Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E980A702BEF11F0B26BEAEADAE4EC9C.roa
File: 9E980A702BEF11F0B26BEAEADAE4EC9C.roa (raw, json)
Hash identifier: hKRXOrYLKmZiWfK9Dxcc5g9oYotcI+hAXbg9ZhuyOuk=
Subject key identifier: 6A:BA:AB:62:F2:8B:0F:99:73:F7:B9:32:A8:4E:76:67:AA:09:7E:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E980A702BEF11F0B26BEAEADAE4EC9C.roa
Signing time: Thu 08 May 2025 09:34:21 +0000
ROA not before: Thu 08 May 2025 09:34:16 +0000
ROA not after: Mon 09 Jun 2025 09:34:16 +0000
asID: 200373
IP address blocks: 154.193.152.0/22 maxlen: 24
154.193.158.0/23 maxlen: 24
154.199.14.0/23 maxlen: 24
154.199.68.0/23 maxlen: 24
154.213.160.0/21 maxlen: 24
154.213.193.0/24 maxlen: 24
154.213.194.0/24 maxlen: 24
154.213.195.0/24 maxlen: 24
154.213.196.0/24 maxlen: 24
154.213.197.0/24 maxlen: 24
154.213.198.0/24 maxlen: 24
154.213.199.0/24 maxlen: 24
154.213.202.0/24 maxlen: 24
154.213.203.0/24 maxlen: 24
154.213.204.0/24 maxlen: 24
154.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98186 (0x17f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 09:34:16 2025 GMT
Not After : Jun 9 09:34:16 2025 GMT
Subject: CN=681c7a9d-da54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:28:69:f5:31:53:61:62:c1:2b:be:7d:fc:
92:69:e7:dc:a9:2d:42:0c:90:00:02:86:cc:f4:f5:
0a:9c:79:22:a1:08:5f:c9:8c:2b:d8:c7:3e:7b:c9:
4f:be:3c:ff:ec:d0:70:44:db:97:54:67:ee:25:03:
e7:7a:06:60:31:fc:f1:d2:f1:a1:a4:71:82:46:ae:
93:1e:f1:ed:72:7c:3e:58:44:11:6b:36:6f:85:a3:
89:d8:f1:15:e6:97:63:6b:10:8e:52:da:7d:60:8f:
74:2b:5f:3d:f6:c2:03:a7:9a:78:bd:19:c4:ce:e7:
6f:9f:b4:f8:17:79:d6:48:4e:4d:f5:24:69:e4:eb:
8f:fd:97:d3:7b:58:a0:38:67:8d:90:2f:36:2e:fd:
92:e0:ea:ca:52:d9:65:47:97:b3:ca:c7:44:75:95:
dd:c5:15:15:8f:93:a1:70:6e:42:dd:09:86:23:20:
e4:bc:e4:39:95:51:d1:3a:55:45:f1:a2:3d:13:0e:
b5:01:89:03:11:1c:cc:5d:97:c0:82:f2:27:a7:e3:
fc:2d:c5:42:ac:40:b3:c0:83:07:fe:df:87:c6:cc:
b3:d3:91:9d:db:9b:a9:df:2d:00:80:06:d0:ba:cf:
89:56:87:60:57:4d:b7:14:02:b7:9d:fc:ec:24:48:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:AB:62:F2:8B:0F:99:73:F7:B9:32:A8:4E:76:67:AA:09:7E:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E980A702BEF11F0B26BEAEADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.152.0/22
154.193.158.0/23
154.199.14.0/23
154.199.68.0/23
154.213.160.0/21
154.213.193.0-154.213.199.255
154.213.202.0-154.213.204.255
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
08:43:a7:70:99:01:0a:53:be:5d:5d:d2:52:33:23:d3:74:2d:
a9:98:ac:48:f0:03:2f:36:ee:01:79:db:df:d6:d2:26:67:23:
ab:dc:aa:18:96:b7:4f:cd:c2:8b:99:1f:0e:69:dc:72:e5:e5:
3f:c6:85:27:7b:4e:3d:e0:af:1b:24:42:fa:9a:41:12:12:68:
8b:2d:65:36:e4:cd:6c:20:89:3d:81:f7:35:e5:4e:9c:74:b8:
fd:e7:72:35:6d:d7:79:91:5c:61:7b:04:60:c4:8d:d0:4d:a4:
f8:53:7f:23:c0:cc:fd:34:02:84:30:cd:c9:ae:0e:04:8e:c2:
15:0e:2d:08:87:88:85:61:02:3b:9b:6b:b6:a7:0a:d3:1b:e1:
d9:4d:32:bb:a1:8d:31:39:10:1f:bf:6b:bd:c8:ea:6d:f6:be:
9c:a2:ce:85:a7:6a:70:39:a4:eb:45:88:ff:3e:97:ae:9a:cc:
89:7a:df:ba:36:8f:89:33:17:3f:ab:ae:5b:36:d8:67:1a:3f:
11:b6:6e:e9:dc:11:7a:5f:e4:27:4c:65:9d:9d:e8:20:47:89:
14:85:aa:f7:81:dd:c6:c2:94:d5:50:1c:c5:25:05:4d:73:98:
e2:40:ca:4e:9b:13:0d:be:f7:fa:1f:23:34:23:4e:aa:2b:47:
de:e3:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:58:23 2025 by rpki-client