Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C1007C245611F0A94E8C89DAE4EC9C.roa
File: 19C1007C245611F0A94E8C89DAE4EC9C.roa (raw, json)
Hash identifier: nTDex+rdVFc8fYAgDyzDZM4iIFV/lMD+QsLGKF60y+U=
Subject key identifier: 9A:E0:A2:49:41:C6:DE:25:56:E6:02:80:31:9F:AB:EA:72:E0:C7:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C1007C245611F0A94E8C89DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:27:47 +0000
ROA not before: Mon 28 Apr 2025 17:27:41 +0000
ROA not after: Sun 26 Apr 2026 17:27:41 +0000
asID: 984
IP address blocks: 154.195.14.0/24 maxlen: 24
154.195.33.0/24 maxlen: 24
154.195.40.0/24 maxlen: 24
154.195.50.0/24 maxlen: 24
154.198.16.0/24 maxlen: 24
154.200.202.0/24 maxlen: 24
154.207.174.0/24 maxlen: 24
154.207.176.0/24 maxlen: 24
154.207.180.0/24 maxlen: 24
154.207.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97343 (0x17c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:27:41 2025 GMT
Not After : Apr 26 17:27:41 2026 GMT
Subject: CN=680fba93-459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:09:63:3a:67:98:01:93:1c:3d:66:47:83:
d7:4a:2e:86:63:5e:b6:8e:30:e2:b4:07:ee:e2:45:
cd:6b:2c:22:0d:19:ef:10:b9:f1:1e:49:14:f5:1c:
00:51:07:c8:5c:ab:9a:2e:76:43:fa:17:bb:db:e1:
70:1e:e2:1f:ae:40:49:e6:02:33:c7:4e:ee:3b:eb:
8d:4b:aa:bb:ac:0d:79:c6:c0:f6:de:e9:6d:eb:06:
3c:ce:6f:8a:49:2c:90:e6:5b:7b:30:75:8c:64:9e:
d0:cf:48:88:1d:60:f5:e2:80:55:d4:40:4d:8f:1d:
24:7d:61:96:86:3a:ce:96:91:4a:8e:90:e8:14:76:
29:ce:e8:36:63:af:10:7c:c3:c8:9a:3a:23:e7:6e:
05:c4:10:b5:54:e3:f7:e8:88:2d:8b:95:23:a6:95:
a7:aa:63:22:01:0f:5d:55:8b:92:2a:fe:58:c8:52:
8a:e2:be:71:22:61:55:57:ff:07:47:17:aa:35:71:
22:f1:68:df:05:b0:b0:d8:d4:07:ff:07:a7:eb:f5:
d2:ad:fb:06:f2:4e:83:1b:c5:08:a5:2b:9d:31:68:
c7:8d:16:77:f4:9a:67:13:06:11:2e:5d:13:8a:e2:
d5:d7:38:1a:d1:0c:5a:23:81:5a:79:42:97:35:f7:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:A2:49:41:C6:DE:25:56:E6:02:80:31:9F:AB:EA:72:E0:C7:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C1007C245611F0A94E8C89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.14.0/24
154.195.33.0/24
154.195.40.0/24
154.195.50.0/24
154.198.16.0/24
154.200.202.0/24
154.207.174.0/24
154.207.176.0/24
154.207.180.0/23
Signature Algorithm: sha256WithRSAEncryption
78:29:f8:b1:87:62:59:d3:6d:b2:9f:2b:91:f2:66:36:30:1c:
45:98:37:90:3d:d8:fb:94:41:a1:61:2c:3e:3c:cb:1a:c8:ed:
e0:84:de:37:9b:c6:4f:b8:a8:fe:3d:42:f9:27:fa:a0:69:69:
a2:d1:b2:3c:65:60:74:eb:c4:b8:aa:d3:45:6c:e6:4a:d0:7e:
5e:e5:9a:33:06:9f:50:ea:4f:cd:5d:51:dd:4e:46:17:97:c7:
23:2c:18:90:85:5e:2a:bc:b6:34:3d:55:82:b7:b8:cd:fd:0d:
80:a0:58:ec:d8:dd:de:8c:48:2e:54:d6:38:1d:1c:76:4b:60:
23:a6:e9:8e:c3:8d:37:be:6c:ba:1d:bd:06:d7:f4:98:db:a3:
65:67:fb:ab:fc:c6:94:8f:cb:25:f3:5e:66:ca:8a:9f:43:56:
30:78:93:9e:5c:5f:d1:c3:51:72:bd:e2:2b:c7:b3:ce:9f:4d:
70:1e:e1:b0:31:e9:f5:8c:15:18:17:41:b7:c9:fd:95:49:09:
49:2c:d7:e8:b1:24:01:5f:25:53:eb:80:73:0b:46:4b:9f:8e:
d0:ed:b3:35:65:70:a1:24:40:d0:df:59:3d:5b:ce:2a:62:f7:
1c:15:89:67:5b:87:80:b0:55:db:9e:50:e1:55:2b:c0:ba:96:
3a:22:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:37 2025 by rpki-client