Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB2927224CA11F0BD550E9DDAE4EC9C.roa
File: 3AB2927224CA11F0BD550E9DDAE4EC9C.roa (raw, json)
Hash identifier: 8k1CybFAaXDb7q1neTWWZkn0b5oDVsq3hH2auLFRAAU=
Subject key identifier: 42:B8:C7:F1:A4:A4:15:57:50:95:5A:57:43:A7:1C:38:0F:53:22:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB2927224CA11F0BD550E9DDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 07:19:04 +0000
ROA not before: Tue 29 Apr 2025 07:18:59 +0000
ROA not after: Wed 06 May 2026 07:18:59 +0000
asID: 140224
IP address blocks: 154.86.20.0/24 maxlen: 24
154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97463 (0x17cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 07:18:59 2025 GMT
Not After : May 6 07:18:59 2026 GMT
Subject: CN=68107d68-0c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:a6:ac:d0:05:c0:42:1f:8b:86:ba:ec:c6:
da:a0:e5:36:d3:b6:2f:ff:63:d4:5e:4d:25:1b:72:
fe:98:18:f3:dd:d9:bf:20:18:63:d7:eb:e2:2b:7c:
29:27:58:fd:7f:b0:75:97:ca:c8:80:7c:57:fd:eb:
84:87:d5:67:5d:a3:ab:7f:62:85:f5:41:a0:75:34:
0b:4c:eb:d1:e5:97:62:e8:31:1a:2a:99:f0:8c:91:
26:55:5b:11:2e:8b:d9:82:24:91:4e:9f:23:b2:a0:
75:3e:6e:1c:8f:a8:9b:0a:48:93:c7:f0:94:c0:83:
54:29:c6:23:36:b9:7f:e6:f4:54:db:8d:4e:fc:ee:
1a:a2:75:22:30:a2:73:c4:f2:f8:04:fc:7e:45:c2:
8c:2b:1d:02:93:8e:17:58:65:71:c9:2c:9c:ef:66:
2c:dd:d5:32:62:b2:98:d7:a2:c2:4c:de:ae:56:d4:
d9:37:ca:73:68:81:0d:30:fa:3e:44:70:3a:e9:d6:
57:ce:fa:24:b8:ae:de:ed:a7:a2:bc:35:8d:8c:ba:
82:0b:65:cb:29:00:a7:9f:42:c4:5d:6b:39:29:fb:
5d:31:3c:30:25:d3:9e:e1:31:f5:26:1f:1b:e4:3d:
a8:9d:ca:5b:1d:c1:b1:75:d9:e4:d7:ed:d5:10:fe:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B8:C7:F1:A4:A4:15:57:50:95:5A:57:43:A7:1C:38:0F:53:22:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AB2927224CA11F0BD550E9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.20.0-154.86.29.255
Signature Algorithm: sha256WithRSAEncryption
44:b6:73:40:c3:c0:da:dd:e3:f6:4b:c1:36:d8:c9:d4:9a:e9:
9a:c8:84:ba:17:e3:1d:70:e5:a0:82:49:ea:a7:c8:35:b6:84:
75:13:c1:d9:a7:f5:0b:70:76:0a:0d:6b:1b:17:10:20:fc:09:
74:d7:0e:ce:c2:b5:6c:97:b8:2a:e6:76:05:83:b8:89:2e:a4:
5f:ad:23:a5:2c:2b:26:ee:75:8b:2f:11:df:96:8b:57:96:e9:
7a:18:00:9f:63:4a:49:62:d4:47:aa:ae:e0:16:27:80:95:38:
13:27:b7:fb:05:cf:e0:4b:15:11:1c:90:e2:ad:c2:60:83:06:
2d:d5:f7:9c:2a:b4:95:4d:d5:e5:c8:79:68:83:11:e3:5b:75:
64:f8:c6:2d:6c:9e:e6:51:33:0e:6a:88:5a:cd:23:90:02:47:
76:02:25:c3:d5:3c:c9:43:dc:4b:bb:b5:7d:03:33:53:fa:43:
54:10:7e:db:14:0a:64:ce:79:28:a3:e6:ec:a2:b2:05:20:3c:
d5:ad:38:36:ba:a4:ff:f1:ce:27:1f:cf:40:19:f7:f5:44:e5:
70:ec:20:ca:4c:7d:6a:83:a8:92:cc:7e:2e:9a:4b:19:ed:ec:
fd:a8:56:e1:e6:63:e5:60:80:27:19:33:54:2f:e7:3a:a5:cf:
67:79:75:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:06:45 2025 by rpki-client