Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E30CBC242A11F0B173EDE4DAE4EC9C.roa
File: 59E30CBC242A11F0B173EDE4DAE4EC9C.roa (raw, json)
Hash identifier: VDnqoNyzcspYa0D5RPDlA+7suuw78Xig2Oy1n0eTr18=
Subject key identifier: 87:35:83:D0:8D:10:12:D0:7C:BB:61:19:1E:0F:F1:46:A0:F8:90:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E30CBC242A11F0B173EDE4DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:14:37 +0000
ROA not before: Mon 28 Apr 2025 12:14:32 +0000
ROA not after: Sun 08 Jun 2025 12:14:32 +0000
asID: 44559
IP address blocks: 154.209.143.0/24 maxlen: 24
154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.206.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97182 (0x17b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:14:32 2025 GMT
Not After : Jun 8 12:14:32 2025 GMT
Subject: CN=680f712d-516c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:84:26:67:37:c0:58:81:64:b3:50:af:23:
d0:38:38:49:6d:ff:cf:3a:e0:69:33:a8:ba:e2:2f:
4b:f0:ab:b0:9b:80:f9:9c:47:c2:76:f0:5a:c5:71:
df:cd:60:22:0c:1b:9b:25:18:ba:76:07:08:a3:d8:
1d:81:b1:16:04:97:2c:39:3a:40:90:a1:51:b6:7b:
fa:9b:b3:9e:a7:c2:74:1e:dc:d9:ab:fc:ca:a2:30:
ac:56:f1:81:b6:1f:cd:28:4e:50:ae:f5:b0:93:09:
e0:dd:b1:66:75:8d:07:65:ef:60:06:bb:f9:18:4f:
5d:91:44:7e:20:cb:73:43:7a:62:70:bc:45:7f:28:
b4:fa:1e:a2:3e:eb:c6:9b:74:3a:e8:0b:fb:c1:8e:
c2:8b:0b:d2:35:d7:b7:54:d6:62:a6:6a:7c:f8:65:
2c:4b:ad:71:64:0d:7d:0f:a6:c1:cf:f7:89:82:9d:
44:8d:af:40:5a:a7:7d:84:fe:05:29:12:1a:8f:db:
46:bc:2d:d6:c6:b4:36:fa:38:e4:18:6e:e2:e8:af:
bd:22:71:12:3f:28:cd:eb:64:62:d2:3c:98:72:a7:
9f:db:50:08:fa:39:eb:e3:da:c2:bf:07:e9:79:7b:
cc:e8:42:55:d3:ec:96:b8:9c:68:25:8c:ac:f3:e6:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:83:D0:8D:10:12:D0:7C:BB:61:19:1E:0F:F1:46:A0:F8:90:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E30CBC242A11F0B173EDE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.143.0-154.209.145.255
154.209.206.0/24
154.219.76.0-154.219.81.255
Signature Algorithm: sha256WithRSAEncryption
15:92:6b:05:ca:22:05:8d:7e:5e:4c:6f:31:08:c9:4b:f2:75:
ac:1b:17:fd:4c:d9:db:fb:1b:b2:71:cc:6b:40:66:6c:cc:cd:
04:0a:87:ef:70:d4:2f:12:04:02:2a:70:5b:00:57:85:c8:35:
1e:34:5f:fa:2c:ef:00:76:77:c4:d9:de:8e:6f:f7:c9:6c:0b:
6f:c1:6d:c6:0b:79:a9:88:e7:02:3a:a9:7a:f9:4e:25:cc:94:
18:0e:59:4b:62:c6:96:a3:28:3c:71:fc:19:2b:03:49:b2:59:
da:74:ed:cc:f4:67:a3:f4:c7:8b:cb:a3:fa:e7:29:e5:8e:c1:
fc:ad:1d:99:90:80:d8:21:da:69:54:78:64:09:c1:6d:fc:71:
b0:a6:b0:a9:d5:05:d0:29:06:5f:20:e4:a3:e5:f8:8d:a0:4a:
8f:9b:4a:b5:4a:d9:59:d5:ea:2a:e8:b8:4b:d4:e1:ae:16:37:
50:fb:b7:ad:ee:33:f0:23:e4:a9:0d:57:df:7e:03:9d:47:99:
c9:99:5d:a8:68:71:62:57:38:67:1a:8a:a3:25:17:7a:84:5e:
bb:af:e5:12:91:44:b4:52:de:9e:6a:d7:d7:ca:55:c0:39:b4:
a8:33:b7:bc:23:ad:19:e5:22:94:49:f8:3a:e3:7b:01:98:75:
ab:f5:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:41:42 2025 by rpki-client