Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD4C780E261A11F0B8EE94DADAE4EC9C.roa
File: CD4C780E261A11F0B8EE94DADAE4EC9C.roa (raw, json)
Hash identifier: lO/sdXTH5Qx9J4+Magtlxwg8yCjKWLfrW4hum/TKk8g=
Subject key identifier: A2:06:01:D9:36:B0:D2:B8:5A:3E:41:0D:43:11:CC:48:0B:11:9D:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D9D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD4C780E261A11F0B8EE94DADAE4EC9C.roa
Signing time: Wed 30 Apr 2025 23:28:21 +0000
ROA not before: Wed 30 Apr 2025 23:28:14 +0000
ROA not after: Fri 14 Apr 2028 23:28:14 +0000
asID: 17561
IP address blocks: 154.85.155.0/24 maxlen: 24
154.85.156.0/24 maxlen: 24
154.85.157.0/24 maxlen: 24
154.85.158.0/24 maxlen: 24
154.85.159.0/24 maxlen: 24
154.85.160.0/24 maxlen: 24
154.85.161.0/24 maxlen: 24
154.85.162.0/24 maxlen: 24
154.85.163.0/24 maxlen: 24
154.85.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97693 (0x17d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 23:28:14 2025 GMT
Not After : Apr 14 23:28:14 2028 GMT
Subject: CN=6812b215-e6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:97:92:57:cf:7c:3f:15:13:ff:1d:42:2a:
1d:9c:0a:85:e1:f9:4e:5e:58:b1:c4:33:eb:8b:5e:
0a:54:24:6f:af:32:0f:2f:5c:8d:24:0d:60:b4:78:
ae:a5:2e:ae:e7:d0:ad:fc:f0:c3:77:cd:91:a6:82:
a3:20:12:d6:0c:0d:04:f5:cf:aa:52:07:1a:84:29:
52:41:13:86:b6:3e:e9:5a:5f:46:96:96:80:f9:a7:
2b:a2:36:62:38:3c:25:0c:4a:f0:03:aa:04:81:ce:
73:bf:70:01:83:ef:d3:3b:d9:b3:14:7f:d4:49:7b:
c1:95:da:e9:b0:d5:d7:a0:13:f8:7a:64:80:70:e9:
5f:bb:82:03:c2:54:e2:52:56:47:55:73:89:db:6b:
b9:b0:f8:7e:10:b0:15:dd:34:3a:d1:33:29:6a:eb:
a8:c1:f9:0b:9b:9a:58:f6:e8:8c:92:1c:80:c7:54:
33:2f:71:4d:a6:aa:95:2e:fa:aa:35:da:c0:96:80:
84:cc:24:d0:fe:8f:82:60:89:5c:33:f8:a5:3c:6c:
93:38:3a:97:79:e7:c2:aa:76:e5:4b:98:f1:ff:52:
0d:5a:77:f0:51:37:cd:62:8b:4b:2a:2b:e0:53:af:
cd:44:e0:4a:47:38:2a:78:84:3e:5d:46:1a:ca:4b:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:06:01:D9:36:B0:D2:B8:5A:3E:41:0D:43:11:CC:48:0B:11:9D:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD4C780E261A11F0B8EE94DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.155.0-154.85.164.255
Signature Algorithm: sha256WithRSAEncryption
65:64:4f:76:92:cf:1a:b9:4c:a8:22:79:4e:c6:74:5e:34:41:
72:66:ed:91:a5:c2:f4:49:ee:07:40:d5:0a:f7:45:82:6e:45:
31:25:59:46:7f:30:ee:5d:31:d5:cc:c5:58:f1:aa:5b:8f:19:
d5:e7:97:66:93:c9:e2:fb:b0:8b:dc:26:4f:d7:52:62:2b:5e:
76:2c:20:02:bd:18:13:ce:5d:fd:6b:18:a3:db:40:3f:70:5d:
7f:bc:41:80:47:68:39:b4:9c:49:cd:ea:33:96:06:49:40:99:
70:d9:9d:a7:56:83:04:44:34:d0:a8:3f:0f:e3:4e:3e:f2:b0:
35:4b:70:07:de:35:43:41:6e:e9:b0:51:d1:88:dd:c4:af:b2:
2a:cf:1d:d4:69:d8:f0:a3:ef:bd:6e:90:5a:a0:10:98:f1:6d:
ef:56:9b:c6:c6:6a:3c:08:c2:1d:23:a0:a1:46:c6:54:50:4e:
0f:23:65:e9:a3:96:40:02:59:f3:85:f1:a4:56:93:98:78:5a:
aa:35:31:55:84:20:e8:af:7a:cd:6d:4a:89:b7:bb:50:94:e9:
ae:07:aa:e3:04:6d:e0:0b:61:e7:fb:08:14:54:3a:cf:1d:90:
12:1c:b1:60:75:a9:b2:a7:54:3a:c2:d8:fd:fc:4b:6b:c4:1a:
2b:1e:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:29:55 2025 by rpki-client