Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/814D18EA24D111F09DAF19CEDAE4EC9C.roa
File: 814D18EA24D111F09DAF19CEDAE4EC9C.roa (raw, json)
Hash identifier: xkM6/rItEz6syuiL/qJafPv0DZJFaJ0gmXnVpSrjhBk=
Subject key identifier: 63:6F:80:74:FC:05:0B:D7:35:4A:46:E9:F3:B2:3A:77:AE:84:B5:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/814D18EA24D111F09DAF19CEDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 08:11:09 +0000
ROA not before: Tue 29 Apr 2025 08:11:04 +0000
ROA not after: Wed 04 Jun 2025 08:11:04 +0000
asID: 54600
IP address blocks: 154.202.144.0/20 maxlen: 24
154.202.192.0/19 maxlen: 24
154.202.224.0/20 maxlen: 24
154.202.240.0/20 maxlen: 24
154.207.208.0/21 maxlen: 24
154.219.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97475 (0x17cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 08:11:04 2025 GMT
Not After : Jun 4 08:11:04 2025 GMT
Subject: CN=6810899d-9bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cc:57:ca:ce:c7:ea:b5:05:c2:a6:18:4d:b1:
b2:51:7b:2b:48:12:04:e5:70:53:ba:45:14:43:d0:
a1:83:73:f6:ca:25:b0:6a:c8:dc:56:f4:29:fb:43:
e9:25:86:98:06:7e:80:5d:98:cf:a8:23:dd:08:bc:
b6:80:fb:40:90:ec:c7:3c:c7:50:1b:0b:3e:6e:ba:
91:51:0f:78:21:74:fe:fc:49:30:bd:95:fe:65:7b:
10:09:f7:8e:f9:08:c6:be:29:4f:0e:48:cc:c5:0b:
2e:59:2c:81:4f:e0:85:4e:39:0c:3e:2f:6a:9f:9d:
e6:e7:4b:54:a0:16:9d:f3:91:d5:9e:04:b4:f2:38:
c5:66:7c:cf:b9:af:c4:97:39:af:22:6d:7c:31:dd:
cf:9b:a9:62:9f:80:a8:42:23:78:ab:24:1c:e1:df:
2d:6d:f5:6c:bb:ed:e9:10:3d:b4:6a:69:df:bc:41:
34:62:83:2a:e5:43:13:07:eb:f4:a2:ad:21:31:dd:
4b:43:67:d2:ff:7e:6e:8b:8f:87:8a:6a:92:5d:d1:
0a:eb:d1:7c:0b:37:2d:1f:2a:81:fb:41:56:e3:4f:
bc:73:02:99:3c:56:20:21:f0:0f:47:ce:19:05:52:
bf:98:49:6c:10:1d:2c:3e:36:bc:38:50:79:9d:1d:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:80:74:FC:05:0B:D7:35:4A:46:E9:F3:B2:3A:77:AE:84:B5:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/814D18EA24D111F09DAF19CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.144.0/20
154.202.192.0/18
154.207.208.0/21
154.219.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:e4:39:b9:92:f3:05:a2:8d:4c:ae:6d:eb:45:a5:c2:78:61:
5b:e7:5d:c3:99:8c:43:c7:d2:0e:1a:86:41:62:79:08:d0:57:
a0:65:af:a0:46:d6:11:fb:54:a1:e8:ee:87:7d:31:53:16:8f:
8d:39:d4:94:eb:e7:7f:af:a8:c4:37:50:2a:bf:ba:fb:9c:aa:
71:69:4a:a9:c9:ee:2d:2e:16:50:12:13:91:71:e2:0d:2f:81:
70:23:7a:d3:bc:5f:7f:46:04:94:a4:dc:b3:11:86:7e:4d:aa:
39:72:5d:72:3e:85:01:7c:6a:aa:8a:15:50:fc:77:83:2d:64:
3d:46:a7:9d:16:fa:21:8f:44:a5:33:8a:68:94:10:78:93:54:
0e:5f:4a:0e:e7:11:35:3b:30:54:4f:a3:d8:e5:eb:b0:5c:1b:
a5:be:ef:85:b3:a5:74:31:69:cb:7d:aa:f3:59:79:7d:03:6f:
82:1d:2e:c8:a5:4f:95:7f:90:cc:f3:cf:1f:84:4b:96:76:27:
cb:0a:f4:a6:fe:7f:fe:b4:88:57:1f:28:a6:25:8c:16:43:c7:
03:10:26:2e:5c:d1:26:75:2e:12:aa:0f:72:6b:6f:41:fc:59:
4d:28:ed:76:ba:60:11:f3:c6:cb:20:04:66:56:ab:34:97:c2:
5d:dd:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:45:03 2025 by rpki-client