Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773D0BAA25BA11F0A5F2A7E0DAE4EC9C.roa
File: 773D0BAA25BA11F0A5F2A7E0DAE4EC9C.roa (raw, json)
Hash identifier: 4Jq3J5M/mSagWeJtaH5L7ptux9iTwD1dw6ezYlWul6w=
Subject key identifier: 71:72:7A:96:B5:51:39:92:19:EB:8E:A2:F7:21:2D:18:14:68:92:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773D0BAA25BA11F0A5F2A7E0DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 11:58:45 +0000
ROA not before: Wed 30 Apr 2025 11:58:38 +0000
ROA not after: Wed 26 Apr 2028 11:58:38 +0000
asID: 17561
IP address blocks: 154.205.54.0/24 maxlen: 24
154.205.55.0/24 maxlen: 24
154.205.56.0/24 maxlen: 24
154.205.57.0/24 maxlen: 24
154.205.58.0/24 maxlen: 24
154.205.59.0/24 maxlen: 24
154.205.60.0/24 maxlen: 24
154.205.61.0/24 maxlen: 24
154.205.62.0/24 maxlen: 24
154.205.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97628 (0x17d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:58:38 2025 GMT
Not After : Apr 26 11:58:38 2028 GMT
Subject: CN=68121075-e074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:7f:aa:d7:dd:0a:dc:91:87:d1:f9:2f:11:
44:93:7d:37:9b:ce:4d:30:f6:4b:19:e1:d9:78:0b:
5d:35:ae:d3:1e:8b:ac:e1:5e:59:f6:85:05:76:2e:
ac:6b:44:f1:1e:92:ba:06:17:e4:52:81:82:9c:a5:
ef:05:a0:2b:44:14:d7:56:2f:2d:98:15:cb:08:67:
b9:f8:c4:b2:c4:aa:d9:01:53:7a:6e:c5:76:19:2c:
b0:d4:c8:c0:84:9c:48:f7:96:1e:30:ad:c9:e1:80:
9b:f1:f2:63:22:d6:28:b7:a4:43:20:88:85:b1:b6:
d8:26:e7:9b:b7:3f:a0:c8:cd:10:00:76:39:c4:31:
4c:53:25:e4:ae:9c:8b:2c:6e:51:8e:64:97:5f:fd:
da:0f:12:76:69:a6:af:c0:26:12:c3:06:0e:37:d3:
da:32:df:ee:cf:88:a4:17:2e:04:e9:c2:3b:6a:9f:
d6:3a:ab:87:67:c9:6a:27:7e:14:49:da:03:42:5e:
db:7a:d8:b3:90:9f:94:ef:c6:54:be:f0:e9:81:6f:
67:13:e0:0f:85:d6:54:2c:5d:ed:bb:d0:8e:be:ca:
a5:73:ca:25:ca:0c:d0:92:db:a1:9f:23:33:8e:54:
fa:8e:13:b8:af:47:87:00:4a:3f:ad:84:b8:e6:4b:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:7A:96:B5:51:39:92:19:EB:8E:A2:F7:21:2D:18:14:68:92:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773D0BAA25BA11F0A5F2A7E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.54.0-154.205.63.255
Signature Algorithm: sha256WithRSAEncryption
b3:ce:85:06:dd:b3:67:37:2a:c0:d3:81:f4:b3:27:67:36:40:
2f:e0:3f:3f:1f:e3:d1:d7:7d:61:36:8c:e4:a3:03:eb:64:5e:
79:0e:b2:f9:29:6a:6b:ec:4f:ea:4d:f2:a5:76:bd:d6:06:c0:
6a:e2:f7:ae:3d:43:66:22:ba:78:70:4d:8d:91:62:fa:bf:b8:
31:77:cf:b8:13:74:80:bb:67:8e:ff:9d:5b:fb:60:6b:78:af:
91:5e:c4:02:07:d9:e8:a4:9d:4c:cc:d8:21:9a:02:60:49:1d:
b7:98:38:52:1e:62:46:20:3e:70:44:d7:dc:dc:1e:a8:5f:88:
cd:e8:c4:90:c4:a6:3c:fa:51:55:72:56:7a:6b:d4:58:b7:94:
b8:93:38:f2:39:a2:0b:2f:1b:26:74:74:80:4f:5c:72:1c:90:
85:f9:a2:aa:a3:3c:9e:dc:6c:61:06:e1:2c:23:82:bc:f2:23:
5f:8e:6f:56:f9:9b:5d:c7:4f:28:90:fa:7d:2d:ad:d0:4d:4e:
e9:96:14:84:f3:f8:2f:04:6e:52:b7:86:99:11:82:2b:ad:7c:
7c:55:98:34:47:3e:b9:7b:7a:05:1a:2a:3e:54:8b:b9:f9:1b:
d7:7e:ce:de:ca:4b:62:40:67:bf:75:ff:3f:31:a6:fa:fc:ff:
6f:88:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:38:49 2025 by rpki-client