Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F51E95E2BE511F0B811F4ABDAE4EC9C.roa
File: 9F51E95E2BE511F0B811F4ABDAE4EC9C.roa (raw, json)
Hash identifier: n1lsSC5anTAfcpVPt9HpuI5X2jCAXYfKY7GjhrcoS6A=
Subject key identifier: C7:24:74:64:B0:1B:AE:CF:0E:CE:02:8F:7E:C4:DC:94:D7:78:DF:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F51E95E2BE511F0B811F4ABDAE4EC9C.roa
Signing time: Thu 08 May 2025 08:22:47 +0000
ROA not before: Thu 08 May 2025 08:22:43 +0000
ROA not after: Sun 08 Jun 2025 08:22:43 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98172 (0x17f7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 08:22:43 2025 GMT
Not After : Jun 8 08:22:43 2025 GMT
Subject: CN=681c69d7-1e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:62:23:f6:5e:fa:73:41:6b:b3:68:c1:5f:
d1:82:bc:a4:bd:b8:7a:ce:cd:78:50:ec:a4:a0:15:
4d:c4:ab:d8:51:1c:28:07:12:2c:4a:11:75:a3:30:
97:fb:59:da:bd:1c:c7:ee:91:1c:39:e8:8e:0c:40:
c8:e2:36:1e:fd:ee:18:71:46:0c:85:a4:21:22:1e:
53:70:6f:7a:00:b8:93:90:de:71:fa:81:de:6e:f5:
3a:63:8f:56:fc:79:81:82:7d:fb:e0:db:16:34:75:
c2:30:2b:88:a8:8e:10:e8:41:02:c3:28:9b:4c:b3:
01:20:45:fb:9c:91:fb:53:aa:23:36:9d:7c:a6:75:
10:17:25:94:28:f2:46:22:33:f2:95:bc:61:cf:6d:
fa:4f:e4:6c:0d:03:53:83:cd:29:26:76:7f:0b:ec:
e9:01:fe:6e:5c:78:fc:22:38:5c:93:af:1d:ca:8c:
5a:8c:1c:1d:b2:85:ea:8e:20:13:42:76:f0:cf:54:
06:0c:fc:46:de:ca:2b:31:16:7c:c9:16:fc:3f:f6:
bb:1b:93:27:f2:fb:55:fd:2f:06:79:7b:7a:11:2a:
1b:4f:0c:e7:48:14:52:0a:71:df:86:b3:95:da:a9:
d3:f8:a2:1b:12:91:25:75:71:5a:c0:ba:50:f4:3c:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:74:64:B0:1B:AE:CF:0E:CE:02:8F:7E:C4:DC:94:D7:78:DF:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F51E95E2BE511F0B811F4ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
86:a8:6e:03:e2:ef:18:7e:05:35:ea:78:cf:08:14:b5:86:02:
00:96:81:16:1f:30:73:dc:96:12:a8:13:db:5d:97:68:7b:71:
ea:6f:54:fa:fc:8d:75:9a:fb:80:dd:85:59:9f:76:0d:39:fe:
03:6f:6b:bb:5b:96:aa:b8:16:c3:fe:df:b3:1d:74:79:03:94:
e1:db:de:81:7f:29:21:8e:54:a3:30:74:31:37:b8:b5:72:61:
7d:b5:d6:9c:51:7c:2d:3b:03:35:92:5d:de:b3:fc:be:1c:2e:
bc:82:8a:83:46:20:86:92:c6:2c:fd:1d:d3:ba:e4:fd:81:3d:
c4:bb:ab:de:10:37:26:07:34:c1:df:0e:d5:11:45:4e:75:c0:
bf:a8:c4:e8:c6:5a:08:9d:37:db:d8:1e:28:be:62:f6:bf:7e:
21:a9:9b:b0:1c:a4:97:1f:0b:a9:49:b0:fb:e5:34:c2:94:3e:
b4:d8:09:a8:03:0b:ce:8f:2e:9c:c4:8e:1c:13:64:3f:b2:b7:
3b:81:2a:cc:67:9c:2b:95:1a:17:35:12:27:f9:08:0b:ab:ef:
45:26:03:70:ac:7c:e3:5d:5c:a1:1c:17:3e:18:21:db:ee:26:
35:4f:c8:3f:a0:8f:05:0b:34:e1:8e:03:23:fc:90:f4:ae:22:
42:99:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:27:06 2025 by rpki-client