Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8595C764273111F0AA89C7B1DAE4EC9C.roa
File: 8595C764273111F0AA89C7B1DAE4EC9C.roa (raw, json)
Hash identifier: y/hD1StbndITLg9ePuLmMn8h6WAB2EeZKkhz8uIH9sA=
Subject key identifier: 95:B2:4F:93:7C:80:B2:DB:1C:9E:CF:A3:88:1D:C0:A6:07:0B:03:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8595C764273111F0AA89C7B1DAE4EC9C.roa
Signing time: Fri 02 May 2025 08:43:30 +0000
ROA not before: Fri 02 May 2025 08:43:25 +0000
ROA not after: Tue 03 Jun 2025 08:43:25 +0000
asID: 203020
IP address blocks: 154.200.110.0/24 maxlen: 24
154.200.188.0/24 maxlen: 24
154.200.213.0/24 maxlen: 24
154.200.220.0/24 maxlen: 24
154.200.245.0/24 maxlen: 24
154.223.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97870 (0x17e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 08:43:25 2025 GMT
Not After : Jun 3 08:43:25 2025 GMT
Subject: CN=681485b2-03c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:6e:62:d6:e6:15:62:60:81:e5:ee:ff:8f:
fc:b0:6c:6b:d9:f3:13:cc:ee:48:ba:4a:a7:1e:53:
6b:c8:58:08:86:63:0f:dd:5c:5e:cf:88:0d:17:7e:
20:83:5a:5f:71:6e:03:d3:e5:de:8f:f5:17:c2:e7:
af:b8:17:62:b5:d6:a7:a7:9b:5e:90:39:92:d6:0a:
22:e6:6f:3c:f3:d3:66:75:4f:6a:49:a1:b8:ed:10:
75:32:27:58:02:f8:d7:2b:ca:bb:be:e3:6a:9b:c7:
7d:62:41:af:f9:01:b9:53:02:6a:5a:bb:e0:53:59:
c9:84:a8:f3:37:76:40:53:c0:47:d5:86:d2:fc:d7:
6e:5c:f6:7b:b2:a1:d2:4a:94:76:db:12:db:e6:ac:
ff:fd:07:c2:13:96:cd:83:a7:83:5c:5a:e2:f9:4a:
99:3f:ac:0b:8b:8c:8f:95:4c:68:62:2e:5d:a1:df:
77:81:2e:05:fe:1d:20:1a:61:3e:85:7e:1e:a9:b6:
89:8a:6d:56:37:bc:15:57:4b:74:89:98:c2:7f:5f:
c9:ff:cb:26:70:d9:1a:e7:0d:5c:8f:6f:b3:7c:8a:
58:71:6b:cc:da:3f:17:91:44:f2:33:fc:c5:28:72:
e6:03:bc:80:8c:51:6c:ee:f7:ce:66:67:2a:b5:96:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:4F:93:7C:80:B2:DB:1C:9E:CF:A3:88:1D:C0:A6:07:0B:03:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8595C764273111F0AA89C7B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
154.200.188.0/24
154.200.213.0/24
154.200.220.0/24
154.200.245.0/24
154.223.144.0/20
Signature Algorithm: sha256WithRSAEncryption
d1:44:b8:57:05:51:2a:3b:2d:cc:16:2e:47:37:0b:9f:bd:88:
4c:92:0c:7c:13:b3:3f:db:68:99:66:a9:48:fc:3f:2e:b7:c8:
16:8a:da:28:46:fd:2e:62:8d:9e:c7:9a:c6:21:f4:41:db:2b:
36:e4:59:e5:0d:51:a3:1f:b3:68:29:6f:49:90:1c:f3:57:84:
6e:d2:5b:14:bd:87:0e:36:ab:0d:58:a4:6e:02:5d:06:ca:53:
13:ec:4d:24:d1:fb:1d:9d:1d:77:20:e7:9f:1b:7d:65:34:46:
76:c4:08:93:13:e0:f5:23:6e:54:b8:7d:58:93:cd:e5:09:8b:
0e:af:27:9c:e4:dd:e0:f2:52:e2:b0:15:64:f3:bf:03:5d:94:
ee:c3:b0:b7:f2:73:6e:04:51:0b:12:fb:90:3d:bd:71:2f:11:
27:7d:fb:23:c1:f0:e5:a7:90:a4:48:26:25:83:5f:70:86:6c:
f2:a0:e8:b9:2c:37:9c:e2:37:4b:a9:68:4f:40:cf:c6:2b:00:
71:b5:bb:3e:52:a1:b8:c4:4e:5e:bf:10:61:9c:a6:10:eb:2f:
6d:07:59:4b:02:9c:63:ca:2d:61:98:da:8c:87:a0:b0:55:f7:
c5:39:ee:3c:63:0a:0b:25:44:18:60:89:c4:fa:2b:a0:5d:6a:
51:38:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:04:42 2025 by rpki-client