Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4AA39A25B711F091A2B2CEDAE4EC9C.roa
File: 9E4AA39A25B711F091A2B2CEDAE4EC9C.roa (raw, json)
Hash identifier: f4O4SoZYyJ6l8r9kpj7HGJl6D77qcatumh7vQFqZ7bI=
Subject key identifier: 07:50:2F:1F:D7:A8:1F:DA:35:DF:DE:2C:85:32:6B:5A:7A:2C:52:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4AA39A25B711F091A2B2CEDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 11:38:22 +0000
ROA not before: Wed 30 Apr 2025 11:38:17 +0000
ROA not after: Wed 26 Apr 2028 11:38:17 +0000
asID: 17561
IP address blocks: 154.201.0.0/24 maxlen: 24
154.201.2.0/24 maxlen: 24
154.202.12.0/24 maxlen: 24
154.202.13.0/24 maxlen: 24
154.202.14.0/24 maxlen: 24
154.202.15.0/24 maxlen: 24
154.202.16.0/24 maxlen: 24
154.202.17.0/24 maxlen: 24
154.202.18.0/24 maxlen: 24
154.202.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 01:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97622 (0x17d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:38:17 2025 GMT
Not After : Apr 26 11:38:17 2028 GMT
Subject: CN=68120bae-110c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:2e:53:df:6f:0f:b5:3d:cb:8d:ba:da:b1:
bd:98:38:2a:15:8a:44:ff:91:1c:29:58:35:6a:ff:
2b:3f:97:80:23:d1:b4:c0:44:af:ee:2c:78:46:05:
ca:45:8c:c3:ab:d7:97:45:26:5e:44:6c:fb:31:c1:
2c:f9:79:ea:d7:ea:bf:14:e9:6a:11:5b:f0:d8:b5:
a2:e7:31:48:1e:2c:59:03:ff:de:58:2c:8c:f5:33:
49:a2:06:7f:44:6a:b2:44:64:2a:35:d4:75:59:1f:
20:86:0e:d1:4d:84:f7:e2:43:de:d1:e7:87:b1:e3:
8b:87:92:75:09:92:46:4d:f8:53:46:68:a1:c2:2d:
4e:8a:f3:92:36:0a:e2:b0:09:17:fc:43:50:07:05:
e9:94:d3:ab:23:3e:0f:d0:15:c4:e2:4e:c8:70:40:
13:fc:b9:0c:e8:37:d5:1c:ab:b8:20:b6:5e:2c:be:
66:95:f4:65:76:f1:86:f8:93:71:6e:a1:72:e4:b1:
cf:00:03:08:1d:ce:c1:1b:56:37:8f:2d:19:33:fd:
5c:d7:d9:a4:c5:df:00:e7:e7:be:ca:f1:4d:24:79:
7a:20:a7:46:79:14:bb:3f:d2:b5:f6:3b:e0:79:d6:
c4:98:d8:1d:c0:f2:3c:a7:65:e2:29:ef:6b:e8:fe:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:50:2F:1F:D7:A8:1F:DA:35:DF:DE:2C:85:32:6B:5A:7A:2C:52:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E4AA39A25B711F091A2B2CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.0.0/24
154.201.2.0/24
154.202.12.0-154.202.19.255
Signature Algorithm: sha256WithRSAEncryption
52:ab:71:8a:4d:cc:00:36:74:2f:12:18:ec:a9:b1:ba:ee:36:
b5:21:d6:06:8b:65:8c:f3:c7:7f:d1:d4:4d:c3:7a:22:9c:7a:
a1:e0:3d:8a:86:e2:b8:f5:a9:9a:f8:a9:89:48:99:c0:08:72:
4e:b3:f6:e4:0d:c3:27:e5:af:a7:4e:aa:1c:91:ff:65:40:a8:
74:f6:e1:84:49:94:c1:88:10:22:d9:dd:b8:d2:96:3f:24:aa:
b9:52:cf:f8:5a:15:41:ad:5d:d7:9a:b2:d7:39:55:37:46:57:
40:12:a8:df:56:97:ff:25:bf:5e:fe:aa:12:6f:1d:56:24:e4:
7f:1f:25:16:79:74:6e:55:e8:8e:88:d5:f5:70:c5:36:69:25:
83:28:91:c7:3a:77:f8:7c:a0:f7:68:86:9a:18:17:e2:a3:94:
ff:3c:5a:9e:55:27:62:4d:ee:ad:16:df:d2:e1:b8:2a:49:d9:
dd:1a:bf:a9:71:74:1b:9c:a6:2c:ee:8a:6a:84:26:d4:91:6f:
da:b7:a9:97:36:39:b5:5c:1a:be:9e:9e:6e:3f:ad:2a:59:fa:
a5:2f:a5:41:32:9b:fe:f4:3b:0d:9c:e6:a5:62:66:8c:53:f3:
94:82:d5:b4:0a:b0:66:f9:6a:39:a8:96:a7:99:dd:e5:3f:75:
45:86:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:08:08 2025 by rpki-client