Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E4989FC259711F083DFEB7BDAE4EC9C.roa
File: 5E4989FC259711F083DFEB7BDAE4EC9C.roa (raw, json)
Hash identifier: 3oVQV0KWLThdgIy/+g/u5C3r/vy9gN51AQ/mPj35iQU=
Subject key identifier: D9:71:0A:30:5F:80:78:E5:BF:6D:25:F0:DA:5B:72:FF:39:73:B4:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E4989FC259711F083DFEB7BDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:47:30 +0000
ROA not before: Wed 30 Apr 2025 07:47:26 +0000
ROA not after: Fri 09 May 2025 07:47:26 +0000
asID: 9009
IP address blocks: 154.216.204.0/24 maxlen: 24
154.216.213.0/24 maxlen: 24
154.216.215.0/24 maxlen: 24
154.216.222.0/24 maxlen: 24
154.216.229.0/24 maxlen: 24
154.216.232.0/24 maxlen: 24
154.216.237.0/24 maxlen: 24
154.216.240.0/24 maxlen: 24
154.216.243.0/24 maxlen: 24
154.216.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 10:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97564 (0x17d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 07:47:26 2025 GMT
Not After : May 9 07:47:26 2025 GMT
Subject: CN=6811d592-fba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:c0:f7:7b:ea:82:90:6e:c7:3e:e8:ef:4e:
ac:dd:59:9b:f5:88:2a:7d:80:ee:f4:d4:4a:d5:ad:
85:e9:61:ff:2c:8d:6d:52:f9:69:66:7b:94:ff:51:
42:5e:6c:38:29:b2:94:f1:32:c4:d1:dd:28:05:8b:
67:42:6a:f1:7a:6f:f8:99:e5:91:81:2d:0a:1e:a7:
f8:44:03:c7:0e:25:56:c8:fd:a7:82:1f:47:49:26:
28:af:8c:6f:9c:71:d2:c5:e9:67:10:ec:4a:66:11:
9a:41:15:95:9b:55:76:6d:99:52:8e:23:07:4e:f4:
78:8e:43:4d:60:8e:46:76:a4:13:dd:fb:32:0b:54:
24:d1:fa:ad:be:ca:b1:3b:f6:7a:4f:12:b1:d5:98:
5d:17:13:7f:4f:0b:28:a7:20:cb:5e:58:73:b1:5f:
76:5e:1d:65:16:f4:2d:05:8e:43:0e:09:d0:3c:6c:
09:6a:1b:37:97:bb:cd:c1:e4:2e:7a:bf:79:d1:02:
7f:0b:12:8c:81:14:69:81:89:56:04:c4:fe:13:c2:
12:b4:91:dc:10:d0:ee:4d:3e:94:3f:4a:80:ec:58:
02:05:5a:3b:c1:a3:c0:38:8c:17:93:9d:12:60:c0:
c4:21:16:f0:2b:20:b6:8c:bf:24:60:2b:74:33:d8:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:0A:30:5F:80:78:E5:BF:6D:25:F0:DA:5B:72:FF:39:73:B4:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E4989FC259711F083DFEB7BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.204.0/24
154.216.213.0/24
154.216.215.0/24
154.216.222.0/24
154.216.229.0/24
154.216.232.0/24
154.216.237.0/24
154.216.240.0/24
154.216.243.0/24
154.216.246.0/24
Signature Algorithm: sha256WithRSAEncryption
96:97:d5:70:33:d7:b6:a8:8b:c2:d6:5a:04:ff:76:72:99:d5:
e1:3f:19:89:87:2b:73:db:d0:3a:94:4e:a2:f2:e4:6b:66:89:
51:0f:78:89:b6:de:63:7a:99:11:47:cd:a7:62:f7:33:46:a4:
6b:2b:64:2a:2b:b1:51:de:4a:09:34:5b:9c:fd:a7:dc:4c:8d:
45:05:fe:2b:37:d7:90:80:29:cc:f6:77:be:95:25:61:e5:0c:
16:9e:e3:f4:40:42:45:bd:71:97:d9:c0:ac:1a:cd:80:99:63:
8e:1a:08:59:2a:dc:40:89:97:7d:7e:55:bd:cb:25:aa:00:a4:
e6:5b:d0:25:2f:ee:50:4b:b4:f0:08:e7:0f:f7:d6:37:b9:ab:
83:b3:6c:e0:55:9f:ba:1b:6f:87:99:24:41:ac:dd:f5:f8:04:
7e:25:b5:7e:ce:cb:1c:90:5f:33:d0:0c:9e:8b:61:3e:ff:e7:
f0:6f:f9:70:2b:6b:06:fa:4f:73:54:de:f9:ae:75:c6:cf:be:
3c:d0:e6:31:57:82:3c:73:3c:a9:a8:1d:7c:52:fa:f9:22:a5:
b3:93:20:df:e7:78:be:bd:0b:77:af:a7:a7:36:6b:48:66:dd:
91:ce:aa:af:66:fa:7b:1b:7a:a8:af:21:0d:8e:b1:0e:99:e7:
8b:4d:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:22:41 2025 by rpki-client