Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8236CAAE25CF11F0A1E485EADAE4EC9C.roa
File: 8236CAAE25CF11F0A1E485EADAE4EC9C.roa (raw, json)
Hash identifier: PZEkzRoaAv81nNfxi3xHS2jd8UEuEK/YOyceOR5mjYY=
Subject key identifier: B4:9A:BB:1A:A1:D6:3F:B6:10:E7:C3:D9:53:4A:37:77:D9:B3:FB:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8236CAAE25CF11F0A1E485EADAE4EC9C.roa
Signing time: Wed 30 Apr 2025 14:29:23 +0000
ROA not before: Wed 30 Apr 2025 14:29:18 +0000
ROA not after: Tue 28 Apr 2026 14:29:18 +0000
asID: 984
IP address blocks: 154.80.242.0/24 maxlen: 24
154.80.243.0/24 maxlen: 24
154.80.244.0/24 maxlen: 24
154.80.245.0/24 maxlen: 24
154.80.246.0/24 maxlen: 24
154.80.247.0/24 maxlen: 24
154.80.248.0/24 maxlen: 24
154.80.249.0/24 maxlen: 24
154.80.250.0/24 maxlen: 24
154.80.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97679 (0x17d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:29:18 2025 GMT
Not After : Apr 28 14:29:18 2026 GMT
Subject: CN=681233c2-594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:a1:5e:25:74:23:69:64:79:d5:f5:ee:b9:
b4:da:00:12:51:f8:10:c8:5b:95:c3:68:61:33:16:
6c:6f:e4:18:46:d5:ed:f8:a4:24:90:cd:d8:f7:d5:
be:07:e8:58:c8:61:9a:8d:6b:dc:26:3c:a8:bc:94:
b9:13:1b:e5:63:50:b1:d9:c5:34:7f:cd:40:32:0c:
2b:15:7d:16:7e:62:79:21:a8:c6:a4:96:41:29:fd:
9c:f8:34:4a:cf:b6:c1:af:70:7b:92:37:6e:8e:32:
f4:6a:7d:38:ff:6c:dd:ec:82:8b:59:c9:2d:80:01:
3d:06:62:64:41:12:89:e5:cd:2f:a5:f5:ad:2f:2f:
8d:bc:b2:5b:05:be:de:3b:91:f5:e6:cf:55:e2:0c:
df:d2:c5:78:ea:58:3e:34:2b:36:98:e2:d7:62:e5:
ea:f8:36:4a:7f:8d:4d:31:b4:dc:4c:db:82:6a:87:
5e:49:ff:bb:0c:4e:5c:29:e1:7a:30:ba:83:c6:bf:
2f:5e:31:fb:c4:ff:a9:85:c4:26:5c:48:49:1d:8b:
b7:fe:fb:77:46:b2:6d:48:f0:9f:d4:65:96:e4:5a:
3e:0c:8f:c5:f3:ec:16:c6:cb:45:7e:11:ea:bc:8f:
af:f3:a1:ea:4e:28:e4:5b:eb:79:3b:3a:38:71:4e:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9A:BB:1A:A1:D6:3F:B6:10:E7:C3:D9:53:4A:37:77:D9:B3:FB:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8236CAAE25CF11F0A1E485EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.242.0-154.80.251.255
Signature Algorithm: sha256WithRSAEncryption
6f:82:40:a0:86:61:d7:c0:e4:9d:b9:aa:c8:66:91:79:7d:52:
21:a0:21:bd:7a:b9:38:be:0a:1f:f7:f2:d4:5d:85:cc:1b:5f:
95:c3:61:f6:4d:29:e5:20:92:0c:c3:5b:1c:b5:4b:1d:67:61:
03:1a:4f:63:87:bc:5b:9c:fc:94:ce:10:ca:62:c9:13:16:d6:
83:95:58:03:0a:95:dd:43:a3:58:50:47:ae:42:fd:d4:5b:ff:
37:b3:59:5b:b5:a7:8e:ec:f4:74:28:e2:ed:1e:d4:3d:d3:4b:
66:36:c9:88:bb:d6:63:ba:d9:f4:1f:a6:d6:f8:3f:0b:b1:63:
e8:a7:19:1a:c8:01:be:49:c5:bc:f7:78:d9:5b:ee:52:66:d8:
7c:14:e5:c9:cc:7b:8b:0a:ac:f3:2b:3c:16:99:c4:7e:aa:41:
b5:0d:66:7b:f9:41:95:f8:7e:19:0e:ce:d4:8f:3c:25:14:52:
b1:a0:20:db:02:d7:4b:cc:e5:e1:37:86:42:3e:bb:57:15:b9:
bf:a2:ec:4c:bf:16:98:60:f6:4e:58:91:72:df:73:8c:1a:90:
e6:dd:37:ad:04:e9:e6:2f:20:d1:4e:12:d7:c4:4d:4e:6f:f6:
3a:04:65:7a:72:c4:5e:34:f3:b9:cd:bc:cb:c1:ce:0e:6c:76:
8e:3c:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:54:26 2025 by rpki-client