Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12584F9E243211F087B1D498DAE4EC9C.roa
File: 12584F9E243211F087B1D498DAE4EC9C.roa (raw, json)
Hash identifier: BWZUdRhGkGHaQXx37LFcKNuysVKfzU/eK5xYXegPP20=
Subject key identifier: 8E:C8:A8:A1:27:32:E5:46:73:9C:AF:36:7C:55:2B:F9:05:A9:D2:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12584F9E243211F087B1D498DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:09:53 +0000
ROA not before: Mon 28 Apr 2025 13:09:48 +0000
ROA not after: Sun 01 Jun 2025 13:09:48 +0000
asID: 214413
IP address blocks: 154.193.136.0/21 maxlen: 24
154.193.144.0/22 maxlen: 24
154.193.148.0/22 maxlen: 24
154.193.168.0/22 maxlen: 24
154.193.172.0/22 maxlen: 24
154.193.176.0/22 maxlen: 24
154.193.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97237 (0x17bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:09:48 2025 GMT
Not After : Jun 1 13:09:48 2025 GMT
Subject: CN=680f7e21-2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:78:bd:1b:9d:73:f7:90:3a:7d:4d:d1:7f:
c8:15:c8:ac:b1:e1:45:10:1d:d8:09:69:77:da:cf:
c0:65:5e:da:c7:49:5e:df:76:6e:55:f0:a9:c3:c6:
59:f9:56:fc:1f:f3:e4:f5:de:08:fc:88:eb:62:5a:
1b:36:de:2e:43:01:e7:49:02:a6:cc:ae:a8:df:fb:
44:4d:01:42:d8:f2:09:58:4d:67:2c:95:66:c2:0a:
b0:31:3c:59:21:6d:1e:66:14:f5:7e:0e:c5:35:59:
7a:a1:ed:f5:ce:3b:8a:3b:3a:10:39:8d:f1:25:9a:
45:80:e5:69:96:76:54:b9:5b:fc:a6:48:18:a7:46:
22:59:5b:46:72:1b:9a:e9:18:ad:7e:b4:06:f4:4b:
e9:de:3d:0e:17:fb:73:d4:46:8b:91:c2:1b:d5:72:
77:94:a7:6a:41:3f:2a:1d:66:72:36:4d:5a:aa:87:
3a:44:e1:05:bd:4d:82:0f:de:0d:7a:37:79:16:2b:
f8:bf:92:5a:da:ae:36:13:0f:91:14:32:95:2d:75:
a6:60:a1:1b:ce:84:c1:f2:e4:46:11:f3:e7:50:16:
3b:7b:c1:f5:fc:53:14:5e:dd:3e:7f:9e:dc:1a:d6:
09:3f:0b:b2:98:1a:a1:d3:d5:d7:cc:da:9a:0b:4c:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:A8:A1:27:32:E5:46:73:9C:AF:36:7C:55:2B:F9:05:A9:D2:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12584F9E243211F087B1D498DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.136.0-154.193.151.255
154.193.168.0-154.193.183.255
Signature Algorithm: sha256WithRSAEncryption
8e:f2:15:dc:dd:72:e3:93:33:9a:f9:53:fc:fa:a3:7f:4d:18:
e5:b2:ce:84:77:d2:93:f1:24:77:de:b2:26:03:ee:f9:c6:45:
c9:19:4a:17:5d:ed:aa:1e:53:88:62:c5:7c:a6:b1:85:d9:43:
96:a3:ff:90:43:71:64:51:fd:bb:06:c1:ff:5f:29:13:b3:b6:
a5:62:22:8a:ba:85:14:0a:dc:9e:81:6d:d6:bd:34:f3:5e:8e:
c8:f1:30:19:0e:ff:72:00:e3:d1:b6:37:c5:c8:2e:df:93:87:
4d:34:e4:95:c7:63:46:8a:c5:a8:5c:98:09:1c:d0:08:2e:6c:
44:a0:11:a9:0b:92:67:82:22:0e:bc:f3:5e:e2:ed:42:56:6d:
77:10:6c:b0:96:c1:ae:8c:62:18:f8:21:91:5d:70:62:a0:1b:
84:55:61:af:71:f8:13:c4:aa:09:91:cb:59:3e:f7:6e:a4:1c:
3f:3c:b2:0b:77:4e:8b:e2:48:96:8e:34:31:90:f9:3d:7d:5f:
dd:5f:93:7e:c0:f4:7e:9a:26:f7:6f:3d:e8:7d:18:5b:c3:6f:
03:ac:37:5c:4c:02:e7:c5:98:15:80:e5:ef:79:9f:aa:6c:d6:
b9:fb:0e:cc:3e:66:8d:6f:66:23:69:ae:ea:cc:fd:53:b8:76:
6b:26:f6:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 13 10:12:22 2025 by rpki-client