Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9181918425CE11F0AB1BE1E5DAE4EC9C.roa
File: 9181918425CE11F0AB1BE1E5DAE4EC9C.roa (raw, json)
Hash identifier: kpK4ZKgCpwMdVXcUHDGs2A0NXNN3a5FoEkxRpVyiklQ=
Subject key identifier: 09:C8:3B:07:2B:90:AB:D7:2D:42:F5:52:0C:02:E0:8B:67:1F:E3:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D8D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9181918425CE11F0AB1BE1E5DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 14:22:39 +0000
ROA not before: Wed 30 Apr 2025 14:22:34 +0000
ROA not after: Tue 28 Apr 2026 14:22:34 +0000
asID: 984
IP address blocks: 154.80.232.0/24 maxlen: 24
154.80.233.0/24 maxlen: 24
154.80.234.0/24 maxlen: 24
154.80.235.0/24 maxlen: 24
154.80.236.0/24 maxlen: 24
154.80.237.0/24 maxlen: 24
154.80.238.0/24 maxlen: 24
154.80.239.0/24 maxlen: 24
154.80.240.0/24 maxlen: 24
154.80.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97677 (0x17d8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 14:22:34 2025 GMT
Not After : Apr 28 14:22:34 2026 GMT
Subject: CN=6812322f-b977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:74:7e:12:54:82:6f:b9:7a:c6:8d:d6:71:
0c:6d:30:a5:5c:03:72:8a:61:b0:f6:11:dc:53:2a:
42:30:91:51:08:60:b8:0d:73:1e:42:ea:6e:55:22:
37:9e:fc:29:15:1a:93:62:1c:c6:e5:91:e0:b2:2d:
88:de:6a:c3:4f:71:c4:0c:16:58:9f:66:09:7c:48:
cd:88:1d:a0:76:2c:3c:e2:08:bb:2b:ab:44:fe:78:
4b:d7:ee:f2:ca:d8:a9:0e:1b:34:f1:fd:c5:cd:5e:
23:56:d0:47:4b:a3:12:30:f4:7f:a7:49:c8:05:27:
a4:e8:07:61:09:6f:26:94:b7:b8:32:e0:e6:ee:86:
88:3d:fe:4b:ad:ec:73:b2:3d:27:45:e5:72:e0:ea:
02:02:d9:e8:15:54:54:03:40:f5:fd:40:d1:3e:74:
f0:80:76:d2:bb:a8:9c:45:da:8b:66:ce:ec:8f:64:
60:49:0e:9d:73:af:df:42:27:8b:02:11:26:72:e1:
ef:b0:7f:a7:f3:ad:3d:67:dc:ab:c2:02:44:20:4f:
93:cc:73:46:7e:c9:fc:ea:1d:5f:3e:05:61:9e:7a:
7e:84:9c:ed:01:7b:ae:db:cf:60:f5:e1:f7:b3:23:
40:8e:59:61:31:0a:a0:2a:00:3d:d4:41:5f:87:5b:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:3B:07:2B:90:AB:D7:2D:42:F5:52:0C:02:E0:8B:67:1F:E3:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9181918425CE11F0AB1BE1E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.232.0-154.80.241.255
Signature Algorithm: sha256WithRSAEncryption
5e:a7:66:8b:ab:10:9e:0a:dd:b8:45:19:32:6a:77:f0:cb:22:
60:d7:9a:7d:75:e4:a0:6e:82:b0:de:b8:ba:2c:1d:88:b6:49:
48:99:58:5b:94:e2:26:41:f7:4a:3a:c1:18:4d:37:38:93:83:
83:70:80:6a:ac:f2:28:4e:86:74:0f:2a:bf:ad:23:c1:8d:87:
51:11:f4:9a:64:bf:40:67:05:40:8b:7b:85:78:d0:87:42:87:
aa:5c:6f:27:d0:94:26:45:c6:17:c0:bd:df:fb:08:15:47:2a:
8e:91:a1:46:26:7f:e8:fa:d5:f4:3a:1a:23:bf:9a:eb:36:46:
11:a4:43:68:a8:f8:07:30:2e:34:13:15:1d:15:af:3d:20:85:
65:2c:7e:31:61:c8:59:62:43:5b:54:f6:97:cb:76:8f:87:68:
d4:11:fa:aa:27:74:a9:53:d7:c4:76:33:60:64:29:8c:bf:9e:
20:cc:7b:65:bc:cc:e2:1c:fc:66:c6:a4:7d:1e:7a:b8:e7:50:
17:40:7f:58:1e:eb:ab:f4:14:b7:5d:bd:94:c5:84:72:22:0c:
8e:35:07:4b:22:3d:f3:f8:73:01:98:43:b1:5f:73:ea:a6:e7:
73:b7:a4:24:7c:72:be:2b:2b:06:6e:f4:ee:d8:88:da:36:e6:
c1:23:7b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:44:55 2025 by rpki-client