Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916CC3CE242711F0B27AA5D2DAE4EC9C.roa
File: 916CC3CE242711F0B27AA5D2DAE4EC9C.roa (raw, json)
Hash identifier: fzIu3/RSep8Y/EhLxeDyYhRBHjp5OkOBZTvKiiXLBJY=
Subject key identifier: 0A:3C:04:D8:D9:72:3D:9C:DC:8C:B5:65:BA:C1:0F:C3:54:0E:00:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916CC3CE242711F0B27AA5D2DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:54:41 +0000
ROA not before: Mon 28 Apr 2025 11:54:37 +0000
ROA not after: Wed 04 Jun 2025 11:54:37 +0000
asID: 44559
IP address blocks: 154.209.133.0/24 maxlen: 24
154.209.135.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
154.209.197.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97168 (0x17b90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 11:54:37 2025 GMT
Not After : Jun 4 11:54:37 2025 GMT
Subject: CN=680f6c81-94b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:63:f0:9a:fa:73:ef:ad:26:cb:95:42:d5:
bc:bd:83:47:f1:ad:7e:79:4f:c8:9d:5a:ff:85:54:
80:c4:24:83:e5:f3:a8:87:72:59:2e:11:74:db:f7:
a4:80:00:74:fb:6e:14:9e:10:42:af:20:3c:dd:8c:
04:60:4e:95:ef:8e:94:ba:2d:74:6d:cf:0e:fc:71:
5b:f8:e3:40:2d:41:11:f9:ba:f0:42:01:7e:d0:b5:
89:d8:12:2e:7c:03:6a:67:9d:1d:0d:24:fb:96:60:
f3:27:28:d4:fc:1b:a9:a9:03:61:89:2c:62:0d:e9:
5a:62:af:47:f7:29:ac:cf:4d:62:b3:ad:e4:b1:4c:
d6:d5:40:de:95:68:6d:98:7f:2d:19:2f:0f:8f:fe:
fb:10:11:31:c5:89:6d:1a:99:33:61:4e:5d:cb:de:
06:30:37:0e:18:87:b1:30:fb:31:8d:92:82:11:db:
3c:a2:6f:c2:f5:5c:11:ff:5e:96:f5:ef:4b:98:47:
a8:8f:cc:ab:78:31:91:91:dd:c8:e6:21:bc:a1:a4:
55:fb:b4:67:37:1d:bc:fd:47:e1:c2:0d:b5:a6:e0:
02:40:96:8c:4c:0a:92:a9:08:e9:05:71:c5:e7:17:
2b:fb:9a:7c:93:d0:54:7e:22:41:44:8d:de:f4:1a:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3C:04:D8:D9:72:3D:9C:DC:8C:B5:65:BA:C1:0F:C3:54:0E:00:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916CC3CE242711F0B27AA5D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.133.0/24
154.209.135.0/24
154.209.159.0/24
154.209.194.0-154.209.197.255
154.209.199.0-154.209.200.255
154.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:62:23:5a:7e:ef:d8:2b:1f:7e:0f:69:1d:9b:25:36:83:73:
57:49:ae:ff:ca:bc:ff:ab:f2:d8:3e:ec:33:76:9d:50:55:06:
b8:3f:6f:b7:51:e4:36:65:04:31:86:ba:be:1e:d2:7a:1d:d5:
32:97:bc:39:42:1a:fe:a3:68:12:0d:ee:73:4a:be:da:0b:2e:
39:d7:12:b0:85:04:06:dd:4c:a8:49:df:15:51:c6:f5:02:97:
2f:ba:37:bc:57:69:0b:96:9a:c5:3a:1b:a4:d7:fc:6e:77:0a:
8d:59:ed:da:13:08:eb:4e:67:41:50:25:92:8c:6a:27:30:6d:
4e:39:5c:ce:6e:a2:ea:2b:7e:32:07:2e:b0:56:82:df:04:89:
c9:31:04:0b:4b:e3:6e:ca:31:8f:3e:72:84:19:c5:0a:a2:a6:
bb:1e:00:f5:f5:8a:29:b8:f4:3d:dd:17:f0:2f:e4:17:65:43:
3b:43:48:5e:7c:6d:27:b9:d1:af:71:ee:4e:c5:77:11:93:1b:
eb:a9:24:c3:66:a0:a0:e8:9a:3a:bd:a7:ae:7a:de:68:22:af:
63:bb:c8:94:43:73:42:e5:75:17:a4:54:db:71:78:bb:b7:fe:
6d:e0:a8:e3:ff:64:ef:6e:d4:09:14:ee:9c:5e:2f:2a:63:0d:
8c:25:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:38:26 2025 by rpki-client