Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5DC890428CF11F085F0B685DAE4EC9C.roa
File: B5DC890428CF11F085F0B685DAE4EC9C.roa (raw, json)
Hash identifier: UyHuiQnfNta+0WLoCqmOnHEfxZ/KDH9iXjQgcVq7Pyk=
Subject key identifier: 7C:47:7D:93:C7:F1:13:65:B0:4B:4B:9D:1B:9C:18:5F:99:7A:C7:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017ED2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5DC890428CF11F085F0B685DAE4EC9C.roa
Signing time: Sun 04 May 2025 10:08:23 +0000
ROA not before: Sun 04 May 2025 10:08:18 +0000
ROA not after: Thu 10 Jul 2025 10:08:18 +0000
asID: 395793
IP address blocks: 154.196.208.0/24 maxlen: 24
154.196.209.0/24 maxlen: 24
154.196.210.0/24 maxlen: 24
154.196.211.0/24 maxlen: 24
154.196.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98002 (0x17ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 10:08:18 2025 GMT
Not After : Jul 10 10:08:18 2025 GMT
Subject: CN=68173c97-8c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:dd:4a:1f:8a:13:80:61:2e:17:da:bc:ff:
83:31:c9:b4:fe:21:82:d2:bc:5e:20:a1:b6:a0:6a:
d4:15:e5:38:d2:aa:dc:c8:46:91:78:dc:bc:ce:ad:
96:c9:d5:ff:22:0e:ba:91:8f:da:15:b4:f7:cb:31:
35:c1:d5:05:0b:4d:91:2d:af:c0:8d:22:ed:55:ed:
4e:a5:f3:24:5a:a7:91:26:36:00:38:ab:4f:0e:58:
50:9f:34:9c:b3:7c:16:10:33:71:87:83:d7:a1:fa:
a6:10:b7:85:3a:b0:fb:9b:85:c9:cb:ed:0e:a3:43:
88:75:ff:df:89:2d:f6:8e:77:13:04:cf:49:9b:6d:
88:5f:78:b3:de:9e:01:9f:7e:02:71:37:05:46:4f:
bf:51:78:2a:95:e0:bf:21:34:f6:89:49:d5:b8:3b:
b7:f8:1c:a2:77:0c:a7:5d:12:7d:06:a4:1c:d8:f9:
c3:0f:9b:91:63:37:d0:31:76:59:60:91:76:88:06:
0d:6e:5b:ad:27:8e:06:7c:d1:e6:a5:c6:b4:e1:98:
a9:58:2d:f8:09:90:93:0c:ec:c7:5f:5d:b2:4a:72:
42:03:9a:c3:23:ee:98:44:fd:0c:3a:9c:7e:6a:88:
f3:a5:28:eb:4e:a1:fa:18:65:df:10:61:2a:8d:f4:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:7D:93:C7:F1:13:65:B0:4B:4B:9D:1B:9C:18:5F:99:7A:C7:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5DC890428CF11F085F0B685DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.208.0-154.196.212.255
Signature Algorithm: sha256WithRSAEncryption
95:80:2f:e4:0d:bd:8c:a6:06:08:1d:3e:17:67:50:03:c8:c7:
6f:8c:af:db:a5:a1:4e:49:bd:8e:b1:1e:15:bd:00:46:4e:1a:
5b:f9:52:94:84:1e:0d:1c:5b:6f:1b:ea:c4:fb:93:97:da:ff:
47:7d:0a:46:14:64:8a:5f:f5:1f:1b:9e:8e:64:f1:af:a3:f9:
31:ce:fe:bb:dd:ff:21:41:ea:a2:14:bf:d3:3a:fc:88:3c:74:
0c:94:1e:fe:4d:6f:88:ff:9f:31:74:e3:ad:44:24:b1:ed:ee:
ff:e3:23:22:a7:9d:5e:56:e3:fa:5b:af:f4:2d:1f:14:bc:cf:
18:1c:86:b7:b7:c0:09:5f:f3:36:33:3c:8e:e9:9d:79:0d:0a:
46:a1:49:c4:35:62:f9:b2:8f:ac:a7:2c:d4:30:a8:9f:9a:04:
ca:f9:13:1c:f3:1e:c0:54:df:b8:ab:77:08:d6:3e:39:d7:c8:
2f:20:46:11:38:4f:f7:b5:54:3c:be:7c:0b:97:2f:26:06:3e:
9b:bf:72:82:67:80:6b:57:71:a2:18:8b:3d:36:c9:bd:ac:a7:
cd:a3:17:7c:f1:89:f2:19:af:d0:4a:37:b1:8c:ab:6a:f1:19:
ab:22:be:32:12:32:48:30:fe:fb:6e:c7:a0:d2:a2:24:e4:c8:
ef:04:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:55 2025 by rpki-client