Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A7350E02F2111F0985228C5DAE4EC9C.roa
File: 0A7350E02F2111F0985228C5DAE4EC9C.roa (raw, json)
Hash identifier: wPxaA/n69PNV5R6PcM+5FIUHIuh2agopqMEEuiGFnL8=
Subject key identifier: 9C:D4:9C:06:2A:E8:32:4F:34:22:CF:EF:7B:6E:17:50:40:37:1C:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A7350E02F2111F0985228C5DAE4EC9C.roa
Signing time: Mon 12 May 2025 11:05:41 +0000
ROA not before: Mon 12 May 2025 11:05:36 +0000
ROA not after: Tue 20 May 2025 11:05:36 +0000
asID: 9009
IP address blocks: 154.216.195.0/24 maxlen: 24
154.216.199.0/24 maxlen: 24
154.216.203.0/24 maxlen: 24
154.216.217.0/24 maxlen: 24
154.216.218.0/24 maxlen: 24
154.216.224.0/24 maxlen: 24
154.216.233.0/24 maxlen: 24
154.216.242.0/24 maxlen: 24
154.216.249.0/24 maxlen: 24
154.216.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98275 (0x17fe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 11:05:36 2025 GMT
Not After : May 20 11:05:36 2025 GMT
Subject: CN=6821d605-8d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:b1:e1:bc:c8:f1:0c:a7:4d:ee:4d:14:45:
56:38:9a:31:bb:bd:c2:b5:7c:e9:09:2d:6a:c1:75:
cd:db:69:3f:34:5b:00:d3:f1:76:61:65:47:cd:61:
e3:2a:c0:3f:ba:7d:9b:03:d0:9c:b7:e2:3e:50:99:
de:09:41:18:49:08:77:41:1e:29:f1:4e:86:65:19:
68:58:53:75:57:e5:19:26:81:91:4d:b5:02:89:9d:
7f:c4:04:cd:db:d7:e7:54:ae:ac:4f:72:3f:85:d4:
22:3d:12:3b:f6:b5:47:f9:56:5c:87:4b:7f:16:77:
11:b5:30:07:18:5d:52:69:90:1e:3f:75:d6:ba:48:
94:cb:0f:7d:1a:41:12:5c:df:71:e2:98:c2:03:61:
d6:21:d0:f9:be:1a:78:56:2a:e1:0b:f8:95:19:2d:
c9:43:f9:06:45:0f:be:bb:b5:32:f1:68:1a:69:ad:
2a:c1:ee:78:f7:eb:0e:1c:51:97:46:07:ba:fa:60:
33:9b:db:8b:8b:e2:05:32:4e:5f:bc:34:69:d8:da:
62:d4:3d:52:a9:69:94:3d:5b:3e:5d:f8:ca:e7:69:
28:fe:28:35:48:94:63:2b:34:fa:ff:42:a6:33:5f:
a7:6f:60:4a:7e:4c:b0:bd:10:a1:be:b1:21:91:10:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:9C:06:2A:E8:32:4F:34:22:CF:EF:7B:6E:17:50:40:37:1C:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A7350E02F2111F0985228C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.195.0/24
154.216.199.0/24
154.216.203.0/24
154.216.217.0-154.216.218.255
154.216.224.0/24
154.216.233.0/24
154.216.242.0/24
154.216.249.0/24
154.216.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a4:18:8f:25:15:f7:a6:b8:00:5d:48:b1:ac:d4:6b:b2:6a:
90:97:02:c6:75:a5:cc:93:87:b6:e8:0b:3b:b6:50:82:f4:3e:
0a:9a:e2:2c:91:f8:0b:dc:4e:6c:31:3a:00:7e:59:95:c7:46:
10:b6:53:e4:59:2b:8b:fa:87:db:81:83:94:57:f2:15:12:47:
f3:5f:2f:84:f4:88:70:8f:5b:cc:1a:27:8b:33:fb:52:72:23:
b8:af:bb:47:4d:67:44:9e:26:29:ba:df:4a:c4:04:8f:ce:32:
07:73:e2:8b:a9:75:a2:99:7d:c8:3d:6f:d5:c5:df:52:9e:4a:
79:01:4a:38:12:7e:25:e1:87:ba:e8:03:28:7e:6e:dd:6f:2f:
99:d8:a1:16:75:cb:64:06:d2:5f:ed:16:cc:65:9c:60:e5:7d:
43:78:2c:17:7b:6c:ec:d2:d2:c6:5e:ed:78:a2:cd:29:1a:d0:
ab:89:f7:e8:05:b0:85:9e:e2:61:63:f5:db:e4:46:71:d5:c1:
f1:b2:15:b5:82:65:84:3e:65:7f:a1:91:2b:a3:6c:55:2c:58:
82:6b:f2:6e:7e:f4:8a:3a:c2:83:55:2b:49:c9:30:25:cb:21:
57:38:b1:a9:99:8e:e8:2e:f7:b3:0c:dd:48:5c:72:6f:29:6f:
56:95:29:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:51:23 2025 by rpki-client