Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22DB50E225BC11F082722EECDAE4EC9C.roa
File: 22DB50E225BC11F082722EECDAE4EC9C.roa (raw, json)
Hash identifier: XPCdeJx3SFrrb8KVrkNrN711GUaOAHcNw2chiFX3Bt4=
Subject key identifier: B5:18:F8:DF:37:6D:C5:14:14:9B:90:60:D7:65:DE:65:EA:0A:ED:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22DB50E225BC11F082722EECDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 12:10:42 +0000
ROA not before: Wed 30 Apr 2025 12:10:37 +0000
ROA not after: Fri 30 May 2025 12:10:37 +0000
asID: 57043
IP address blocks: 154.194.63.0/24 maxlen: 24
154.194.66.0/24 maxlen: 24
154.199.6.0/24 maxlen: 24
154.199.38.0/24 maxlen: 24
154.202.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 08:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97632 (0x17d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:10:37 2025 GMT
Not After : May 30 12:10:37 2025 GMT
Subject: CN=68121342-cd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:78:5b:81:2d:99:e1:fb:2f:7c:82:54:be:
7a:ad:7d:d4:2f:83:b1:db:cb:fc:fb:f4:ea:25:b5:
1d:b4:97:5a:60:5d:7e:99:d7:08:38:5f:9b:e4:0a:
3e:36:8f:17:a7:65:3b:08:a7:57:ab:82:b1:f3:45:
ee:e2:f2:43:56:c7:86:5b:39:b5:f1:d8:5a:f6:2f:
97:c9:39:da:74:61:25:02:d9:91:dc:90:30:e9:1d:
d0:c5:e3:44:45:3c:86:00:07:39:9a:d9:68:3f:17:
83:10:45:a3:2f:88:a4:74:83:6e:47:74:c0:d0:e6:
15:de:dd:d1:b3:1c:ef:d8:65:40:08:78:e5:93:21:
4d:be:cf:11:86:d1:7a:f2:30:eb:43:c9:35:2c:35:
ff:a8:c9:fa:b6:0c:30:b7:5a:88:97:92:ad:fa:c8:
d3:c0:c4:9d:af:63:3e:98:18:fa:cc:6f:f7:b0:56:
30:97:25:20:74:7a:ca:10:14:a0:16:e5:71:48:66:
54:d1:ed:1e:ed:80:02:88:e4:1e:09:cf:29:d8:8b:
62:04:95:e6:3f:46:cd:7a:5b:ff:34:05:86:ce:d5:
03:29:26:7f:03:03:2b:1c:45:87:a8:71:a0:6a:78:
4a:6c:18:09:10:46:0a:89:e0:0b:32:de:b7:41:76:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:18:F8:DF:37:6D:C5:14:14:9B:90:60:D7:65:DE:65:EA:0A:ED:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22DB50E225BC11F082722EECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.63.0/24
154.194.66.0/24
154.199.6.0/24
154.199.38.0/24
154.202.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:bd:a2:bb:e9:4a:45:15:06:8c:c7:51:95:cd:b3:06:27:13:
de:e3:a6:b7:66:7c:64:88:13:8c:f9:f2:9c:3e:dc:57:f3:cc:
12:ad:f7:5f:d7:2b:d9:ea:cd:a8:83:92:70:80:21:cd:08:7a:
07:c5:cc:ec:1f:1b:13:a5:78:e6:b8:a5:73:6c:cc:7e:09:f0:
c7:de:b7:0f:d4:8d:20:ce:0f:50:5f:6d:a6:45:08:ab:61:31:
3a:84:05:d9:7d:41:fa:0f:12:c0:70:2f:bc:22:a6:17:76:e7:
91:37:e9:63:98:ee:6a:6f:ec:9f:e8:02:30:9e:b8:72:1c:73:
55:ee:cd:0e:ba:54:0f:92:41:99:12:2e:0e:88:19:14:ff:36:
36:00:66:0d:27:d0:e7:12:e0:a0:57:e7:ad:56:b9:fd:97:9c:
c4:9b:c7:01:a4:c3:d8:53:73:24:c1:24:ec:67:ba:8b:3c:df:
f4:0a:6d:1d:49:ac:06:47:1c:20:a3:6d:44:01:b2:80:b4:74:
49:92:66:26:78:d8:c0:e4:4e:c3:b4:40:58:7e:6e:ed:19:21:
42:15:05:22:d2:65:7a:32:45:c4:0b:c0:8b:ce:4e:50:b9:dc:
7c:d7:e7:5c:90:38:a0:69:69:bb:58:47:36:7a:21:23:a8:b0:
3d:6b:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:45:51 2025 by rpki-client