Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5AD85E62B2411F0A86423A1DAE4EC9C.roa
File: E5AD85E62B2411F0A86423A1DAE4EC9C.roa (raw, json)
Hash identifier: LFLyohTHCu/O0fQD4nkn9MOCzR8G3kXEFc1kCZUTg4o=
Subject key identifier: 2F:35:E1:47:55:AE:63:7F:AD:68:F8:CD:86:23:C4:10:BE:93:92:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5AD85E62B2411F0A86423A1DAE4EC9C.roa
Signing time: Wed 07 May 2025 09:23:12 +0000
ROA not before: Wed 07 May 2025 09:23:08 +0000
ROA not after: Sat 17 May 2025 09:23:08 +0000
asID: 137443
IP address blocks: 154.223.168.0/24 maxlen: 24
154.223.169.0/24 maxlen: 24
154.223.177.0/24 maxlen: 24
154.223.178.0/24 maxlen: 24
154.223.179.0/24 maxlen: 24
154.223.180.0/24 maxlen: 24
154.223.182.0/24 maxlen: 24
154.223.183.0/24 maxlen: 24
154.223.188.0/24 maxlen: 24
154.223.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98123 (0x17f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 09:23:08 2025 GMT
Not After : May 17 09:23:08 2025 GMT
Subject: CN=681b2680-adba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:61:59:49:0f:b2:7f:61:f2:b5:88:22:cb:
85:21:a9:5b:4c:c5:54:0a:00:b4:03:a0:02:54:ff:
f4:af:e0:11:e6:f7:06:b7:22:24:21:a9:a0:d7:6f:
17:f5:7c:a0:14:50:7a:78:9a:47:2b:82:ff:3e:8d:
f3:d0:6f:5b:0b:0e:b1:12:93:33:23:74:2a:10:1a:
fa:9b:58:ee:0e:1f:07:99:8f:3e:93:42:da:70:14:
18:b7:f8:a9:07:08:5d:d6:7d:ec:55:0e:d6:94:26:
0f:64:86:06:3b:7a:ac:41:c8:8e:42:b6:be:ba:dc:
a5:b5:cc:1d:1a:b4:19:09:9c:37:c2:cc:61:6d:cf:
43:05:62:d4:be:dc:bf:ae:3a:cc:cc:63:76:50:d1:
d3:8a:81:41:d8:58:50:09:34:04:47:74:46:b3:8d:
d4:e2:da:95:43:bc:a6:4a:d9:7e:cf:26:41:fe:82:
94:7d:06:48:a6:54:89:42:61:a5:76:f4:43:f9:49:
45:aa:f7:e8:48:77:a4:e8:b1:31:e7:1b:7a:7f:fc:
d0:55:94:2f:65:84:b4:8d:bf:e3:f1:af:0a:7c:94:
0a:54:3e:e7:05:c0:ed:d8:52:da:45:58:4d:5d:c8:
0c:fb:63:19:10:92:89:fb:9f:3f:5b:2c:f3:de:ca:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:E1:47:55:AE:63:7F:AD:68:F8:CD:86:23:C4:10:BE:93:92:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5AD85E62B2411F0A86423A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/23
154.223.177.0-154.223.180.255
154.223.182.0/23
154.223.188.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:13:b7:68:69:cc:e3:c2:0e:24:ea:75:a7:2b:39:6c:17:76:
64:71:9a:00:aa:e5:51:d2:7c:b1:a2:48:57:3c:9e:1b:91:a1:
e6:d3:36:f7:4a:7c:8e:df:11:02:96:66:df:e3:ae:9d:53:4a:
40:6f:2f:7f:89:f5:e6:e7:b3:31:af:99:bd:0f:c7:9b:c2:df:
12:ec:cf:98:25:a0:68:f8:49:af:3a:e5:8a:b0:98:d4:4c:7b:
58:e4:8e:d5:d2:d6:9b:74:16:f7:07:99:0d:c2:0a:8d:b5:cb:
8c:16:97:f5:63:45:39:15:a4:83:78:ce:0f:59:67:71:8f:0a:
e7:55:8f:5c:47:12:c3:07:8c:e7:63:fb:4b:c3:68:56:61:cf:
6d:85:30:ca:d2:3e:29:2a:b3:2d:50:18:bb:94:ce:6e:a4:4e:
0a:9f:14:16:e1:4c:42:85:e8:43:c2:9d:3f:de:dc:71:84:b3:
00:be:e4:75:74:45:53:76:bc:b0:7c:ac:8b:03:12:06:88:cb:
14:81:97:32:d4:cc:32:58:f2:9b:4e:64:dc:b8:5c:de:5e:7e:
b5:9c:d0:3d:1d:a4:6b:28:fe:a3:3a:4f:12:19:24:a6:ce:19:
3a:a9:c1:16:3f:80:23:d7:b2:e3:d1:b3:ff:d1:24:8c:bf:c8:
e8:96:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:53:51 2025 by rpki-client