Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C2DAC0E315911F0BB87D2A5DAE4EC9C.roa
File: 3C2DAC0E315911F0BB87D2A5DAE4EC9C.roa (raw, json)
Hash identifier: 5QsaHCA36i/cJnt4TgoXVDpG3+gFUCwZtExg1j41beg=
Subject key identifier: E2:64:90:B9:FE:BE:C9:57:66:35:AD:34:B5:75:A3:50:A0:3D:3D:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C2DAC0E315911F0BB87D2A5DAE4EC9C.roa
Signing time: Thu 15 May 2025 06:52:58 +0000
ROA not before: Thu 15 May 2025 06:52:54 +0000
ROA not after: Thu 22 May 2025 06:52:54 +0000
asID: 137443
IP address blocks: 154.223.168.0/24 maxlen: 24
154.223.169.0/24 maxlen: 24
154.223.177.0/24 maxlen: 24
154.223.178.0/24 maxlen: 24
154.223.179.0/24 maxlen: 24
154.223.180.0/24 maxlen: 24
154.223.182.0/24 maxlen: 24
154.223.183.0/24 maxlen: 24
154.223.188.0/24 maxlen: 24
154.223.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98470 (0x180a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 06:52:54 2025 GMT
Not After : May 22 06:52:54 2025 GMT
Subject: CN=68258f4a-dfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:c6:44:ac:bb:c8:ac:57:50:a8:2b:97:e8:
96:f0:eb:2e:27:15:11:a2:9b:62:4d:03:4e:53:39:
29:49:64:1b:e7:d6:d8:19:27:ac:73:c2:45:6b:07:
14:e9:6b:4c:28:4d:4a:44:a2:af:82:e2:25:e2:ba:
c6:e7:b7:b9:00:7e:bd:d7:fd:7c:3d:33:61:6f:70:
18:7b:bd:3d:b1:98:7f:82:03:95:2c:d8:20:d0:90:
89:09:38:b5:43:08:47:0a:94:2e:63:34:4c:8d:55:
b3:63:1c:be:01:50:1f:78:f9:8d:22:68:72:fc:3d:
29:df:01:02:3c:15:cc:eb:34:e9:06:98:62:df:dc:
2c:5c:18:a1:f2:4a:36:8b:78:14:f7:02:87:ff:cb:
28:0f:41:13:13:51:7d:04:38:03:83:98:86:35:e6:
c9:c8:6b:0d:e7:f9:f3:96:4f:8e:ad:a4:64:4d:76:
85:b4:bb:13:0b:36:93:2f:3b:91:21:e2:f9:30:fe:
19:30:fd:a9:1c:80:b1:a6:da:17:a7:bd:b0:c7:bb:
41:e2:67:6d:44:fe:5d:68:30:84:2d:04:61:c7:1c:
de:c8:05:72:87:7f:16:f9:41:60:db:62:24:da:f8:
62:54:99:9e:0a:f0:d1:29:1d:92:88:a3:7e:d6:da:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:90:B9:FE:BE:C9:57:66:35:AD:34:B5:75:A3:50:A0:3D:3D:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C2DAC0E315911F0BB87D2A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/23
154.223.177.0-154.223.180.255
154.223.182.0/23
154.223.188.0/23
Signature Algorithm: sha256WithRSAEncryption
69:51:4e:50:95:dc:91:fa:28:71:01:4e:6e:4b:d9:16:39:8b:
74:af:43:4a:7a:74:36:a0:26:56:cf:cd:b3:17:60:87:ab:e2:
b6:c7:84:3e:6f:31:45:59:85:55:d0:f4:66:37:b4:55:b3:7c:
01:45:76:66:12:ee:6d:5c:69:b5:de:a3:07:eb:92:34:1b:8d:
43:b0:b5:1b:6e:54:64:f7:ad:d2:92:97:95:57:de:45:cb:f2:
b1:ba:af:19:41:1a:de:d9:30:cd:21:03:90:f4:40:41:19:08:
54:36:e6:f5:17:91:79:fa:4b:dc:b7:da:d4:fc:ab:8b:f2:cb:
22:79:59:48:25:da:db:bc:0d:d7:53:94:6e:ac:ed:4e:bd:30:
39:38:6c:7e:5f:b4:67:f6:8d:fe:95:c8:04:e4:4e:8e:1c:89:
c5:a7:14:75:ac:79:2c:e3:f5:01:e9:c6:d0:da:d5:a0:49:18:
35:c2:09:4d:bd:4a:cc:3a:67:8b:a4:22:31:c6:38:33:ed:1e:
34:7f:8a:c9:00:e9:77:90:7b:32:d9:f7:cf:e7:1e:e1:cb:9a:
9d:da:e4:c0:2c:98:40:d3:39:43:5e:62:f6:d7:aa:f8:c4:20:
05:6f:35:37:46:98:2c:68:1f:52:d9:25:30:5c:a5:94:fc:99:
cb:e5:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:01 2025 by rpki-client