Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C992BB82316011F0A89898D7DAE4EC9C.roa
File: C992BB82316011F0A89898D7DAE4EC9C.roa (raw, json)
Hash identifier: y9HRiTmpHog/gPRx26oTSpZAFhD3GTDZH8EroC8ou1o=
Subject key identifier: F9:63:04:9E:D3:08:F1:C7:BA:87:07:FD:3F:61:D7:79:A6:52:EE:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C992BB82316011F0A89898D7DAE4EC9C.roa
Signing time: Thu 15 May 2025 07:47:02 +0000
ROA not before: Thu 15 May 2025 07:46:57 +0000
ROA not after: Thu 22 May 2025 07:46:57 +0000
asID: 150706
IP address blocks: 154.223.168.0/24 maxlen: 24
154.223.169.0/24 maxlen: 24
154.223.177.0/24 maxlen: 24
154.223.178.0/24 maxlen: 24
154.223.179.0/24 maxlen: 24
154.223.180.0/24 maxlen: 24
154.223.182.0/24 maxlen: 24
154.223.183.0/24 maxlen: 24
154.223.188.0/24 maxlen: 24
154.223.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98482 (0x180b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 07:46:57 2025 GMT
Not After : May 22 07:46:57 2025 GMT
Subject: CN=68259bf6-285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:dd:bd:77:0c:d3:52:20:59:d3:29:8f:4a:61:
0a:87:20:3b:a8:21:43:49:02:15:e3:8e:b7:8f:f9:
88:e5:27:f0:ca:ec:4b:4a:70:17:4b:a2:f1:4d:4b:
3c:5a:b6:fb:4e:80:71:5e:88:52:73:18:2b:c5:d3:
d0:5f:99:e8:1d:4f:93:e2:7c:3b:84:da:af:6f:0d:
7f:11:f3:8b:a7:9b:aa:bc:d4:0f:ac:c2:bc:6e:25:
cc:1e:4c:30:a9:de:f3:f3:6c:1b:70:d2:c8:d8:0b:
37:f1:0a:ff:fd:69:26:7c:43:11:ad:91:bf:1d:67:
4d:db:ad:9e:49:3c:76:ae:03:e2:33:24:f8:23:6f:
e8:d3:31:69:ca:de:fa:f3:3b:49:30:16:7d:3d:c3:
71:a1:ff:56:bb:30:35:47:4e:8d:4b:fa:88:e5:04:
36:5b:a8:90:0f:cc:e2:5d:3f:6d:97:e0:20:dc:4e:
86:cf:bf:8c:a1:19:43:bd:1e:d8:77:84:27:0d:62:
cc:77:28:7c:e8:1a:f6:46:14:c6:a4:f6:92:a9:20:
54:63:29:b4:2c:70:2e:a0:aa:25:a8:65:c5:bd:39:
23:5d:b5:ca:16:f0:5e:f0:07:9b:9c:2a:0a:29:63:
b4:53:39:44:79:82:01:79:34:c7:a6:e1:ea:12:09:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:04:9E:D3:08:F1:C7:BA:87:07:FD:3F:61:D7:79:A6:52:EE:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C992BB82316011F0A89898D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/23
154.223.177.0-154.223.180.255
154.223.182.0/23
154.223.188.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:a1:fc:43:c2:1d:7c:bd:69:3d:4f:d9:54:3c:21:7f:1e:69:
72:d1:a4:b4:e3:c2:c3:ce:fc:c2:fa:08:de:3a:81:b8:a1:1a:
6e:0b:31:4e:bb:aa:28:e7:52:fc:5c:ce:2f:a1:30:99:b6:34:
34:bc:68:88:7a:70:27:72:1e:5b:87:e1:61:03:65:db:1a:22:
3a:9c:a6:8c:17:cd:69:29:49:73:f0:de:f4:fc:b8:34:b7:fd:
c2:bf:74:d1:7b:ba:f4:3f:98:89:c5:75:f5:02:ad:cc:13:99:
4c:e2:72:24:9d:3d:3c:2b:08:4c:f2:c5:6a:fa:db:49:68:e9:
0b:18:2f:82:24:76:c0:e7:f7:b2:c2:b8:c1:41:48:43:8d:1c:
c7:d3:3b:0f:05:ed:b1:1c:11:bd:ac:c6:43:94:24:c0:26:ea:
2c:79:d1:6f:33:c2:3f:4a:c2:87:f3:c3:57:dc:3f:e9:21:f7:
2c:7b:ff:89:5b:ac:d4:cf:61:db:86:6f:1f:07:32:ed:1c:ae:
1b:dc:99:14:f0:c0:64:1b:62:ba:bc:0c:4e:c0:1d:7a:4a:0b:
f9:2e:19:53:d6:6a:41:35:60:b8:b5:d5:5e:2b:27:b3:3d:c8:
42:9f:0a:04:4d:dd:fd:3f:a2:70:7f:1f:a8:b6:fe:59:54:9b:
04:79:17:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:43:50 2025 by rpki-client