Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9499F7A2F2511F0B30A0DE5DAE4EC9C.roa
File: C9499F7A2F2511F0B30A0DE5DAE4EC9C.roa (raw, json)
Hash identifier: eNjz8FvgTw6W3J7X4t1qF9LxPUWlQLjskyKwIK9cUP8=
Subject key identifier: 2A:0F:07:CE:81:84:05:2B:7F:E8:4B:A7:0D:25:66:57:A8:17:13:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9499F7A2F2511F0B30A0DE5DAE4EC9C.roa
Signing time: Mon 12 May 2025 11:39:39 +0000
ROA not before: Mon 12 May 2025 11:39:30 +0000
ROA not after: Tue 20 May 2025 11:39:30 +0000
asID: 9009
IP address blocks: 154.218.193.0/24 maxlen: 24
154.218.197.0/24 maxlen: 24
154.218.203.0/24 maxlen: 24
154.218.208.0/24 maxlen: 24
154.218.212.0/24 maxlen: 24
154.218.218.0/24 maxlen: 24
154.218.229.0/24 maxlen: 24
154.218.240.0/24 maxlen: 24
154.218.251.0/24 maxlen: 24
154.218.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98293 (0x17ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 11:39:30 2025 GMT
Not After : May 20 11:39:30 2025 GMT
Subject: CN=6821ddfb-7f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:b5:b7:0b:4d:c3:84:95:16:1b:21:ed:ea:
5d:85:80:0f:07:88:14:75:3e:f4:c5:34:1d:3e:27:
a6:a2:55:81:5d:95:1e:a4:ca:94:f1:39:61:d3:0d:
ac:7b:7b:b4:15:1c:58:02:d0:94:bc:ad:f4:f2:9e:
37:4b:0e:14:39:2b:b5:9b:d3:3c:d6:ee:34:7f:85:
e9:78:70:f7:fb:16:83:51:0a:62:bc:67:f6:2b:2b:
5d:93:03:bb:f1:99:27:41:cd:2b:33:c2:a4:24:e3:
dc:4c:d6:1f:e9:8d:75:17:9b:00:42:8a:da:cd:2f:
1a:5e:a5:a2:bf:d4:c1:4f:26:5a:e1:22:03:f0:0f:
77:39:55:66:f1:41:23:39:0a:94:79:e2:9a:f7:80:
8e:4b:91:cb:cc:60:e9:1b:ce:9e:5f:c1:01:a3:1f:
19:79:8b:26:a1:d6:15:7d:37:84:21:73:8b:91:1e:
99:b4:f8:de:73:6f:be:19:51:1c:fc:0b:e1:0d:27:
e3:d1:e4:b0:87:e3:26:b3:ec:8b:e4:e4:77:ef:4f:
07:92:2e:f0:dd:7d:d0:38:d5:09:e0:ef:9b:0d:eb:
11:fe:96:06:11:e4:c9:24:da:0b:11:67:ec:d3:d1:
a9:58:0d:e1:e7:10:10:46:0e:0f:3c:7b:b5:a0:3c:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0F:07:CE:81:84:05:2B:7F:E8:4B:A7:0D:25:66:57:A8:17:13:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9499F7A2F2511F0B30A0DE5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.193.0/24
154.218.197.0/24
154.218.203.0/24
154.218.208.0/24
154.218.212.0/24
154.218.218.0/24
154.218.229.0/24
154.218.240.0/24
154.218.251.0/24
154.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:da:b8:7e:0a:c3:c4:39:64:4d:d9:c5:72:07:0c:70:dc:f4:
8a:be:68:33:0d:2e:01:36:d1:1d:70:c1:70:28:2c:84:67:9d:
9d:9d:cc:73:98:0d:b6:51:0c:49:7e:39:8a:6a:7f:5c:a5:49:
5d:8c:32:5f:3b:03:e1:02:72:5e:8f:e5:82:ce:28:98:eb:71:
c4:bb:8f:f9:fa:0f:7f:08:07:17:98:fb:85:46:c5:9a:e0:6d:
d4:b2:eb:62:0f:0a:fe:b2:3b:27:5a:88:32:c5:25:42:13:b6:
bb:c1:5a:ac:bf:8f:3f:89:8d:47:d7:23:0d:ed:ed:6d:f9:a8:
3b:e5:07:27:c3:69:68:e0:c0:da:ac:85:6e:9e:5f:f9:3b:78:
b7:a6:23:00:c1:eb:2a:23:7d:c0:7d:28:e2:5f:93:72:00:88:
24:9d:f0:e8:ca:33:bd:47:10:cc:bc:7c:9b:9a:c7:0a:19:32:
fb:7e:67:89:df:66:ea:7d:b0:d1:89:a4:b1:1d:b1:f6:7d:bc:
30:37:e4:e3:c4:28:af:51:28:63:7e:bd:a3:16:2e:2b:cf:fc:
88:bf:20:ee:0d:6b:57:7d:83:eb:02:f8:f6:ca:2a:04:b0:4f:
13:90:3b:5f:be:5f:34:ef:1f:41:65:ea:9e:d6:49:61:26:39:
d4:9b:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:05 2025 by rpki-client