C5:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0397E81E2F2411F08CA402D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.228.0/23
154.84.231.0/24
154.84.240.0/24
Signature Algorithm: sha256WithRSAEncryption
31:aa:35:2c:e0:c3:5e:29:e7:a4:8b:b0:3c:bb:0f:7a:18:da:
d0:ca:d3:b2:59:b2:42:5a:40:97:d0:1f:40:70:9b:d6:ed:b3:
8c:25:08:fd:0c:19:55:f3:e9:44:d9:34:75:61:84:eb:67:d8:
9f:4a:a1:7d:ac:f7:a0:08:d2:8b:29:0d:64:5c:4e:91:c5:3b:
be:80:97:0e:15:20:4c:47:46:dc:bd:b0:74:80:6f:66:89:b2:
e3:41:0b:78:4c:cb:69:06:16:1b:25:a9:21:9c:e7:5d:b1:72:
b4:e3:6f:07:91:ff:80:f6:6d:58:0b:be:91:74:87:bb:da:64:
36:4e:eb:1f:29:7e:e4:33:6d:73:2c:6b:c9:84:8b:0a:8c:6f:
06:e2:72:0f:74:ed:c0:be:48:db:37:65:cc:e4:df:76:e0:9e:
ed:65:35:3d:03:42:d4:41:8b:86:9f:84:86:71:53:2e:13:a0:
ea:84:00:f0:78:6a:41:fa:80:89:f5:02:f6:2f:10:51:72:41:
33:26:b6:f7:8c:dc:46:26:f7:74:6d:0b:59:25:12:63:34:fe:
57:e0:c5:42:89:a8:6d:3f:95:31:b0:e9:cd:bd:a3:19:b8:9a:
66:e8:d4:10:71:54:91:b4:97:6e:81:7e:b3:f8:3b:ae:79:f0:
ac:10:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:53:06 2025 by rpki-client