Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2B811825BC11F08A770CEEDAE4EC9C.roa
File: 5D2B811825BC11F08A770CEEDAE4EC9C.roa (raw, json)
Hash identifier: rluAsbWZSmBeudp8ny7J4/ZOT76si7HGYdX/pkEoqj0=
Subject key identifier: B5:21:74:9F:42:A5:44:E4:50:61:E3:D5:9D:E8:7A:33:5A:33:26:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2B811825BC11F08A770CEEDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 12:12:20 +0000
ROA not before: Wed 30 Apr 2025 12:12:15 +0000
ROA not after: Wed 26 Apr 2028 12:12:15 +0000
asID: 17561
IP address blocks: 154.206.51.0/24 maxlen: 24
154.206.52.0/24 maxlen: 24
154.206.55.0/24 maxlen: 24
154.206.120.0/24 maxlen: 24
154.206.121.0/24 maxlen: 24
154.206.122.0/24 maxlen: 24
154.206.123.0/24 maxlen: 24
154.206.124.0/24 maxlen: 24
154.206.125.0/24 maxlen: 24
154.206.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97634 (0x17d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:12:15 2025 GMT
Not After : Apr 26 12:12:15 2028 GMT
Subject: CN=681213a4-e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:59:08:79:58:ec:3b:ae:08:a7:c5:c6:34:
cd:b8:50:e3:b0:d3:d3:4a:13:d0:1a:0f:71:95:50:
88:08:db:fe:68:2c:59:61:b2:43:91:2a:70:a3:74:
c1:52:34:ee:3e:69:d6:56:0e:af:5a:35:54:da:f6:
37:58:f1:59:27:47:a6:d1:0e:da:cb:93:a3:48:82:
81:29:fe:25:99:c6:29:b4:ab:e9:4f:98:90:cf:35:
df:fb:80:61:3a:30:1f:ef:f8:b5:72:10:31:36:01:
c2:a6:d9:7f:2c:b1:37:a8:eb:54:48:dc:c6:40:ea:
5a:33:42:1e:19:01:40:6c:96:53:a4:73:c9:80:39:
d3:36:e7:2e:a8:17:a2:9c:a9:86:7a:d1:4e:7e:9f:
13:83:da:b3:e1:66:c6:c8:36:9a:f7:6f:38:23:5c:
5f:61:6d:ad:16:c3:a8:ae:40:7f:03:82:af:8f:8a:
0a:11:34:48:98:c1:0d:05:70:b3:94:d8:0c:26:61:
14:95:e6:61:a9:6c:0c:e2:e4:6e:ff:2c:8f:2c:4f:
ee:43:e6:bb:15:30:39:c6:82:91:86:e6:3e:82:be:
3e:f0:f3:09:7b:1b:27:1b:4b:fe:ed:b9:c4:74:a3:
96:47:5f:f8:ea:58:c3:86:47:63:0d:db:e5:d0:73:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:74:9F:42:A5:44:E4:50:61:E3:D5:9D:E8:7A:33:5A:33:26:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2B811825BC11F08A770CEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.51.0-154.206.52.255
154.206.55.0/24
154.206.120.0-154.206.126.255
Signature Algorithm: sha256WithRSAEncryption
a5:89:e6:cf:97:35:86:31:29:13:01:3c:a3:1f:a4:ce:78:c2:
06:11:39:c2:5e:99:e8:31:ea:79:72:ed:08:3d:0a:99:c4:17:
4d:1a:31:fb:0a:d2:75:54:e3:7d:42:15:ec:c9:ff:b8:72:37:
03:c9:b2:46:81:4b:bc:0c:05:9a:3e:6e:15:80:2f:26:b6:4b:
63:64:d7:e6:ea:4d:19:a3:d4:db:c5:7a:7b:78:70:06:83:bc:
8c:14:30:82:4c:4f:5e:13:73:8b:a3:9a:52:3f:44:cc:5f:a6:
2a:0a:52:48:87:f4:b3:19:7e:c6:05:48:a7:0a:71:bf:57:d6:
71:3a:d0:19:67:51:8c:a7:cd:9f:ce:b4:4a:4a:20:8e:c0:c4:
f2:35:fb:05:03:4c:28:c0:28:48:cc:70:bc:f6:6f:8a:03:3b:
d9:12:d1:6d:7c:ba:c4:7b:ae:9c:1e:2e:88:fc:3e:93:ef:fc:
57:27:7f:9d:82:71:a5:02:fd:77:df:a4:e8:3f:31:19:b9:67:
c5:c9:19:a7:3f:a9:04:1d:67:09:93:b4:a1:7d:c0:ca:8d:a8:
2c:f9:f9:68:dc:89:00:c2:7a:fe:2e:fa:8e:9b:25:03:63:6e:
17:ed:83:0a:e2:79:a6:89:2c:ac:22:bb:79:7e:1f:ed:d8:03:
f3:38:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:45:15 2025 by rpki-client