Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22892BEA2A5E11F0BE716EEEDAE4EC9C.roa
File: 22892BEA2A5E11F0BE716EEEDAE4EC9C.roa (raw, json)
Hash identifier: YYPk/POJXAwoCM2ZZxZ+G+lh1OjLpHKXBxjYYWUbCjk=
Subject key identifier: 16:90:19:B6:38:C9:44:ED:EE:05:03:E8:61:E8:0F:27:24:2F:35:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22892BEA2A5E11F0BE716EEEDAE4EC9C.roa
Signing time: Tue 06 May 2025 09:40:25 +0000
ROA not before: Tue 06 May 2025 09:40:18 +0000
ROA not after: Fri 13 Jun 2025 09:40:18 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
154.212.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98085 (0x17f25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 09:40:18 2025 GMT
Not After : Jun 13 09:40:18 2025 GMT
Subject: CN=6819d909-1e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:66:05:c8:e2:4e:b7:4e:6c:72:9b:3b:46:
60:48:a0:9d:a8:12:58:71:6a:b7:58:8d:3a:c2:89:
ce:3f:31:0e:b9:f0:89:5a:6e:4b:45:01:07:4c:ba:
ba:e0:3b:f3:dd:a3:e9:2e:09:0b:b8:1a:a9:21:9b:
31:42:81:7d:15:6a:38:d0:2d:f4:68:a2:db:a8:9a:
14:32:76:f9:ae:6d:7f:b0:63:58:68:4b:dd:95:3f:
ee:8a:c5:20:0a:02:4f:81:96:7b:45:86:55:9c:f2:
84:99:68:4f:1b:f0:fe:b2:06:84:ae:5e:5a:e0:f7:
8a:e7:0c:2a:6d:e3:53:9c:b8:ee:63:79:ef:da:b8:
fe:7b:27:0b:92:8b:c8:51:4d:4a:a5:4d:7e:38:e6:
35:9f:ab:6c:b6:4b:ba:f0:ea:e4:67:5e:5d:ac:97:
7d:f4:f4:60:52:6a:c6:81:78:41:12:7c:74:89:34:
90:fc:98:ae:88:44:49:af:2b:d3:bd:d2:3f:b3:e9:
5e:b8:88:35:0a:46:56:3c:7f:b4:42:2d:12:60:c3:
33:4e:c9:95:8c:9c:d3:60:1b:d2:2e:3f:88:36:fc:
4b:c0:da:92:e8:5b:3b:2a:e5:91:c5:58:54:88:cd:
d3:db:6b:7a:f3:8a:05:7f:18:c9:d5:11:a5:74:df:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:19:B6:38:C9:44:ED:EE:05:03:E8:61:E8:0F:27:24:2F:35:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22892BEA2A5E11F0BE716EEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0a:02:fa:08:ea:41:df:92:75:a6:fa:90:0f:32:c0:69:e0:
0c:98:d9:f9:79:f0:15:4e:0a:8c:1e:1b:20:c2:ad:2d:f5:bd:
e6:70:09:77:74:08:01:2b:18:8c:fc:aa:d5:ba:c7:c1:83:55:
af:01:c5:ab:f4:91:1c:cc:47:1e:db:d6:6e:67:a9:ae:ab:0f:
2c:44:41:62:ec:74:a5:ed:53:5b:cb:70:86:21:9d:3f:b4:eb:
4b:b1:1c:2c:6b:57:ac:a4:5d:e6:68:53:b3:c7:8a:5f:80:6c:
7b:bc:9e:ed:21:b7:a0:90:b8:33:2b:dd:70:e1:89:85:67:b0:
13:7e:3f:c3:13:10:d0:47:72:6a:53:50:2a:a0:b6:2b:a9:01:
d6:2b:53:dd:fb:98:11:b1:03:5b:8b:02:76:6b:95:93:b2:57:
0e:89:af:31:e4:22:d8:ad:f3:1b:8e:ce:f5:e5:cd:52:ba:74:
94:d4:af:a3:3e:60:4e:28:54:15:9f:a2:d8:db:be:dd:74:98:
83:ad:58:54:86:80:a3:8d:93:e5:8d:52:ad:db:24:a1:86:90:
b8:1b:02:57:16:d4:1b:91:e5:bd:41:d3:99:9c:d1:fb:68:94:
76:06:dd:cc:01:b0:e5:52:ef:ac:00:74:49:09:c3:28:93:ab:
32:31:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:09 2025 by rpki-client