Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06CCA97C2AFE11F094CC089FDAE4EC9C.roa
File: 06CCA97C2AFE11F094CC089FDAE4EC9C.roa (raw, json)
Hash identifier: vPXLlsuQbkkT6Bng8ahMeR/56E3LUoo5P35WVpm0QM8=
Subject key identifier: F8:CB:EF:2B:29:22:E2:DE:6F:DF:D2:E6:0F:8A:64:19:C9:E0:EF:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06CCA97C2AFE11F094CC089FDAE4EC9C.roa
Signing time: Wed 07 May 2025 04:44:58 +0000
ROA not before: Wed 07 May 2025 04:44:53 +0000
ROA not after: Tue 27 May 2025 04:44:53 +0000
asID: 395886
IP address blocks: 154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98100 (0x17f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 04:44:53 2025 GMT
Not After : May 27 04:44:53 2025 GMT
Subject: CN=681ae54a-a75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:52:54:42:8f:34:e9:ae:19:d5:99:71:02:
9e:7c:5f:35:e6:7e:e9:97:2d:fa:fe:1c:a7:66:60:
87:69:cb:a8:f8:17:90:84:21:9b:38:91:f9:7c:61:
ca:34:c0:e1:98:98:ec:7c:e8:fa:d6:05:47:a5:40:
16:8b:d5:43:9f:59:7e:74:9c:64:76:cf:8a:37:d8:
46:ba:c9:e1:d8:88:81:08:67:eb:29:f5:f1:16:0b:
4b:2b:30:ad:66:4a:db:5c:d1:d8:dd:16:b9:63:57:
33:1c:c6:ba:4f:b6:0a:c7:25:1d:da:78:e6:f2:70:
a8:2e:6d:3e:2d:b8:7a:a5:1c:8b:91:75:be:e0:62:
9f:e9:1a:66:5a:1d:c9:83:d2:ac:20:48:b5:b1:bf:
db:6f:e4:dc:dc:a9:54:53:17:9e:a2:96:fc:83:f9:
6f:2a:91:4a:62:97:5a:4b:f4:d5:eb:f8:53:70:81:
fc:c8:92:df:d7:cb:2f:e3:1a:f6:fe:2d:38:71:04:
23:78:38:a3:10:cd:09:16:4f:c4:a7:aa:5e:91:51:
bc:ee:61:c0:8f:d0:07:93:63:d9:9d:c8:85:55:04:
83:45:7e:ff:65:69:4c:4b:8e:9d:3f:e2:c6:86:be:
20:eb:a9:28:d0:f0:e3:09:bf:d9:93:47:7d:7d:d3:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:EF:2B:29:22:E2:DE:6F:DF:D2:E6:0F:8A:64:19:C9:E0:EF:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06CCA97C2AFE11F094CC089FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:45:a5:68:91:0f:99:ba:31:35:37:cf:27:09:e5:8e:13:b8:
b1:46:fa:65:81:1d:dd:45:ab:b8:8c:90:84:0e:e4:9f:d0:86:
29:68:63:5d:7c:b0:de:7a:94:ce:f7:82:12:44:c9:dc:b9:d3:
a8:ae:ce:7c:e8:76:62:64:15:9e:b1:60:a0:5d:c1:64:43:dc:
75:5c:5b:10:5c:57:ba:a9:9f:2e:a0:36:e1:63:75:d0:63:83:
33:41:e7:af:e8:19:a2:ae:30:c6:d5:ab:c3:e7:30:66:af:58:
f4:9e:20:8b:16:15:78:92:be:d4:01:88:b2:09:11:93:f8:4b:
e7:d9:31:60:3f:9e:0a:de:9b:84:de:8e:6a:1e:91:1e:d9:d3:
83:98:e9:29:85:e9:14:b7:63:39:43:4c:f6:f0:86:f0:3a:6a:
17:b8:4e:5a:7c:82:d7:55:92:b9:4c:ee:b0:45:79:d6:3f:e0:
1a:79:01:16:19:55:40:13:7a:ec:fd:89:cd:e6:b7:64:38:34:
88:92:11:93:b9:71:d9:62:2e:1b:89:e9:81:3d:80:23:80:d3:
ab:ef:92:ad:2a:04:f6:92:13:80:53:24:25:91:2d:b5:8d:c7:
ea:fd:44:40:4e:34:f8:e7:f4:be:f0:b2:b5:90:c3:6b:40:4e:
ad:00:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:13:38 2025 by rpki-client