Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C9F71E02CE011F0B9099AB1DAE4EC9C.roa
File: 3C9F71E02CE011F0B9099AB1DAE4EC9C.roa (raw, json)
Hash identifier: LsbcP1Kg5WnDonMvRI6SG7g8jaQSYouE6dLmdGuEfX4=
Subject key identifier: F3:84:E3:E2:C5:B5:FB:13:FC:22:A6:35:7E:1A:2E:CD:D7:7F:10:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C9F71E02CE011F0B9099AB1DAE4EC9C.roa
Signing time: Fri 09 May 2025 14:16:46 +0000
ROA not before: Fri 09 May 2025 14:16:40 +0000
ROA not after: Mon 16 Jun 2025 14:16:40 +0000
asID: 395793
IP address blocks: 154.83.8.0/24 maxlen: 24
154.83.9.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.11.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.91.152.0/24 maxlen: 24
154.91.153.0/24 maxlen: 24
154.91.154.0/24 maxlen: 24
154.91.155.0/24 maxlen: 24
154.91.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98238 (0x17fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 14:16:40 2025 GMT
Not After : Jun 16 14:16:40 2025 GMT
Subject: CN=681e0e4e-0b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:d2:c2:86:08:e6:ed:3a:90:55:58:7b:e5:
c4:b8:eb:d0:23:6a:88:a0:7e:74:05:64:1c:cb:25:
d5:45:dc:2e:4a:84:21:71:f2:1d:88:d5:3a:da:6f:
0c:f0:4d:0f:22:dd:8e:a1:5f:46:5d:79:f7:70:d9:
56:d6:52:10:07:95:32:e4:a0:3a:a7:7d:3b:f1:9f:
a1:70:ae:db:a3:0c:9d:1d:8a:a6:b8:b3:07:14:2b:
8d:a1:3f:40:7c:7c:fe:16:ad:21:c3:b1:6c:0c:39:
66:42:15:db:af:d5:6a:df:2e:47:36:cc:5b:b1:14:
6d:47:ab:c0:29:ad:0f:94:b0:2b:7a:b3:37:e2:b3:
2c:b1:52:2d:37:49:fa:45:11:96:59:c0:2c:ed:ab:
4c:39:54:7e:66:62:63:3b:24:0c:62:63:57:eb:a6:
40:aa:44:69:09:53:cd:88:8c:ca:61:69:ac:9c:3a:
0b:6a:bb:20:9a:f1:87:c9:c3:6c:7c:74:ed:99:b0:
54:85:81:b7:ae:fd:73:bf:52:ff:d4:ed:95:cf:ff:
46:bd:43:ec:2a:89:6a:b7:c8:f2:fd:a6:94:98:2b:
7e:ba:aa:6a:71:b0:2f:47:6d:23:b9:4c:92:7d:85:
76:0e:a2:03:08:2d:d3:4d:7b:fc:53:94:9f:04:2d:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:E3:E2:C5:B5:FB:13:FC:22:A6:35:7E:1A:2E:CD:D7:7F:10:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C9F71E02CE011F0B9099AB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.8.0/22
154.83.24.0/24
154.91.152.0-154.91.156.255
Signature Algorithm: sha256WithRSAEncryption
d6:ec:11:79:41:94:9a:0c:f5:95:26:f4:78:de:c7:1b:98:db:
69:5b:27:d9:1f:0b:e1:db:de:52:18:54:dd:10:51:44:e7:80:
f6:4b:b7:3f:2b:4f:ad:11:64:27:7e:eb:a3:21:ad:5d:0e:84:
1f:4b:75:da:20:c0:0c:98:ee:83:6c:b8:e3:98:ea:c5:6f:71:
d5:17:46:58:d1:c2:b7:7d:29:8f:91:db:dd:1b:76:18:c8:9d:
95:9e:75:c8:1a:5f:7c:2d:bf:45:ca:cb:a2:ef:6e:e1:37:4a:
21:d4:69:b2:42:b5:c2:d6:42:05:3a:05:6e:71:7a:78:7c:a3:
8e:52:80:5a:8d:44:e0:29:00:14:ac:cb:25:66:dc:37:2f:ea:
78:dc:48:ef:2a:79:f9:bb:d3:90:6b:45:d1:f7:22:ee:bb:0c:
46:92:d9:1c:9a:ee:0e:8f:d0:47:ed:cf:e8:81:f0:37:e2:a8:
9b:ad:b9:27:6b:2f:ec:4a:90:f4:1a:a1:96:da:c1:a4:0c:f0:
20:5a:05:f3:47:86:6d:bf:b2:6e:9c:2c:4e:e0:88:59:2f:4c:
83:7f:1d:a8:e3:5f:bd:38:f7:4a:a4:38:8a:c8:a3:36:ae:98:
ac:63:24:30:d0:f6:3f:5a:9c:ca:65:93:d6:69:c7:0b:02:43:
fb:64:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:43:52 2025 by rpki-client