Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8849CB722F2911F0A830117EDAE4EC9C.roa
File: 8849CB722F2911F0A830117EDAE4EC9C.roa (raw, json)
Hash identifier: FhmX1XQXB21bEw87RSrq19rJ1oe4/w6k65jqLKZmO8E=
Subject key identifier: 12:D7:14:82:2D:EC:FB:5B:51:41:85:6E:BC:38:E3:A9:F0:74:0B:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018001
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8849CB722F2911F0A830117EDAE4EC9C.roa
Signing time: Mon 12 May 2025 12:06:28 +0000
ROA not before: Mon 12 May 2025 12:06:23 +0000
ROA not after: Tue 20 May 2025 12:06:23 +0000
asID: 9009
IP address blocks: 154.218.198.0/24 maxlen: 24
154.218.199.0/24 maxlen: 24
154.218.207.0/24 maxlen: 24
154.218.211.0/24 maxlen: 24
154.218.213.0/24 maxlen: 24
154.218.226.0/24 maxlen: 24
154.218.233.0/24 maxlen: 24
154.218.238.0/24 maxlen: 24
154.218.247.0/24 maxlen: 24
154.218.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98305 (0x18001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 12:06:23 2025 GMT
Not After : May 20 12:06:23 2025 GMT
Subject: CN=6821e444-b156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:b9:43:13:cd:84:82:55:07:d0:27:78:d9:
23:c5:4b:60:e6:2a:39:78:51:86:4b:d8:e1:03:52:
67:b4:1e:d4:63:d4:46:f9:b8:7d:04:eb:0b:dc:e1:
39:da:7d:77:ba:0a:b1:37:86:4a:40:f9:7e:02:7c:
97:e8:81:e0:f0:6b:1b:53:f1:25:13:59:16:a5:f8:
65:70:36:28:8f:ad:59:cb:00:8f:a5:a5:e0:3d:d3:
ff:1d:b2:a5:40:e9:dc:af:28:27:ef:c0:cf:0f:89:
fd:4e:10:78:73:6e:aa:02:9f:ed:05:71:f9:e0:40:
b8:ba:54:b2:49:77:9d:df:ae:aa:ec:70:e6:a5:55:
5c:ff:0b:38:e4:89:ec:b9:e7:38:b0:aa:48:ab:3e:
b6:e2:62:71:64:37:6c:3e:e4:04:96:5b:76:03:59:
12:3a:0d:80:d1:da:2b:62:26:1e:dd:f9:3e:4b:f0:
7b:5a:01:07:74:f3:0c:94:55:08:79:0f:53:46:91:
40:5a:63:38:44:bc:49:30:52:b9:5c:5d:50:4b:26:
8c:41:b3:51:16:d7:8a:2b:13:6c:8c:26:34:f0:fe:
b3:03:18:3a:22:be:d3:ec:6a:47:58:ea:cb:7e:16:
05:81:16:9b:68:ca:2e:60:78:c6:f4:b7:45:03:44:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:14:82:2D:EC:FB:5B:51:41:85:6E:BC:38:E3:A9:F0:74:0B:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8849CB722F2911F0A830117EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.198.0/23
154.218.207.0/24
154.218.211.0/24
154.218.213.0/24
154.218.226.0/24
154.218.233.0/24
154.218.238.0/24
154.218.247.0-154.218.248.255
Signature Algorithm: sha256WithRSAEncryption
0f:37:61:be:8e:da:64:cd:b5:2e:97:6c:28:55:e2:f7:e9:c6:
49:69:00:00:6c:fd:03:e2:78:8f:a4:bb:52:72:9a:c4:7f:c4:
a5:07:a9:c0:c5:a3:da:28:c0:ad:c8:41:28:0a:43:b3:a5:82:
c5:86:86:40:c6:26:40:4e:1f:b6:37:b1:09:55:f5:3f:7c:a9:
db:8f:53:32:0f:5e:84:37:23:29:00:b0:a1:0b:cf:bc:8b:8b:
9f:67:13:c8:f8:05:3c:d4:9c:e7:2c:27:f9:58:fb:33:50:1c:
4f:52:0c:5e:b1:2b:5c:19:42:2b:3e:d5:f7:a5:58:06:21:2c:
dd:e1:74:2b:76:ce:a7:a9:20:3b:26:9e:9c:c6:05:54:08:bb:
e4:7f:7d:d2:c7:76:d2:09:1e:11:47:eb:2c:1e:a1:d4:d0:b5:
cc:3c:3e:b0:83:70:f0:a4:ab:b2:1b:40:14:08:1b:46:2c:53:
6c:d1:43:1f:e3:f2:d4:ba:95:8d:ef:0a:27:65:29:88:af:b3:
48:47:1e:d3:12:24:d2:8d:46:23:70:88:3a:4c:3b:bd:be:35:
e7:e0:19:be:48:22:5a:3a:9b:10:49:53:c2:3a:0d:6e:73:91:
cf:db:d8:a7:a8:ee:b8:c3:bc:7b:7a:82:26:d6:09:58:5e:02:
5b:64:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:57:02 2025 by rpki-client