Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39E7CA6298111F082489AAEDAE4EC9C.roa
File: D39E7CA6298111F082489AAEDAE4EC9C.roa (raw, json)
Hash identifier: oBV7RzNLCIYx9Hs8ftgNXuk6c19jazrW2cUBGBJjRDU=
Subject key identifier: D7:F5:97:D3:63:29:14:4D:AB:4D:B7:96:78:25:18:63:E3:FD:E5:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39E7CA6298111F082489AAEDAE4EC9C.roa
Signing time: Mon 05 May 2025 07:23:23 +0000
ROA not before: Mon 05 May 2025 07:23:18 +0000
ROA not after: Mon 09 Jun 2025 07:23:18 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98017 (0x17ee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 07:23:18 2025 GMT
Not After : Jun 9 07:23:18 2025 GMT
Subject: CN=6818676b-4133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:78:45:ad:9c:75:71:43:ef:45:4c:90:a9:
d5:20:04:53:60:0e:1e:cf:27:18:d6:e6:cf:f4:c3:
75:05:ac:26:2d:3b:07:b4:ac:f4:11:2c:d7:a4:66:
90:c5:17:b4:4b:fa:02:19:89:b8:fa:02:3d:2f:b7:
7d:c9:49:f2:bf:e2:5d:36:65:19:44:dc:cf:7f:cb:
2c:29:ec:2a:97:42:32:4a:9f:61:90:f2:5c:e0:d7:
32:2b:c8:15:4f:9a:3e:49:37:10:f2:f9:c2:61:32:
d3:0e:ae:2c:fc:66:40:88:2d:d7:7b:1e:a8:e3:6c:
4a:af:39:b0:bb:60:e0:b5:ec:53:81:31:3d:92:31:
ab:ee:f6:61:77:62:76:30:77:99:fa:1f:0d:7b:aa:
fb:cb:be:a9:08:79:c8:23:4d:f7:94:ba:c7:77:dc:
14:09:d6:0c:34:81:87:d3:a6:44:ef:6d:75:0c:11:
c0:0a:fe:50:90:aa:bd:79:48:7e:f9:f7:47:bd:b5:
7a:50:4c:32:31:a0:4b:ec:35:76:87:ef:91:de:8f:
d6:ce:34:2c:92:ad:29:f3:72:43:22:e1:3c:8d:52:
9c:0b:10:28:28:8a:43:2a:65:12:95:c4:23:39:81:
89:6f:cb:5f:3b:40:27:70:e9:0a:10:fc:ec:25:80:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:97:D3:63:29:14:4D:AB:4D:B7:96:78:25:18:63:E3:FD:E5:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D39E7CA6298111F082489AAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bb:50:01:08:e0:4e:31:71:ca:b3:3d:c0:e2:ff:a6:9e:b1:
5e:ca:4a:6a:89:82:92:e4:f2:36:1e:23:9d:fb:72:82:21:6c:
19:5d:da:82:af:d9:55:44:50:84:6a:62:f0:61:72:f7:24:60:
39:08:8a:fd:31:97:e1:ae:52:51:65:94:34:d5:a0:ba:30:02:
8c:a0:93:61:76:a6:4b:a5:13:4b:46:90:48:d2:ed:ab:75:9f:
73:13:c7:40:6a:43:6e:10:7d:e2:06:21:77:74:35:de:a8:e0:
be:fa:8e:0d:20:ca:af:c1:5a:a8:13:5b:73:83:08:99:56:b3:
76:d8:eb:f7:c5:d2:6b:06:1a:eb:38:83:7a:ce:80:90:55:47:
dc:c4:52:1a:70:b6:51:a7:e3:b5:c2:a9:13:44:ca:f4:73:fd:
7f:cb:49:a5:35:82:6c:a4:9c:fe:5d:a0:d3:da:47:3f:9c:2a:
0a:cb:40:9c:90:cd:d5:3d:a5:0f:23:24:5c:af:2c:87:73:db:
b3:c4:cd:59:3a:3f:cf:d6:3b:5a:04:19:09:63:08:85:c7:fa:
a7:57:5e:46:33:c8:87:a6:23:9b:c4:12:17:13:66:30:8d:8d:
c4:62:42:b9:1d:fa:74:a3:37:ab:97:d5:4f:a7:b3:03:7f:bd:
f2:42:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:38:35 2025 by rpki-client