Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790C7C9825D011F0B0F170F1DAE4EC9C.roa
File: 790C7C9825D011F0B0F170F1DAE4EC9C.roa (raw, json)
Hash identifier: l3hLZYOHPDJojw+/re5O81ozuOmeNSdSwSDaursi8W4=
Subject key identifier: B0:31:77:B0:FE:B9:25:B1:E4:05:70:BF:F0:BB:D0:48:CD:8C:BA:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790C7C9825D011F0B0F170F1DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 14:36:17 +0000
ROA not before: Wed 30 Apr 2025 14:36:12 +0000
ROA not after: Tue 28 Apr 2026 14:36:12 +0000
asID: 984
IP address blocks: 154.80.252.0/24 maxlen: 24
154.80.253.0/24 maxlen: 24
154.80.254.0/24 maxlen: 24
154.80.255.0/24 maxlen: 24
154.93.128.0/24 maxlen: 24
154.93.129.0/24 maxlen: 24
154.93.130.0/24 maxlen: 24
154.93.148.0/24 maxlen: 24
154.93.150.0/24 maxlen: 24
154.93.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97681 (0x17d91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:36:12 2025 GMT
Not After : Apr 28 14:36:12 2026 GMT
Subject: CN=68123561-56cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:b2:12:cb:cb:5d:56:92:e4:81:50:3e:b2:
75:4f:e8:a4:a1:1a:a7:b2:b2:0e:c6:4a:ec:ac:b0:
ea:67:80:02:06:3f:06:42:fb:42:6c:45:3e:3b:1b:
e0:60:03:49:29:74:da:f5:03:54:8e:5c:2d:34:83:
9d:2d:b5:78:d7:9e:63:07:b5:36:84:92:cb:e0:37:
f4:74:96:a6:fb:3b:b8:e6:6e:c8:77:a3:d4:ec:e1:
98:26:18:c1:ae:d1:ce:70:03:9d:e6:a2:bd:20:cd:
61:e9:bf:5b:c5:0d:b2:2b:cd:c5:a7:27:b8:3a:31:
50:d4:1b:c1:a2:ee:4c:f8:4f:f1:bd:a7:7d:21:02:
da:ab:67:e3:af:b9:a8:0c:c7:16:ff:68:ab:6d:af:
d3:e7:cd:e8:42:80:b0:f7:66:72:2d:3a:84:82:a9:
cc:82:2a:4f:82:a5:2f:49:90:77:4f:5f:77:5f:49:
8c:f0:c3:47:6f:1f:2c:f1:3c:3e:fd:56:34:27:e9:
3f:70:1c:6a:29:8e:eb:02:1b:59:95:6e:ba:4b:83:
12:e4:de:a7:40:80:e1:f9:af:b4:d0:e0:a3:5d:35:
5d:6b:11:13:44:f1:ed:9e:e9:d5:39:60:e1:f5:3c:
5e:b7:ba:ae:1d:02:7b:4a:32:81:71:25:0a:af:ae:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:77:B0:FE:B9:25:B1:E4:05:70:BF:F0:BB:D0:48:CD:8C:BA:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/790C7C9825D011F0B0F170F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.252.0/22
154.93.128.0-154.93.130.255
154.93.148.0/24
154.93.150.0/24
154.93.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f9:13:54:25:7f:fd:5e:8a:7f:a3:0c:1e:28:89:91:61:c1:
4e:f9:1a:01:aa:ed:0d:c2:bf:17:ba:22:7e:61:4a:b2:f3:e7:
e4:67:ac:2f:eb:f9:c4:7a:85:f8:81:35:df:f4:04:18:82:12:
69:71:6f:63:6b:9e:6e:ae:6c:45:c1:ae:d6:86:cc:37:1a:68:
98:79:15:01:5d:70:47:9e:a9:0a:52:fd:a7:2a:95:96:d2:31:
7c:09:80:61:0f:6d:75:f5:09:3c:77:ba:98:35:d4:12:8f:65:
73:c3:28:16:4d:58:b9:c7:42:b7:8b:66:77:fd:ea:74:05:01:
89:4f:ab:7e:e7:fb:37:7d:0b:17:e1:af:ab:cf:ab:ba:ba:0e:
ff:76:bd:61:68:7c:f2:e8:c2:8d:d2:c6:06:f9:64:e0:c2:6d:
f4:ea:7e:5e:06:0f:3e:18:b4:9a:37:f0:04:5e:3d:a4:48:e3:
85:83:b8:ff:ea:37:2d:db:f8:5e:86:62:41:ca:4e:0c:1c:31:
70:04:b2:3d:e4:a9:8c:47:16:70:7e:a8:38:fd:10:07:ac:40:
b6:19:fc:bc:82:06:3b:e9:e4:7c:43:a6:33:e0:a6:56:c6:fc:
81:9e:50:9e:b0:fe:18:c0:f4:ac:2c:8b:32:fb:04:07:25:7b:
79:b4:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:08:41 2025 by rpki-client