Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEA36C70245811F08E2A8A9BDAE4EC9C.roa
File: DEA36C70245811F08E2A8A9BDAE4EC9C.roa (raw, json)
Hash identifier: 3EbbYSdKqUJHmldLPdKbfRlHz8bOREJaUmOgtg7e/O0=
Subject key identifier: 57:FE:B8:4F:31:FD:9A:23:45:52:1B:78:A0:26:C8:1B:B9:69:1B:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEA36C70245811F08E2A8A9BDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:47:36 +0000
ROA not before: Mon 28 Apr 2025 17:47:32 +0000
ROA not after: Sun 26 Apr 2026 17:47:32 +0000
asID: 984
IP address blocks: 154.212.12.0/24 maxlen: 24
154.212.13.0/24 maxlen: 24
154.212.14.0/24 maxlen: 24
154.212.15.0/24 maxlen: 24
154.212.16.0/24 maxlen: 24
154.212.17.0/24 maxlen: 24
154.212.18.0/24 maxlen: 24
154.212.19.0/24 maxlen: 24
154.212.20.0/24 maxlen: 24
154.212.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97355 (0x17c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:47:32 2025 GMT
Not After : Apr 26 17:47:32 2026 GMT
Subject: CN=680fbf38-8f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:1e:4f:d2:54:7a:29:64:10:a3:f7:f9:bc:
b1:5c:3d:18:e4:44:d9:0b:ad:01:6b:dd:d8:ee:5c:
3c:71:14:27:67:3d:05:e1:01:33:f2:d3:c9:b6:2b:
e9:0c:a4:be:e0:c1:91:fa:8e:c7:3c:c8:6b:b1:d5:
c4:7d:d0:29:6d:37:5f:34:49:32:d4:a4:d8:4e:55:
aa:cd:33:fb:76:a1:26:2d:e4:21:f9:b2:aa:fd:90:
6f:4b:41:75:88:1e:ca:1a:8f:84:c5:3f:75:c2:04:
eb:f4:c6:9a:69:8d:21:3f:4b:fd:ae:32:c5:c2:09:
82:08:d1:34:04:8f:0d:1b:a5:30:6f:9c:1a:18:9d:
39:70:bf:b9:aa:dd:f2:80:e6:b7:46:81:ad:cc:04:
e2:82:06:ae:1e:76:8a:6c:03:7b:36:e6:64:35:81:
b5:12:84:86:18:d6:80:7a:fe:de:b8:a0:1c:a1:56:
85:33:df:ee:bd:2b:f5:0c:0d:21:ee:eb:db:e4:49:
20:34:e7:25:ab:57:29:05:f1:71:6e:b0:8a:dc:dd:
ee:5e:9e:3c:92:3a:f9:24:1a:07:04:76:d4:bf:6a:
1e:73:c6:c7:52:4f:6c:6d:cc:71:db:db:23:19:28:
3c:55:22:78:fa:14:8f:9d:5a:36:47:da:b8:f1:6a:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:B8:4F:31:FD:9A:23:45:52:1B:78:A0:26:C8:1B:B9:69:1B:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEA36C70245811F08E2A8A9BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.12.0-154.212.21.255
Signature Algorithm: sha256WithRSAEncryption
a4:64:9f:48:93:88:ff:6e:e4:c6:b3:e6:29:16:7f:d0:31:b0:
f4:08:41:84:de:ea:32:23:b7:4b:a1:03:68:1e:98:bc:bb:1d:
a1:46:34:73:db:7a:e4:e2:f5:5f:9e:42:e8:08:1a:b8:a8:4f:
2d:ed:e8:c1:c9:a0:56:3d:26:ed:b9:9a:3a:2c:05:e1:86:44:
1d:04:b7:15:66:a0:bc:32:a9:71:9f:5b:2c:44:8f:02:47:ba:
ba:ce:28:ed:16:d1:2e:26:93:b0:47:35:1d:8b:3c:17:9e:92:
1e:ef:79:0e:a1:15:3d:4f:8c:3c:22:b1:0a:a6:59:ef:ed:f7:
f8:36:0f:8c:0f:c0:00:f5:63:c3:c9:8c:5d:39:10:01:c8:fc:
49:31:2b:8e:3c:41:97:73:31:51:17:b2:41:fc:c8:89:46:3d:
25:1b:c3:60:0c:4e:1f:13:a0:88:c2:5f:d0:c5:89:c4:f5:4c:
60:0e:91:19:84:4a:76:a5:8c:3c:76:00:11:86:45:bd:32:18:
f8:75:7c:b0:ea:a9:a3:ef:ae:d0:02:23:77:7f:6c:7f:24:b1:
9c:28:78:b8:0d:2f:0c:24:bd:2b:7b:f5:2e:d4:60:72:1a:5a:
0d:d3:28:7c:5c:fa:4a:a4:cf:ca:14:26:c1:62:0c:8d:40:c4:
68:e2:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:13:46 2025 by rpki-client