Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D0147C245511F095813D83DAE4EC9C.roa
File: 29D0147C245511F095813D83DAE4EC9C.roa (raw, json)
Hash identifier: ni7lGS3CsWeZV6jr4Usup1r9C38YRFItwH1ZxX6sqcQ=
Subject key identifier: 20:7E:9D:01:A2:79:E5:3A:EF:F4:5D:2D:F0:4B:D3:92:C5:AE:89:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D0147C245511F095813D83DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:21:04 +0000
ROA not before: Mon 28 Apr 2025 17:21:00 +0000
ROA not after: Sat 25 Apr 2026 17:21:00 +0000
asID: 984
IP address blocks: 154.207.150.0/24 maxlen: 24
154.207.152.0/24 maxlen: 24
154.207.154.0/24 maxlen: 24
154.207.157.0/24 maxlen: 24
154.207.158.0/24 maxlen: 24
154.207.160.0/24 maxlen: 24
154.207.162.0/24 maxlen: 24
154.207.164.0/24 maxlen: 24
154.207.167.0/24 maxlen: 24
154.207.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 08:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97339 (0x17c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:21:00 2025 GMT
Not After : Apr 25 17:21:00 2026 GMT
Subject: CN=680fb900-1dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:a0:7b:0b:ed:d2:f9:f2:6a:2d:90:dd:69:
4c:53:a5:a5:99:54:bd:d7:a4:10:57:96:08:b1:23:
20:6b:24:8d:b2:b1:1e:f4:e3:23:b7:88:bc:2d:34:
4f:85:d3:4a:7b:08:21:21:5d:bf:c3:90:51:60:bb:
7c:0a:cf:a0:5e:4e:ff:74:cf:53:89:a0:82:94:8e:
31:9d:f8:5a:7a:45:40:11:4d:ac:8e:f9:40:d3:2c:
b5:1a:37:32:50:97:5e:a6:a5:07:01:73:cb:bf:9e:
fb:1b:32:08:5e:3a:0c:f1:fa:1b:1f:2b:60:c0:9f:
32:1f:5a:2d:57:84:e5:99:cc:da:32:d8:2b:04:6a:
5c:8a:b1:08:b5:40:71:c4:d8:3b:86:cf:ba:b0:14:
ec:be:53:56:d2:b8:1b:7a:79:72:cd:f8:a2:d2:35:
c8:09:8a:d7:6a:d5:68:f1:4d:15:db:4f:27:13:ce:
c5:2f:e0:77:b2:f4:90:ad:62:f3:b1:f1:05:e0:2f:
e5:f7:38:c3:0b:e7:8b:98:84:95:6c:32:0c:2f:8d:
5c:0b:e6:0b:9f:70:f3:a4:20:44:51:c8:f6:20:f8:
26:d5:75:b6:fc:98:45:db:af:21:ac:90:b3:5f:1c:
1b:43:8c:31:b4:00:ec:7d:52:be:9d:67:81:ad:76:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:9D:01:A2:79:E5:3A:EF:F4:5D:2D:F0:4B:D3:92:C5:AE:89:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D0147C245511F095813D83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.150.0/24
154.207.152.0/24
154.207.154.0/24
154.207.157.0-154.207.158.255
154.207.160.0/24
154.207.162.0/24
154.207.164.0/24
154.207.167.0/24
154.207.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:06:67:28:1b:c0:b3:fc:c0:3f:d2:88:50:4d:b5:51:7a:a5:
c8:2e:4f:07:fb:1e:6d:fa:71:ef:c7:19:5a:1e:c8:74:bf:4a:
81:eb:00:82:33:fe:19:a5:55:50:3b:67:fc:5a:9c:5b:19:2a:
90:66:a3:da:34:c6:51:a4:9e:3b:21:e8:dd:1a:d8:a4:8b:94:
61:fa:5a:12:26:b8:86:20:73:34:4b:42:d5:1f:43:f6:a7:0c:
e3:73:b4:a7:c8:e6:0f:78:12:6c:17:66:c0:1d:5e:17:b2:42:
27:1d:27:20:40:78:28:3e:d0:ea:b1:1d:d2:90:be:75:0b:c8:
40:f5:d5:4c:8a:c6:73:f7:bd:71:0e:00:3c:09:48:34:07:c6:
af:1d:68:b2:74:6e:2d:10:d3:6b:39:37:d4:41:03:45:7c:e7:
cd:a7:3a:a6:0a:b8:62:44:c8:24:2c:9e:5f:88:31:d6:23:95:
92:7e:08:28:c1:02:61:ae:9c:27:f5:d5:d1:a6:f5:b1:44:4a:
4c:03:e8:fc:d1:5d:c0:83:d6:78:90:09:eb:c3:30:7c:ea:09:
52:da:84:a0:d0:22:d8:32:74:5c:b7:90:b6:1e:64:a3:e4:4d:
d6:53:2d:af:0d:cc:38:be:b0:48:56:28:77:98:9a:c5:0f:3f:
c9:05:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:54:57 2025 by rpki-client