Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAC26D76265511F083D11AF5DAE4EC9C.roa
File: AAC26D76265511F083D11AF5DAE4EC9C.roa (raw, json)
Hash identifier: wG6Ux5EpxzJm4CktMqE0G9teCSad05yGMWV4qrmQ0f4=
Subject key identifier: BC:25:EA:F2:BF:A7:D9:66:9A:20:80:23:E7:3E:C9:3C:D1:11:13:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAC26D76265511F083D11AF5DAE4EC9C.roa
Signing time: Thu 01 May 2025 06:29:43 +0000
ROA not before: Thu 01 May 2025 06:29:39 +0000
ROA not after: Fri 09 May 2025 06:29:39 +0000
asID: 9009
IP address blocks: 154.216.196.0/24 maxlen: 24
154.216.211.0/24 maxlen: 24
154.216.212.0/24 maxlen: 24
154.216.219.0/24 maxlen: 24
154.216.227.0/24 maxlen: 24
154.216.231.0/24 maxlen: 24
154.216.236.0/24 maxlen: 24
154.216.241.0/24 maxlen: 24
154.216.247.0/24 maxlen: 24
154.216.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 06:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97726 (0x17dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 06:29:39 2025 GMT
Not After : May 9 06:29:39 2025 GMT
Subject: CN=681314d7-d86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:6b:94:39:37:16:c3:01:84:7d:d0:07:eb:
ef:9e:0a:47:ce:d3:5f:7e:15:78:6c:67:9a:11:e8:
91:2d:27:d7:c8:c3:5d:64:a8:19:a9:77:4a:f3:ba:
ee:ad:d4:e0:4f:5b:43:ae:e1:58:0d:5e:29:bc:4d:
7e:76:8b:aa:c0:81:4f:68:ec:30:90:7a:fc:53:53:
55:83:78:cc:18:9f:cd:4d:28:2d:d1:c2:1f:05:cd:
83:15:22:23:d6:dc:4d:ed:c8:b8:a8:3b:cf:e4:4e:
81:ac:ee:a3:ac:7b:c5:fd:de:e6:dc:04:2b:5a:70:
ac:ee:de:15:ae:89:d4:0d:59:b4:c1:49:a1:3f:d1:
84:2a:35:bc:7c:86:9c:bb:84:0b:73:8e:b4:75:1b:
c3:2d:47:37:9e:04:83:cc:10:6d:dd:44:dd:bc:af:
0e:b4:3c:78:b9:b4:cb:a8:d4:3e:3a:40:56:42:2b:
d9:85:4c:7e:13:b6:39:58:8a:12:fd:9a:24:c4:06:
c7:29:01:26:fc:6c:88:0d:a5:44:f7:b2:14:81:af:
6e:c4:b7:25:b8:bb:2b:59:39:5d:51:53:a3:bb:52:
3b:25:dd:33:16:f3:1e:60:5b:35:f5:dd:9b:59:07:
c0:d1:72:bf:3b:2e:e4:2a:0a:76:15:b6:52:d6:de:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:EA:F2:BF:A7:D9:66:9A:20:80:23:E7:3E:C9:3C:D1:11:13:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAC26D76265511F083D11AF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.196.0/24
154.216.211.0-154.216.212.255
154.216.219.0/24
154.216.227.0/24
154.216.231.0/24
154.216.236.0/24
154.216.241.0/24
154.216.247.0/24
154.216.253.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5d:00:34:02:09:6c:5b:84:50:2f:94:6f:5e:1f:7b:19:4e:
bb:2e:07:b0:a6:0d:e1:9b:f3:b2:a0:f3:89:75:14:1c:9c:51:
13:87:fc:10:ab:a0:be:13:04:bb:fe:3d:bf:0d:95:f7:69:0f:
54:dd:0c:70:a2:67:13:bd:28:6d:72:a5:b1:8e:8f:b0:82:01:
99:3f:e1:c2:33:72:0a:b1:f2:e2:8c:b9:72:e2:42:bd:8f:40:
9a:9e:fc:c9:03:3b:dd:4f:72:c2:f3:e3:52:7f:d0:47:03:50:
3c:82:86:5f:b2:a3:5b:e0:b8:c3:91:cd:36:f3:f7:11:be:21:
9b:9f:35:a1:25:34:4d:cf:a7:9f:83:a0:2e:2b:0d:90:94:09:
c4:05:a4:09:87:6a:bd:1f:14:e3:1c:5b:ed:bc:a1:a4:97:5c:
17:23:73:b3:f2:c9:87:88:08:6e:e4:ec:11:7d:b4:17:d9:08:
88:3f:c9:65:ad:ab:ed:9b:5c:04:c5:5a:f6:a6:ac:59:ca:4d:
d1:25:8f:9a:6c:38:02:16:ba:4a:ea:f1:49:e5:80:eb:47:9b:
e1:d2:e3:af:1b:87:7a:04:9f:b3:11:37:39:aa:da:75:cd:50:
96:54:99:d6:7d:f1:e5:df:24:4d:ec:db:01:12:eb:c3:20:a7:
9d:b6:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:57:03 2025 by rpki-client