Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E77863E2F2A11F08859AF84DAE4EC9C.roa
File: 6E77863E2F2A11F08859AF84DAE4EC9C.roa (raw, json)
Hash identifier: nyI9wzAa/A8rVPbkrtBd7qF5FI8Ld/xkIm69iXUmzS4=
Subject key identifier: E0:78:FC:1E:31:38:12:1B:04:4C:5A:88:18:88:A9:8F:0F:4E:CD:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018007
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E77863E2F2A11F08859AF84DAE4EC9C.roa
Signing time: Mon 12 May 2025 12:12:54 +0000
ROA not before: Mon 12 May 2025 12:12:49 +0000
ROA not after: Tue 20 May 2025 12:12:49 +0000
asID: 9009
IP address blocks: 154.218.217.0/24 maxlen: 24
154.218.219.0/24 maxlen: 24
154.218.224.0/24 maxlen: 24
154.218.225.0/24 maxlen: 24
154.218.227.0/24 maxlen: 24
154.218.242.0/24 maxlen: 24
154.218.244.0/24 maxlen: 24
154.218.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98311 (0x18007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 12:12:49 2025 GMT
Not After : May 20 12:12:49 2025 GMT
Subject: CN=6821e5c6-e007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:be:b2:cc:12:fb:93:75:e9:10:b3:e2:b4:
f7:f4:dc:ca:3c:2e:d1:09:40:74:b8:83:7b:00:cb:
64:85:f5:bc:e8:f2:a7:c0:83:d6:13:d7:f7:b2:76:
93:3d:2f:57:fd:09:a5:e5:9e:01:76:58:4e:29:39:
33:22:73:b7:d5:18:7a:ba:42:bd:e6:f4:1d:ec:a6:
58:16:dd:c3:0f:7c:37:82:36:a3:71:98:e7:cb:13:
09:92:01:2a:01:2e:86:dc:18:41:3f:43:cc:2e:13:
00:28:65:89:12:6f:f4:45:7e:56:b1:15:cb:ba:28:
b5:8d:a1:fb:03:d8:9d:42:81:fd:94:88:c8:ae:6e:
aa:98:4b:e7:de:dd:1e:70:b3:ca:50:c4:1d:b3:f1:
5f:dc:8f:3d:4d:c0:a6:12:a3:f7:fd:83:25:ec:f4:
19:fb:ad:f2:e3:c2:c0:82:3d:6e:20:02:ea:ef:54:
92:68:0b:58:96:66:ef:c4:1f:4f:37:1d:f3:d5:6b:
80:24:86:4b:cf:6e:7b:00:37:75:f5:e5:49:cc:a6:
a5:74:d6:cf:b8:52:9a:34:b7:18:7d:f6:0a:33:71:
6c:15:42:a0:49:19:42:a8:f5:11:65:83:b7:a7:d3:
6e:92:96:0b:1a:d5:4e:52:3b:cc:65:6b:72:fe:e1:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:78:FC:1E:31:38:12:1B:04:4C:5A:88:18:88:A9:8F:0F:4E:CD:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E77863E2F2A11F08859AF84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.217.0/24
154.218.219.0/24
154.218.224.0/23
154.218.227.0/24
154.218.242.0/24
154.218.244.0/24
154.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ce:1b:5f:e3:53:48:68:09:c2:6b:04:78:04:63:64:91:fe:
49:15:34:b0:70:db:af:e2:b1:52:97:2b:90:37:c4:37:d4:bd:
f5:39:60:f6:af:66:94:01:7d:fa:00:40:01:5e:32:b9:83:0b:
d7:ee:2b:bb:70:8c:cf:49:79:df:6b:06:0e:3b:92:44:f5:17:
d4:fb:04:4a:00:ec:ca:a8:89:e8:70:59:9b:b4:38:62:4a:d2:
e6:9d:93:fc:54:6e:52:82:8a:27:b7:5b:08:9c:69:d8:7a:61:
c8:e2:cd:f4:7e:4f:25:5d:59:57:c6:bd:cd:3f:be:ff:e4:ae:
39:26:89:60:ca:26:eb:e2:1b:d3:48:6f:21:48:49:58:8d:93:
66:b8:b9:65:22:08:26:83:83:c0:b1:67:37:3a:5d:db:a7:10:
54:18:b5:82:00:60:b1:4b:37:a1:60:19:87:e3:ab:31:91:1e:
d6:f2:1d:8f:31:aa:be:8c:61:99:00:65:76:75:62:22:5d:4c:
50:25:ae:4e:02:f3:1a:19:9b:47:08:58:d5:9f:54:0e:59:b9:
fc:e1:ad:40:93:a7:bb:76:56:82:c3:60:ea:40:83:d5:b8:9d:
b4:93:eb:3a:00:64:f1:e9:a4:e3:bc:47:29:e5:ce:7e:a0:9e:
2d:3c:17:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:11 2025 by rpki-client