Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E71EBB425AE11F08E865591DAE4EC9C.roa
File: 1E71EBB425AE11F08E865591DAE4EC9C.roa (raw, json)
Hash identifier: bE9TJKNKBMWDKJu52K2E0EPBVRmGx7kvq2gqj4qA13g=
Subject key identifier: F3:68:A5:01:BD:DF:D0:DA:1A:EE:B5:9E:BB:F4:04:E5:7F:5C:D5:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E71EBB425AE11F08E865591DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 10:30:22 +0000
ROA not before: Wed 30 Apr 2025 10:30:17 +0000
ROA not after: Tue 11 Apr 2028 10:30:17 +0000
asID: 17561
IP address blocks: 154.194.56.0/24 maxlen: 24
154.196.214.0/24 maxlen: 24
154.196.215.0/24 maxlen: 24
154.196.216.0/24 maxlen: 24
154.196.219.0/24 maxlen: 24
154.196.220.0/24 maxlen: 24
154.198.15.0/24 maxlen: 24
154.199.29.0/24 maxlen: 24
154.206.10.0/24 maxlen: 24
154.206.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97602 (0x17d42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 10:30:17 2025 GMT
Not After : Apr 11 10:30:17 2028 GMT
Subject: CN=6811fbbe-5b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:97:21:bd:ad:8b:4b:c8:6b:b6:fc:e7:ab:
52:28:92:4a:90:67:e1:e7:85:86:8c:21:2f:03:2c:
47:c3:68:94:cf:b2:0f:d3:17:89:cf:e2:ac:16:de:
53:9d:03:8d:70:8e:9f:9e:56:93:17:50:a3:42:d5:
12:cc:5f:b6:6e:42:8c:3f:ae:7e:4a:f8:76:ae:0a:
0f:8c:4c:7d:b3:6f:88:06:7d:4e:f3:1e:b0:0c:cd:
2b:89:0f:1d:40:ea:8a:d0:06:de:39:26:99:0d:23:
44:46:d7:a8:b8:9f:71:bb:2c:1f:72:0d:03:9d:70:
3f:03:90:a9:76:39:70:0a:c1:25:6f:00:82:7c:e6:
98:c0:d7:20:09:96:47:c9:5d:9c:8a:01:ff:0c:ec:
a4:5a:4a:38:f8:10:4a:55:b6:8a:88:c6:a2:8f:a1:
dd:7f:ea:7a:69:88:c1:1f:67:cb:09:d3:ad:18:33:
b1:f9:a3:f7:b8:67:e4:01:8a:b9:cb:15:7a:b9:c2:
32:ab:71:07:0c:f1:ae:d7:96:d9:5d:02:64:ab:7d:
ff:a0:69:04:f0:b6:0b:1a:9c:1f:e5:d5:df:2a:13:
58:47:f3:11:92:3a:74:4e:9d:c8:20:5a:d3:86:60:
c0:81:90:b2:8f:fc:f5:de:0e:8e:41:a6:12:0f:4a:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:A5:01:BD:DF:D0:DA:1A:EE:B5:9E:BB:F4:04:E5:7F:5C:D5:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E71EBB425AE11F08E865591DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
154.196.214.0-154.196.216.255
154.196.219.0-154.196.220.255
154.198.15.0/24
154.199.29.0/24
154.206.10.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:84:15:44:df:03:9f:21:84:77:fa:4d:fb:3d:4e:34:db:56:
78:c1:54:6a:2c:f2:91:48:03:97:55:d6:fc:96:6a:18:bd:72:
f3:a0:f2:5a:d0:26:f8:6b:2f:72:bc:02:7e:5d:15:7e:dc:97:
0e:4d:4d:63:10:61:7a:2c:0f:25:4c:bd:63:d1:82:1c:a4:08:
fa:2e:70:c9:13:5f:ac:16:bc:43:e2:38:10:d8:4e:86:b7:55:
91:df:85:a4:fb:33:c3:6f:63:ba:f5:1c:11:23:2d:81:b2:40:
66:d2:58:e3:0b:8f:92:d0:ad:37:48:53:f6:cc:ed:df:37:be:
46:a2:59:66:62:b3:27:c0:8d:f6:11:88:df:9b:04:c1:59:50:
60:9d:db:94:9d:df:9c:85:49:94:b3:e2:af:fc:06:d8:a1:81:
fe:f1:9b:1c:e1:47:0a:45:c7:81:48:41:fa:72:10:8b:b7:c8:
b3:43:d5:a0:0c:14:44:7f:80:c2:b5:9c:9b:1a:ff:91:a9:f2:
26:a2:f6:0b:4c:87:b5:92:d7:a4:27:e1:cc:30:37:60:a6:b7:
09:ae:47:e0:37:ee:b4:69:9c:83:7c:14:2f:8f:f2:aa:54:a5:
89:2b:40:57:8d:07:62:1f:82:29:94:b0:56:89:5c:fb:c6:1a:
3f:7d:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:29:42 2025 by rpki-client