Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AE05E9E248311F0AD09C9B3DAE4EC9C.roa
File: 6AE05E9E248311F0AD09C9B3DAE4EC9C.roa (raw, json)
Hash identifier: U7+nITf7KbHwG/QcArMS6Du/k8ktRn8n1+3/93Vj9SU=
Subject key identifier: 86:FF:41:C9:E1:AF:4E:B6:04:28:3F:0E:1E:0D:9A:A7:7C:CB:FC:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AE05E9E248311F0AD09C9B3DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 22:52:10 +0000
ROA not before: Mon 28 Apr 2025 22:52:05 +0000
ROA not after: Sun 15 Jun 2025 22:52:05 +0000
asID: 63139
IP address blocks: 154.203.171.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
154.203.182.0/24 maxlen: 24
154.203.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97425 (0x17c91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 22:52:05 2025 GMT
Not After : Jun 15 22:52:05 2025 GMT
Subject: CN=6810069a-08f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:4b:e3:01:8d:3e:a5:73:27:3f:c9:81:fd:
09:8a:58:3e:59:0c:bc:89:ff:a7:9b:85:8b:35:e0:
6e:08:8d:48:a2:db:b5:1d:32:67:05:08:51:e5:a5:
af:e7:0e:93:07:cf:16:f2:49:80:54:40:66:29:0c:
af:39:5c:4e:84:b9:94:3d:e1:2e:56:17:4c:e6:23:
c2:44:16:e8:ca:5a:d7:50:e7:04:d4:7b:81:d0:fc:
1d:05:66:f3:6a:bf:6c:f8:8c:57:99:0b:9a:2f:a5:
eb:ff:58:ac:cc:56:e0:4c:23:d7:ad:0f:4b:2e:8a:
98:68:ba:24:19:25:2a:a3:3a:d5:65:0a:de:1a:b6:
7b:3e:a3:69:05:0c:ca:12:d7:95:e8:19:38:f6:50:
f9:40:66:cb:42:3b:52:b5:b5:d2:e4:93:bb:02:78:
d3:62:a5:48:c9:b0:d6:b2:82:73:a4:87:12:13:e3:
e4:40:64:9c:75:04:6a:c6:e2:68:26:4c:b1:76:fa:
56:71:ce:ae:a3:90:65:e1:06:17:10:2a:6e:4a:88:
d0:b0:93:d4:72:31:49:a5:88:e6:ed:48:97:a5:42:
42:17:e7:d1:80:87:56:ce:0d:69:70:fe:8f:87:8a:
6c:55:01:8b:8a:2b:e5:98:53:7e:61:56:66:07:79:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:41:C9:E1:AF:4E:B6:04:28:3F:0E:1E:0D:9A:A7:7C:CB:FC:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AE05E9E248311F0AD09C9B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.171.0/24
154.203.173.0-154.203.177.255
154.203.180.0/22
Signature Algorithm: sha256WithRSAEncryption
43:fa:cc:cf:dd:91:60:18:11:3f:3c:2a:e0:a9:d5:41:c9:55:
a5:e3:97:da:23:ed:49:c6:a2:6c:cd:43:ce:15:45:59:f6:be:
63:64:bf:27:22:c3:77:bd:00:a9:7a:02:c5:21:75:21:5a:fa:
e6:29:37:76:3a:98:d1:d3:26:66:17:01:49:c8:81:98:83:40:
7a:e8:d6:20:4d:fd:40:4a:a9:47:02:a8:c4:0e:e9:e7:4f:03:
a2:b0:88:df:c6:30:7b:db:9c:c4:85:48:7b:58:65:c9:a8:1b:
b3:13:ed:b9:c7:ee:bd:41:29:1a:3a:e9:c0:f8:1f:fa:a8:c9:
fe:df:db:6e:fd:67:7f:6b:13:3c:64:0f:a3:41:ec:58:5a:e5:
8d:b8:97:56:c4:dd:41:01:4e:ad:7e:e1:c7:3f:8e:09:63:21:
f8:9c:d9:f3:6e:e9:40:45:a9:dd:3e:06:25:cf:20:4e:31:fd:
55:e2:b6:91:71:f8:df:aa:a1:2c:2c:0e:cb:16:5d:a6:93:78:
69:38:b7:69:c9:4b:d1:e9:4e:0b:cf:3b:73:de:c2:e3:c5:f1:
dd:bd:64:f1:f0:2c:5b:1d:4c:c7:bd:27:76:6a:1e:a8:85:f6:
49:1b:b7:ac:4b:ef:f6:4f:d8:af:e8:d5:d1:fa:16:48:dd:a2:
22:4e:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:06:00 2025 by rpki-client