Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EA6D6425C911F0847F7CC6DAE4EC9C.roa
File: E4EA6D6425C911F0847F7CC6DAE4EC9C.roa (raw, json)
Hash identifier: EAeoYgFIrT0wfQbiGteNBHlJv4eTu8rE8/B7NxUDPpM=
Subject key identifier: D0:8D:20:07:54:53:EE:6E:2A:EF:FF:7A:7D:13:E2:45:53:F3:2B:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EA6D6425C911F0847F7CC6DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 13:49:11 +0000
ROA not before: Wed 30 Apr 2025 13:49:06 +0000
ROA not after: Tue 28 Apr 2026 13:49:06 +0000
asID: 984
IP address blocks: 154.80.182.0/24 maxlen: 24
154.80.183.0/24 maxlen: 24
154.80.184.0/24 maxlen: 24
154.80.185.0/24 maxlen: 24
154.80.186.0/24 maxlen: 24
154.80.187.0/24 maxlen: 24
154.80.188.0/24 maxlen: 24
154.80.189.0/24 maxlen: 24
154.80.190.0/24 maxlen: 24
154.80.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97667 (0x17d83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:49:06 2025 GMT
Not After : Apr 28 13:49:06 2026 GMT
Subject: CN=68122a57-bf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:5b:7b:34:b1:17:46:8c:20:f6:ab:05:3e:
8e:47:48:ce:6d:92:01:49:84:5b:29:c0:e9:74:6a:
16:6c:bb:04:c1:5d:7f:d4:37:b8:47:78:47:a4:82:
cb:89:bc:49:8e:a4:41:b8:65:8c:d7:1a:66:b1:f0:
e4:d4:52:69:4a:77:b4:c9:80:cd:ae:cb:26:eb:61:
7c:f4:41:f7:14:f1:24:b9:ba:ee:a6:4a:41:49:23:
eb:f6:84:79:5e:02:2e:cc:ff:c4:0f:bb:80:30:18:
ee:4c:50:ca:63:f3:ff:47:f0:5d:b9:b2:ab:2b:9c:
ff:ec:07:a3:b7:59:0c:33:3b:07:db:92:cd:f6:f5:
54:de:cc:63:0a:6d:8a:6b:80:26:30:1d:45:80:25:
92:7a:23:2f:b9:84:e5:38:23:51:3b:7e:a2:16:54:
e7:c0:b0:5d:e7:b2:77:c8:3c:6b:81:e5:88:c2:8f:
d7:f3:89:20:9c:18:ae:12:68:e7:04:d5:ed:01:2e:
57:ce:99:74:a4:a4:48:c4:20:91:55:c1:63:3f:5d:
0b:14:c8:8e:6a:16:3f:95:10:bf:f3:9c:7f:1f:94:
8b:2c:8b:db:53:e5:be:e3:6b:8e:36:c2:29:fb:e5:
a0:dc:79:f6:47:0a:f6:c9:d2:b6:71:97:f9:5b:f7:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:20:07:54:53:EE:6E:2A:EF:FF:7A:7D:13:E2:45:53:F3:2B:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4EA6D6425C911F0847F7CC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.182.0-154.80.191.255
Signature Algorithm: sha256WithRSAEncryption
20:18:08:50:04:fd:ad:f6:fb:5d:4b:dd:7f:cf:3c:92:31:dd:
89:ad:5e:74:0f:9f:97:a8:cf:30:69:9b:3b:03:d2:6e:df:19:
64:10:81:00:67:3f:be:7f:90:ff:ad:40:06:35:55:8a:8b:cd:
81:20:c2:d3:69:25:f8:b6:61:d7:21:18:10:39:3c:ba:8a:f4:
e7:b3:30:59:68:74:f8:e1:a9:8a:c6:7d:99:40:b0:70:3f:81:
e9:be:5a:0e:bb:e2:fe:b0:88:d7:c3:e2:10:fb:80:9b:5b:3b:
fa:4c:9c:f6:60:2d:9f:14:16:13:19:78:a0:3d:8c:bc:8c:9d:
b7:05:f3:84:c5:7f:24:09:1d:09:41:2d:d5:46:b5:2d:3e:70:
5c:f7:e9:ae:3e:8f:ea:18:38:e1:94:3b:42:80:d8:8e:9f:0a:
d0:4a:6f:07:1f:a1:15:5c:b3:48:4d:02:db:ab:4e:0d:32:81:
a0:20:3a:33:b0:ad:f7:b8:8e:99:76:eb:f7:b1:e8:38:66:2e:
70:fc:15:1c:86:d6:5e:18:2f:4e:cf:a4:56:fe:0a:28:b6:65:
e9:05:f7:68:0b:0d:48:f6:43:58:86:70:25:04:12:9d:1b:b6:
15:8c:fa:36:81:56:66:2b:7d:e3:10:9b:99:01:a3:41:8c:df:
6c:2d:5d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:29:03 2025 by rpki-client