Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088FEB6E245711F0BE86258EDAE4EC9C.roa
File: 088FEB6E245711F0BE86258EDAE4EC9C.roa (raw, json)
Hash identifier: isJT6GSWJJ7YEbxuhucbv62CBMRIy7fcE/wFt9sOyXM=
Subject key identifier: 76:73:37:24:45:BA:F1:D6:C1:D8:82:2A:92:59:DA:74:C2:1C:B0:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088FEB6E245711F0BE86258EDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:34:28 +0000
ROA not before: Mon 28 Apr 2025 17:34:23 +0000
ROA not after: Sun 26 Apr 2026 17:34:23 +0000
asID: 984
IP address blocks: 154.201.3.0/24 maxlen: 24
154.202.72.0/24 maxlen: 24
154.202.76.0/24 maxlen: 24
154.202.77.0/24 maxlen: 24
154.202.78.0/24 maxlen: 24
154.206.35.0/24 maxlen: 24
154.206.37.0/24 maxlen: 24
154.206.41.0/24 maxlen: 24
154.206.42.0/24 maxlen: 24
154.206.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 11:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97347 (0x17c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:34:23 2025 GMT
Not After : Apr 26 17:34:23 2026 GMT
Subject: CN=680fbc24-73c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:6d:19:7a:67:e8:f6:05:bb:59:be:2a:d1:
b2:60:d4:b7:d8:d9:86:36:64:d9:46:1a:38:21:0c:
32:4c:a7:05:db:35:4b:b8:13:2a:bb:f1:86:0e:f5:
84:7a:12:04:0b:79:03:e0:5a:fe:8c:6c:68:46:f4:
dd:f0:47:39:8e:76:cf:b3:e3:c2:f0:df:b3:93:f6:
ee:8c:56:ee:b7:57:d1:91:45:12:93:80:6d:f6:52:
a2:ee:64:36:69:c4:7b:ac:74:2d:94:74:19:5d:34:
0b:f7:cd:35:a9:af:f4:5b:a4:c7:0f:e5:49:97:e4:
fe:a9:84:65:00:b4:5e:77:70:53:b0:68:de:73:84:
bd:60:51:46:af:f6:57:b1:60:e3:20:16:ef:4d:de:
47:01:ac:93:ac:f8:09:ca:c6:5d:05:36:27:43:68:
a1:b3:fe:b1:52:01:d2:8f:63:02:1b:63:3a:6b:4e:
ee:15:79:8a:76:85:09:04:8a:1e:e5:44:16:87:ec:
81:53:d1:44:62:fa:d2:4f:cc:c8:cf:cd:4e:d3:d9:
07:5f:61:46:f0:e4:18:50:31:a9:b7:34:c9:8b:71:
cb:1d:17:20:6e:0e:6d:62:aa:12:41:0f:b9:04:87:
d6:21:ea:95:18:17:78:1f:74:f5:e6:d5:06:7f:42:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:37:24:45:BA:F1:D6:C1:D8:82:2A:92:59:DA:74:C2:1C:B0:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/088FEB6E245711F0BE86258EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.3.0/24
154.202.72.0/24
154.202.76.0-154.202.78.255
154.206.35.0/24
154.206.37.0/24
154.206.41.0-154.206.42.255
154.206.44.0/24
Signature Algorithm: sha256WithRSAEncryption
14:40:ab:6e:ca:45:21:bc:d9:c0:08:45:7e:f7:27:25:1e:ed:
0f:86:d9:51:6d:dc:43:76:7e:11:c4:64:94:9b:2f:9b:bc:3b:
b6:c3:59:62:84:f9:6d:52:11:1d:d7:52:a0:d0:51:24:12:d0:
a0:96:71:ba:2c:11:17:e6:16:94:9b:47:8e:27:b0:db:68:95:
5c:8d:9c:87:36:ad:8f:1a:19:86:43:64:8f:77:e2:a6:bc:29:
a4:24:78:87:de:a9:bc:ed:99:68:ae:0a:54:3b:09:8f:59:c6:
77:27:bb:3a:b1:47:85:89:4a:2c:f6:e2:8a:0f:e0:11:9a:3e:
e0:5c:d0:94:3f:a4:da:cc:ff:79:99:3e:89:f5:06:7c:ad:e5:
a5:6a:4a:19:81:8e:80:38:45:3d:c0:09:84:2c:7d:c0:2d:44:
d7:90:29:09:08:39:c3:01:93:f5:4e:1d:34:ff:f3:ed:16:41:
8d:bb:87:c5:6a:dd:3b:79:97:53:ea:e4:b6:88:59:9b:57:3c:
54:91:37:b8:e0:1d:a7:5e:1c:cb:00:07:d8:b5:c5:dd:60:e8:
60:c9:eb:a5:b1:c6:1e:cc:7e:90:7c:fa:95:4a:a0:17:56:a6:
25:90:63:ae:80:b2:f0:46:36:a0:b1:9d:d6:cb:df:b2:55:98:
d7:5a:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:42:19 2025 by rpki-client