Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F70F60245A11F0A75833A7DAE4EC9C.roa
File: B4F70F60245A11F0A75833A7DAE4EC9C.roa (raw, json)
Hash identifier: Ruvy/Sx1Ia6Y9q8OYd9ImTvEmTV2D+eFVMFmR9O320Q=
Subject key identifier: 31:74:5A:28:D1:35:02:C0:C4:8A:5B:19:B0:FA:37:FE:01:DD:16:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F70F60245A11F0A75833A7DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 18:00:45 +0000
ROA not before: Mon 28 Apr 2025 18:00:41 +0000
ROA not after: Sun 26 Apr 2026 18:00:41 +0000
asID: 984
IP address blocks: 154.216.138.0/24 maxlen: 24
154.216.139.0/24 maxlen: 24
154.216.140.0/24 maxlen: 24
154.216.141.0/24 maxlen: 24
154.216.144.0/24 maxlen: 24
154.216.145.0/24 maxlen: 24
154.216.146.0/24 maxlen: 24
154.216.147.0/24 maxlen: 24
154.216.150.0/24 maxlen: 24
154.216.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97363 (0x17c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 18:00:41 2025 GMT
Not After : Apr 26 18:00:41 2026 GMT
Subject: CN=680fc24d-017c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:72:5a:34:80:08:6f:e5:42:d6:23:af:26:
5f:32:80:ab:83:2a:6b:04:fa:d1:ae:aa:c3:94:10:
bd:6a:67:8c:02:7f:67:55:51:4a:43:91:32:ea:00:
d2:1e:eb:ac:e5:7d:70:bb:aa:28:35:85:b7:23:d1:
da:70:36:5d:2f:19:00:02:7f:73:7b:63:da:0b:9f:
36:17:96:cc:78:97:b0:48:1c:48:57:bd:e5:64:66:
81:bb:34:a8:ab:2f:5c:88:51:5d:95:80:72:09:28:
35:2a:b4:71:e3:af:ff:66:61:d2:d9:21:47:cf:98:
0a:45:e4:21:dc:eb:05:c1:bf:aa:ac:a8:ed:fe:4e:
90:c9:16:4e:18:7c:3d:08:6d:a0:98:56:b3:22:52:
ed:24:0f:03:be:1a:17:f2:16:56:4a:9a:f6:5b:0a:
df:0f:b9:44:09:61:6f:8b:c6:a6:55:b2:e0:c8:ee:
fa:0a:1b:4a:14:8b:44:bd:26:77:06:02:fb:e4:6c:
49:ad:9a:04:d1:26:76:05:8c:33:62:4f:fc:73:79:
9c:cb:99:d6:03:7a:17:dc:cd:93:02:95:9d:e0:53:
b0:8d:78:2b:0a:0e:e8:ab:f0:8b:9b:20:ce:c7:59:
39:21:fa:15:65:a1:ef:05:27:89:b2:83:7e:da:ce:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:5A:28:D1:35:02:C0:C4:8A:5B:19:B0:FA:37:FE:01:DD:16:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4F70F60245A11F0A75833A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.138.0-154.216.141.255
154.216.144.0/22
154.216.150.0/23
Signature Algorithm: sha256WithRSAEncryption
53:98:75:c2:87:16:5b:14:c4:97:15:5a:43:c1:dc:62:fa:16:
b9:7c:d9:63:b9:c8:10:80:a7:e0:51:28:c2:33:b1:19:1b:c5:
d8:8a:d3:20:2f:e1:49:0d:e9:7f:e2:a0:7d:d1:dd:30:59:e2:
31:7c:62:e8:7c:61:bb:17:6a:05:a4:aa:1f:20:9e:d5:5b:44:
ed:cb:af:44:b2:6b:61:98:78:35:6d:52:a9:87:e9:5c:6a:2c:
48:9a:7a:31:cb:18:33:12:bf:4f:ed:2c:96:9d:13:09:6f:f1:
56:3f:ec:43:dd:c7:e2:53:7a:a3:e7:31:54:02:fa:b0:18:a8:
86:62:e0:19:4f:54:22:84:e8:69:c9:fd:83:9f:a6:95:5a:5b:
76:48:01:8a:6f:af:cc:7e:51:4f:0e:0e:b9:1b:94:bc:9b:32:
2b:8c:81:43:a1:3c:00:26:da:b0:50:a5:35:02:ca:3b:3c:60:
44:b8:f8:32:21:b4:2b:30:ef:07:5b:53:5e:ba:41:62:bd:8f:
8d:8b:26:25:99:e9:7d:b4:6d:6a:5c:ff:67:f2:b7:e6:65:7d:
91:d6:0b:ff:d4:ab:45:fe:ea:e3:de:51:37:83:e5:c4:9d:ca:
3e:2f:6c:4d:a2:9f:2f:74:94:e2:fc:58:8e:ff:db:a8:bd:81:
be:8c:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:58:08 2025 by rpki-client