Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1465AA8A2B2A11F0B29839C3DAE4EC9C.roa
File: 1465AA8A2B2A11F0B29839C3DAE4EC9C.roa (raw, json)
Hash identifier: /oK+Fz6aqsEViVnJiyz6jaereeVZ9TX9MQAgw+MseCk=
Subject key identifier: 81:AE:C7:3D:C3:AD:B7:8C:F6:8A:41:F6:4B:AF:B1:10:23:F6:7C:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1465AA8A2B2A11F0B29839C3DAE4EC9C.roa
Signing time: Wed 07 May 2025 10:00:18 +0000
ROA not before: Wed 07 May 2025 10:00:14 +0000
ROA not after: Sat 17 May 2025 10:00:14 +0000
asID: 150706
IP address blocks: 154.223.168.0/24 maxlen: 24
154.223.169.0/24 maxlen: 24
154.223.177.0/24 maxlen: 24
154.223.178.0/24 maxlen: 24
154.223.179.0/24 maxlen: 24
154.223.180.0/24 maxlen: 24
154.223.182.0/24 maxlen: 24
154.223.183.0/24 maxlen: 24
154.223.188.0/24 maxlen: 24
154.223.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98131 (0x17f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 10:00:14 2025 GMT
Not After : May 17 10:00:14 2025 GMT
Subject: CN=681b2f32-1d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:08:84:ca:e1:df:1c:80:5f:87:36:e4:14:
1b:09:cf:18:b8:ed:4c:cb:60:55:91:5c:67:d0:25:
42:11:f1:44:89:e5:41:68:e6:77:3d:6f:23:16:c9:
e1:56:b2:f3:9b:ea:10:0d:6c:d0:01:0b:16:a1:ba:
ff:20:72:94:a7:40:ef:b9:0e:4f:65:f3:13:a0:de:
04:3d:a1:80:c3:4a:26:1d:f5:54:7c:0d:e8:7d:b5:
79:91:71:cc:d6:a2:83:a8:f4:de:69:42:72:80:ba:
b3:49:77:43:fc:1e:15:7b:2c:5c:3f:23:00:9d:b3:
ae:5d:35:85:3a:2f:9a:01:88:b8:b1:8c:47:cb:8d:
ff:9f:36:b8:c5:29:d5:e3:0a:19:8a:fc:e8:01:5a:
c1:99:4f:21:52:c5:90:8c:a9:83:ed:be:d8:f7:f6:
a9:a9:b2:e7:d8:92:1c:22:8e:40:4e:7f:62:b7:05:
5d:eb:8a:e8:38:4d:e5:e6:2a:17:8b:47:04:ab:46:
05:0a:2a:26:2b:ee:dc:f4:51:9c:2f:06:90:e4:2f:
42:c8:b1:17:62:de:8d:85:e4:09:09:96:5a:9b:01:
cd:87:6a:85:07:e3:d3:c5:54:1c:90:76:9f:09:54:
cf:19:b7:9f:38:7e:48:47:9d:f9:a0:9e:d0:9f:20:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AE:C7:3D:C3:AD:B7:8C:F6:8A:41:F6:4B:AF:B1:10:23:F6:7C:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1465AA8A2B2A11F0B29839C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/23
154.223.177.0-154.223.180.255
154.223.182.0/23
154.223.188.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:85:9e:ed:25:5b:fa:09:84:47:11:c9:b5:46:c7:52:8b:66:
c7:df:d9:6d:66:24:65:a4:ea:69:14:8c:eb:55:93:81:0a:f2:
8b:19:ef:b5:1f:c4:dc:bd:0c:79:db:d2:69:36:48:b0:9a:46:
d4:84:48:c6:95:b3:54:14:c6:98:2b:0a:5d:4d:1b:5e:2f:26:
53:56:94:c5:f0:e3:cf:70:21:b0:74:04:20:92:49:57:a6:f2:
80:f6:fa:42:c1:67:7f:d2:50:b0:da:69:db:1a:cf:34:95:8b:
e7:0b:50:81:6f:a5:da:f8:d3:dd:75:5c:ed:16:ff:16:bb:c1:
88:72:62:29:69:8a:85:01:14:85:9d:31:66:83:2c:f2:82:6e:
a2:93:7f:f8:69:0b:22:5e:99:58:4a:f5:ee:f9:f2:a6:7d:17:
17:85:a3:70:0d:c5:1c:79:25:ff:c6:89:c9:99:48:e1:b0:f5:
5d:19:59:ac:c5:52:68:63:e6:db:43:d2:10:f7:b1:dc:1e:da:
62:ff:e2:ab:e1:41:1b:12:b1:61:3b:f4:58:78:5d:f8:e1:2a:
65:ad:57:8f:22:5b:20:32:d5:ed:c5:37:5b:c5:7e:1f:a3:e0:
8d:01:e3:9f:bd:47:cf:14:8c:ec:cc:4d:e7:d3:45:96:ea:89:
13:ec:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:53:42 2025 by rpki-client