Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9872F5DA317411F086739ED8DAE4EC9C.roa
File: 9872F5DA317411F086739ED8DAE4EC9C.roa (raw, json)
Hash identifier: 9IEfYIl1qx/RByQeV4+/87jebOToD07L6e9906EEhvw=
Subject key identifier: D2:F6:12:57:E4:C1:9C:06:B7:DE:5C:64:D2:9B:BA:14:37:DD:71:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9872F5DA317411F086739ED8DAE4EC9C.roa
Signing time: Thu 15 May 2025 10:08:49 +0000
ROA not before: Thu 15 May 2025 10:08:44 +0000
ROA not after: Tue 24 Jun 2025 10:08:44 +0000
asID: 400619
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98512 (0x180d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 10:08:44 2025 GMT
Not After : Jun 24 10:08:44 2025 GMT
Subject: CN=6825bd31-57ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:16:13:2f:94:09:88:a3:a4:9d:30:f6:96:
5e:b2:fc:d2:c0:d6:f7:ad:31:72:c9:67:3a:e0:e3:
09:39:a3:c1:70:5b:06:4a:e9:a8:0d:1c:e6:58:90:
e0:28:53:7c:3b:41:13:7a:a2:45:6c:6e:1e:d3:e4:
68:34:b9:73:6c:06:31:6e:21:22:25:c1:36:a6:2f:
a5:39:82:cb:60:ab:24:85:2a:5e:d5:82:93:3c:7a:
18:34:65:7b:d3:99:4c:69:e5:de:4c:da:29:90:e9:
f0:5b:1f:57:c2:41:e6:d1:bb:ac:42:6d:c0:6a:6c:
ff:56:29:b9:5e:5d:c8:82:02:1e:30:b3:76:17:86:
c5:94:dc:1a:c6:7f:0f:40:cd:bc:f1:5a:8a:4d:85:
50:70:c5:ef:2d:bf:7d:49:bf:f8:24:77:20:e0:ce:
05:9d:a7:9b:55:cd:22:da:d0:0a:5e:8d:72:c1:20:
0c:f4:7f:89:61:34:a5:4a:f3:99:27:bb:ef:cc:c8:
50:fc:4c:53:52:af:15:af:32:8d:38:fd:d6:e8:e4:
30:2d:90:1b:2e:ee:fa:df:40:61:55:aa:05:84:98:
64:a3:5d:28:36:fc:10:56:1e:55:c5:0c:35:b9:1f:
3b:57:8c:7c:6c:4f:f1:8d:d4:cd:03:7b:ab:a5:6d:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:12:57:E4:C1:9C:06:B7:DE:5C:64:D2:9B:BA:14:37:DD:71:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9872F5DA317411F086739ED8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8b:8c:fc:1c:c4:ee:b4:54:cb:15:94:ac:4c:87:14:ab:57:
7e:8d:26:ce:0b:d1:0d:ee:ea:d6:2d:9d:20:72:0a:04:0f:e0:
36:22:63:46:34:18:e4:6c:cc:8f:9f:14:4c:41:1a:b9:e6:70:
e2:9d:63:33:ee:35:21:e8:3b:63:ae:3c:8e:43:72:7f:03:2e:
6b:80:13:33:1e:3e:8e:51:3b:b1:d1:e0:de:71:c6:aa:cc:a7:
78:d2:c3:9c:cb:fa:56:64:a3:ef:a8:58:ac:d5:a1:14:9f:a7:
f1:62:65:0d:35:ec:06:88:39:74:88:e1:7d:ea:2e:cf:8c:83:
54:d2:37:00:0b:ad:c2:b8:dd:07:ac:e6:00:64:fd:6c:cc:00:
2a:69:5e:4e:1e:79:84:c1:17:e8:e6:6f:4f:42:d7:30:62:d9:
88:f1:c4:ac:b9:f6:91:95:88:84:02:4e:2a:9c:71:21:85:12:
be:d5:fa:eb:f2:ec:ce:52:7d:5d:31:e1:17:a3:8d:e1:f0:85:
25:d7:e5:a5:cf:c6:d9:2b:ed:a8:b2:55:a3:a2:65:5b:4d:04:
01:0b:fa:a3:26:c5:79:d7:7b:71:df:0b:4a:df:7a:00:25:69:
26:7d:33:bb:a4:c0:ac:7c:a3:19:4d:e8:a2:4f:65:40:dd:5f:
15:4a:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:00 2025 by rpki-client