Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A17DEA24E811F0984032E7DAE4EC9C.roa
File: C9A17DEA24E811F0984032E7DAE4EC9C.roa (raw, json)
Hash identifier: 49noIoaISJdtgtFp1JhjuO8HYuKLTpkvU+a3fUPt770=
Subject key identifier: D2:93:2F:03:1A:79:8A:85:49:F9:AB:48:5D:65:20:98:28:24:D6:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A17DEA24E811F0984032E7DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 10:57:49 +0000
ROA not before: Tue 29 Apr 2025 10:57:43 +0000
ROA not after: Wed 03 Sep 2025 10:57:43 +0000
asID: 142403
IP address blocks: 154.209.4.0/24 maxlen: 24
154.211.12.0/24 maxlen: 24
154.211.13.0/24 maxlen: 24
154.211.14.0/24 maxlen: 24
154.221.16.0/24 maxlen: 24
154.221.17.0/24 maxlen: 24
154.221.18.0/24 maxlen: 24
154.221.19.0/24 maxlen: 24
154.221.20.0/24 maxlen: 24
154.221.21.0/24 maxlen: 24
154.221.22.0/24 maxlen: 24
154.221.23.0/24 maxlen: 24
154.221.24.0/24 maxlen: 24
154.221.25.0/24 maxlen: 24
154.221.26.0/24 maxlen: 24
154.221.27.0/24 maxlen: 24
154.221.28.0/24 maxlen: 24
154.221.29.0/24 maxlen: 24
154.221.30.0/24 maxlen: 24
154.221.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97501 (0x17cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:57:43 2025 GMT
Not After : Sep 3 10:57:43 2025 GMT
Subject: CN=6810b0ac-f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:67:bf:71:87:c8:f2:53:29:23:89:43:22:
cd:36:1a:40:1e:3d:80:2b:31:6b:5c:df:6d:9c:8d:
14:fd:fe:e6:ea:32:2d:d1:70:d2:e0:3f:fc:9b:71:
6b:a2:07:d8:3f:97:11:98:9c:65:e8:0d:e2:b4:40:
1e:4b:72:29:47:78:6f:31:fa:2d:59:84:dd:a2:fa:
31:fa:c1:65:03:6c:d5:47:24:fc:9d:61:af:d0:fe:
6c:9a:22:f0:2b:50:d7:19:84:9a:54:c8:85:bd:78:
80:7b:0a:f2:54:b0:5c:9d:5d:cf:92:01:9e:72:71:
db:02:f9:e4:42:96:fd:dd:8d:09:e4:1a:fc:2a:bf:
ba:98:3f:30:5a:f9:3e:0a:61:73:1b:aa:09:9b:0d:
93:15:a0:91:29:b8:52:4c:88:5f:4d:eb:c4:4a:ad:
a1:f7:16:b1:9a:e7:c9:80:42:cd:c9:26:fc:0d:ef:
9f:e9:0f:26:ed:15:73:4c:cb:60:c1:49:48:9f:76:
8f:75:07:2a:2e:47:24:4b:1e:c7:71:a9:4e:33:04:
5c:83:45:b9:56:2d:f9:21:c0:f2:8f:65:97:79:3d:
3f:ba:de:2b:45:1f:2c:98:e4:80:38:58:f6:c5:43:
d1:5d:4e:bc:13:20:e8:f2:3d:f9:6e:2d:89:1b:bc:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:93:2F:03:1A:79:8A:85:49:F9:AB:48:5D:65:20:98:28:24:D6:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9A17DEA24E811F0984032E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.4.0/24
154.211.12.0-154.211.14.255
154.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
60:a0:8f:22:3f:91:53:fa:9a:27:80:20:17:60:92:3b:8b:7d:
7b:aa:6c:ae:b0:fd:ba:de:5d:52:8c:8c:f7:ae:7e:74:fb:a2:
b3:88:d2:15:45:fd:b1:55:43:42:7c:52:cb:f2:b4:56:ee:92:
6c:92:df:e2:8d:e1:ce:55:ff:c6:0b:3b:9d:f6:65:76:ed:8f:
bc:00:a7:c8:4d:e7:fe:3f:42:91:5b:3e:ea:4b:13:83:c5:ef:
3a:d8:86:e1:65:26:20:4c:d9:6d:bd:df:25:50:c2:e7:e6:50:
72:a8:8a:01:32:c1:14:e3:c7:e8:5a:48:00:eb:59:67:e5:fc:
87:86:8d:67:79:01:93:c5:d5:ab:05:46:15:33:92:45:3e:d6:
f8:4f:f1:ec:75:ab:f9:c4:6b:f6:50:c6:b6:27:f0:c0:a5:7d:
10:ef:08:92:96:90:a3:ba:6b:d3:ee:54:5d:7b:1e:f7:8e:dd:
1c:74:bb:5b:de:00:cc:1b:47:cd:e9:66:70:85:3a:6f:af:20:
bf:05:6c:f0:53:a5:68:b3:29:6f:d7:c3:da:6c:65:ef:60:e5:
99:3b:85:30:9b:2d:ad:fe:fd:0e:e1:fe:6f:7e:3e:42:74:3e:
92:c8:f7:6f:41:d6:ba:15:b7:25:ed:0d:b9:d7:33:1a:d9:7c:
cd:73:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:10 2025 by rpki-client