Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5ABB4DC25C011F08E16328BDAE4EC9C.roa
File: E5ABB4DC25C011F08E16328BDAE4EC9C.roa (raw, json)
Hash identifier: /YRYRm2twjTqHHXwNwK6JIwei/ONjfref/RW7bB0ZKU=
Subject key identifier: 0D:A7:8F:75:F1:31:42:48:D0:D8:96:B9:00:03:EA:A0:A3:20:2F:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5ABB4DC25C011F08E16328BDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 12:44:47 +0000
ROA not before: Wed 30 Apr 2025 12:44:42 +0000
ROA not after: Sun 26 Apr 2026 12:44:42 +0000
asID: 984
IP address blocks: 154.83.224.0/24 maxlen: 24
154.83.226.0/24 maxlen: 24
154.83.229.0/24 maxlen: 24
154.83.230.0/24 maxlen: 24
154.83.234.0/24 maxlen: 24
154.83.235.0/24 maxlen: 24
154.83.252.0/24 maxlen: 24
154.84.147.0/24 maxlen: 24
154.84.172.0/24 maxlen: 24
154.84.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97644 (0x17d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:44:42 2025 GMT
Not After : Apr 26 12:44:42 2026 GMT
Subject: CN=68121b3f-654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:2c:93:96:1b:cf:b7:28:1a:61:8e:df:9c:
57:73:7f:9f:cf:65:e8:3e:85:f3:91:6d:71:bc:cd:
66:86:3f:b2:30:50:86:59:d4:a6:81:f7:f7:b1:8d:
70:79:1c:b9:bb:e0:ca:7f:92:c8:36:7f:8d:5e:e1:
38:45:4a:09:93:1f:1a:5a:d7:9f:fe:cf:7b:81:28:
2b:43:29:8e:6c:50:4f:0b:15:36:13:23:83:b9:6d:
f2:71:f1:10:57:8f:6f:9e:fb:d3:77:e0:da:dd:8e:
80:ec:50:99:41:81:7f:c3:0b:11:40:5c:07:2f:d9:
73:87:60:f2:7e:4f:f4:99:d4:16:af:25:76:21:03:
3c:5d:b7:56:20:e1:52:48:79:16:f2:82:21:ab:cd:
0f:2d:21:92:4f:9e:e3:c1:95:83:56:04:3a:9f:f4:
94:11:2b:f3:71:8c:bc:9c:2c:b9:b0:56:98:6d:ed:
ff:99:6c:c0:6e:40:69:09:be:ec:ca:67:91:a6:5f:
de:a5:0d:59:a3:cf:fd:ad:10:52:e9:d2:27:85:3f:
6a:89:a1:43:45:3d:89:b0:38:0c:58:5a:1a:7b:12:
9b:56:26:0b:c8:d2:eb:1d:2c:06:b1:38:50:c1:fa:
d1:bb:5c:f0:90:2e:56:3e:99:04:f6:36:ae:54:2f:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:8F:75:F1:31:42:48:D0:D8:96:B9:00:03:EA:A0:A3:20:2F:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5ABB4DC25C011F08E16328BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.224.0/24
154.83.226.0/24
154.83.229.0-154.83.230.255
154.83.234.0/23
154.83.252.0/24
154.84.147.0/24
154.84.172.0/24
154.84.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:01:7f:73:b7:1e:4b:ee:2f:7b:bd:c6:4f:e7:9f:91:54:ea:
d7:f4:f2:c8:2a:70:12:ff:0d:40:76:42:46:51:7d:32:3b:64:
54:1d:5e:52:c6:1a:16:8f:e5:f8:09:b7:a9:25:b3:83:e2:a9:
37:b0:07:5e:88:5f:d3:22:eb:72:11:fb:62:b4:b3:5c:4e:c7:
05:da:65:5b:19:83:42:33:32:48:0b:7b:17:6c:a4:33:2f:1f:
e7:f4:ff:9f:bb:f0:08:da:38:a8:3b:da:f0:8e:80:a7:ed:ed:
93:77:38:59:0f:35:17:f9:db:1c:24:5d:91:3c:b5:b6:1c:07:
41:6a:0d:77:02:04:58:b6:51:18:dd:3f:92:c2:bf:29:22:9e:
b1:38:8b:34:74:5b:16:08:52:a9:ce:da:f3:56:53:51:ec:cc:
6d:b1:82:ac:5e:ca:9b:a5:5c:97:3a:74:02:6e:48:3b:84:69:
93:2c:8b:e3:7a:93:a0:cb:07:10:74:35:28:14:1e:b1:bf:79:
1b:7e:cd:0d:f2:56:bf:63:7e:7b:7b:07:4b:8a:e4:57:7b:a8:
58:4f:25:2e:4c:c4:06:88:94:60:09:88:a7:f7:38:ac:44:69:
9a:d6:fc:b0:92:e4:95:3f:1e:d5:61:66:2c:24:41:77:ca:19:
cb:60:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:56:51 2025 by rpki-client