Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9CAFE6316D11F0AEBA81ABDAE4EC9C.roa
File: 8C9CAFE6316D11F0AEBA81ABDAE4EC9C.roa (raw, json)
Hash identifier: 00QuekzY12JHH46jBQ5J3W4SnA0EDgUt3z2QVcSlEz8=
Subject key identifier: FD:9D:58:52:94:D2:06:1A:1E:BA:1F:6F:64:56:A6:8D:07:5E:DA:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9CAFE6316D11F0AEBA81ABDAE4EC9C.roa
Signing time: Thu 15 May 2025 09:18:23 +0000
ROA not before: Thu 15 May 2025 09:18:18 +0000
ROA not after: Tue 24 Jun 2025 09:18:18 +0000
asID: 55020
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98498 (0x180c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 09:18:18 2025 GMT
Not After : Jun 24 09:18:18 2025 GMT
Subject: CN=6825b15f-5126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:31:50:04:44:4e:c7:15:3e:20:ed:7a:10:
fe:da:18:9f:32:e4:be:20:64:e5:a5:0b:6f:9a:e4:
32:e1:21:e8:f7:b6:3d:b3:1d:71:85:86:91:dd:00:
e7:01:56:1d:f6:37:8a:b1:38:c6:fe:4f:08:e4:1e:
df:40:67:d0:43:3b:ff:b2:61:60:96:d7:ba:f5:48:
42:15:98:e4:af:c2:84:d3:2b:cc:f7:ca:f0:25:fd:
54:e6:e1:5a:c1:5a:af:46:6e:83:50:aa:68:f5:a6:
6c:81:18:96:ee:84:18:8e:27:8f:6c:49:13:73:44:
fc:d7:e2:ba:72:43:06:d0:b9:65:9a:84:c3:70:6c:
34:91:54:be:23:4d:52:46:44:76:38:5c:d2:57:b0:
bd:b1:d1:76:de:ca:b3:61:02:d7:a0:91:04:55:92:
ab:3a:a2:a5:20:52:f3:40:12:f6:a3:47:7f:91:ea:
b8:7d:f9:63:72:68:68:ef:d3:9a:bd:48:0d:15:ca:
22:6c:e5:69:df:49:f2:e1:f1:1b:cc:5e:7e:0b:cb:
26:7d:b1:f6:c5:b2:4c:cd:a8:51:47:92:63:a5:b8:
1f:3d:ff:5c:fc:03:a4:16:a7:05:20:83:97:d6:73:
9b:1a:2c:90:95:72:40:97:d7:d6:c3:0a:e8:3a:39:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9D:58:52:94:D2:06:1A:1E:BA:1F:6F:64:56:A6:8D:07:5E:DA:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9CAFE6316D11F0AEBA81ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
9a:61:cd:f1:0b:a0:5a:79:e0:57:98:ff:03:7c:31:21:94:15:
d8:31:36:b3:3b:68:53:fa:51:6f:75:ca:96:33:56:71:2e:7b:
99:82:d3:12:cd:df:e2:f2:8a:ab:23:0e:e2:67:83:d2:fa:34:
66:7e:42:8b:76:6a:14:49:bc:aa:0a:78:42:66:2b:6a:b7:9d:
8a:ab:31:bd:ce:1f:a5:37:c4:17:8c:e3:e9:55:3a:93:da:ed:
6f:1b:98:1c:9b:0a:d5:4d:82:06:5f:52:e5:75:e0:f2:ed:46:
b6:75:c5:87:3e:5e:2a:2b:55:57:4e:61:b0:71:54:19:5c:49:
bd:be:ec:8d:61:e7:20:1b:7a:f6:0f:94:f1:9a:62:3a:41:14:
97:f7:62:df:19:8c:d5:51:68:ed:69:e9:7e:27:a7:5c:91:6a:
97:e3:4b:fd:3e:fa:b8:59:7d:85:c6:85:56:88:a8:7f:a3:8d:
0d:3d:69:e0:71:cf:fa:5d:57:0e:12:a3:ef:6a:fd:13:9b:0f:
1a:9c:cd:e1:0a:5e:ec:43:21:de:2e:0c:ad:11:ab:8a:c6:14:
21:63:d9:42:b4:dc:86:ac:10:a3:bb:a3:bd:23:84:87:61:b5:
3a:ae:b4:78:fb:08:64:03:fe:3c:82:0c:50:3a:ab:44:05:85:
e5:22:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:44:50 2025 by rpki-client