Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7065EDFA316911F091FC9B90DAE4EC9C.roa
File: 7065EDFA316911F091FC9B90DAE4EC9C.roa (raw, json)
Hash identifier: eKotZySOpEJyT9pFncRd0s5I9w71WgB4d8XDkrtmhwg=
Subject key identifier: EF:EA:7F:06:C8:7E:AA:DB:2A:17:12:BC:20:9C:70:AA:42:86:A3:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7065EDFA316911F091FC9B90DAE4EC9C.roa
Signing time: Thu 15 May 2025 08:48:58 +0000
ROA not before: Thu 15 May 2025 08:48:53 +0000
ROA not after: Tue 24 Jun 2025 08:48:53 +0000
asID: 8796
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98488 (0x180b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 08:48:53 2025 GMT
Not After : Jun 24 08:48:53 2025 GMT
Subject: CN=6825aa7a-47ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:d6:20:57:3a:71:db:e0:0a:de:fc:15:29:
ed:e3:e1:e0:43:16:b4:26:94:b3:42:22:27:61:9e:
98:fd:e9:89:dd:be:27:78:86:d4:78:c5:75:1a:f8:
9c:87:b1:16:e9:89:f7:08:a1:f1:57:a8:88:f9:cd:
83:06:ea:d1:2c:3a:d2:54:f1:41:48:5a:ae:89:f8:
69:1a:4f:c3:16:8a:cc:30:da:6b:b3:55:3e:d0:c0:
aa:8e:4d:8c:ce:70:a0:e2:f4:25:3c:c8:5b:12:c8:
31:a4:e7:3e:91:13:08:83:95:e1:dc:a4:84:ea:e6:
f7:ce:69:ef:16:0f:90:3d:fa:4e:8e:ea:cf:4f:b0:
11:90:7b:37:ef:05:44:47:92:01:89:1a:ff:ed:40:
be:23:75:cf:66:73:a7:b2:3a:9f:b7:75:37:4b:7b:
ef:8d:09:35:a3:c7:76:bf:02:05:dc:a9:42:5c:f6:
fd:af:76:9c:2b:8c:f1:1d:5d:ca:c9:ff:ab:5c:8f:
1c:d7:bc:a8:a5:5f:ea:37:68:0b:30:77:a5:90:4d:
b2:ae:36:59:28:fe:f3:b4:31:6e:c8:4a:25:b9:b4:
aa:5d:da:fa:8a:c6:77:4f:d4:6c:c8:f8:ee:95:ee:
61:0d:8d:4b:b3:c3:9a:d0:93:c1:a7:29:df:34:c3:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EA:7F:06:C8:7E:AA:DB:2A:17:12:BC:20:9C:70:AA:42:86:A3:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7065EDFA316911F091FC9B90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
b0:60:b5:9c:4f:7b:28:2a:a8:c6:57:75:99:24:c9:c5:a9:18:
43:04:2c:63:7b:39:97:3d:d4:5b:bb:f6:f5:09:f9:0c:a1:b5:
07:1f:32:c5:e2:c1:41:3a:14:6c:43:54:51:84:b1:60:38:7c:
34:f3:37:ea:2c:74:67:3c:32:4c:99:14:5c:67:fa:b3:cc:9d:
96:38:f2:33:e2:6a:29:ec:6e:ac:9e:1a:76:18:3a:8b:07:c3:
4f:f8:55:77:b6:e0:05:9a:04:67:fe:b3:1f:19:4e:97:0b:b6:
e1:61:c2:9c:ab:a1:a1:8b:31:7e:2c:ec:21:4d:53:30:a5:af:
4e:29:6c:57:dd:6d:ab:09:6a:2c:99:71:3c:e9:81:b1:c2:23:
73:00:63:90:86:41:ca:40:9d:be:9c:86:6f:76:03:5a:d0:2c:
03:97:39:45:80:1f:be:4b:32:a2:79:00:87:1d:db:9d:4f:93:
50:e8:1a:a1:1c:7a:4b:b3:9a:1e:9f:81:3e:c9:60:b1:f6:15:
67:6b:c9:e5:24:e7:a7:fc:05:2b:66:79:50:b8:3e:f2:da:7a:
c9:b9:b2:3a:a8:13:ca:3c:fc:1e:29:bc:e1:c1:fb:83:13:c7:
e5:41:3e:56:9a:5d:1b:79:7d:a4:40:8f:8b:fa:33:1d:cd:54:
fc:c5:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:55:51 2025 by rpki-client