Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED25C0B6316B11F085CD82A2DAE4EC9C.roa
File: ED25C0B6316B11F085CD82A2DAE4EC9C.roa (raw, json)
Hash identifier: QUGMG7mUiSq/mmjw/V1LWPf0Gcy/WUdJ/kIOxEQB7hg=
Subject key identifier: AD:46:0C:CD:7A:EC:56:8E:B5:33:1D:D2:BB:DB:5F:C2:8C:A5:25:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED25C0B6316B11F085CD82A2DAE4EC9C.roa
Signing time: Thu 15 May 2025 09:06:46 +0000
ROA not before: Thu 15 May 2025 09:06:41 +0000
ROA not after: Tue 24 Jun 2025 09:06:41 +0000
asID: 18013
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98494 (0x180be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 09:06:41 2025 GMT
Not After : Jun 24 09:06:41 2025 GMT
Subject: CN=6825aea6-8c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:18:65:8e:b8:10:14:91:e9:53:65:c5:23:
df:fa:28:74:b9:be:02:78:8a:3c:f8:b8:97:86:18:
2b:d8:71:21:75:5c:9d:12:87:f6:6e:af:fb:2a:a6:
d5:5c:7d:41:0a:7a:72:99:c9:1d:bf:40:d8:61:5a:
14:95:7c:9a:87:81:82:1c:37:7d:01:8d:5a:e5:15:
b5:67:64:64:e8:ad:2a:16:da:f2:53:a7:42:57:75:
82:ad:bd:01:94:12:ee:f6:ff:91:e4:d9:d9:f4:8b:
65:fe:b0:ac:e5:a7:ad:0c:a2:e6:39:7e:3f:34:b2:
f5:46:c6:9b:13:ea:e8:79:6f:9e:81:e5:e5:af:c2:
34:e4:ec:c2:d3:c9:68:63:48:f4:09:37:71:b0:c5:
32:aa:11:01:64:00:e3:5c:40:4b:08:9e:6c:4e:90:
8f:5a:ac:0c:8a:52:cb:fd:5c:22:0e:6b:d3:78:39:
b2:21:ad:20:9a:39:2c:b8:98:ca:b9:10:eb:16:a3:
cd:3e:d5:21:04:bd:54:a7:09:13:05:4f:0c:d1:2f:
e1:24:1e:42:64:06:21:3e:75:ff:58:0a:53:79:66:
5f:9e:54:ce:2d:5a:3a:cc:e7:f4:e3:8e:75:72:b0:
de:65:c1:11:01:0c:81:2b:6b:bb:27:b4:96:ad:40:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:46:0C:CD:7A:EC:56:8E:B5:33:1D:D2:BB:DB:5F:C2:8C:A5:25:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED25C0B6316B11F085CD82A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
66:b9:3b:c9:88:48:ea:52:d7:0f:d6:fd:9c:9e:22:4a:e2:c8:
8b:a9:10:cc:92:fb:a6:f9:8a:59:e6:b6:f7:68:a2:ad:af:40:
26:22:bc:22:ba:78:f7:5d:7a:24:57:c7:30:67:10:3f:97:09:
7f:db:fc:22:5d:9c:1a:e4:f8:1f:d4:31:20:f9:41:d8:03:13:
a3:96:5e:62:cd:08:d0:93:83:44:3a:ce:0e:19:96:75:35:70:
49:c9:80:a5:bb:95:f6:72:70:68:9e:a7:d9:98:e0:94:c1:e8:
13:8e:fc:a2:c9:54:23:9c:7c:50:94:6d:50:a9:72:d4:82:64:
19:74:87:93:57:17:15:b4:25:a5:55:fe:13:b5:0e:f4:5c:6b:
0a:4c:a5:5f:21:7a:3e:a4:b6:76:28:1b:dd:68:08:f9:3a:a2:
8d:3c:d7:d2:a8:74:fa:52:c3:c0:16:42:4f:4e:44:50:89:bd:
34:68:34:3b:92:ed:3a:36:24:d3:dd:e5:76:69:57:7f:d9:47:
95:66:0a:a1:be:c3:f6:4c:1d:7b:65:b7:42:16:35:a3:c1:ca:
90:d9:91:f0:53:25:05:05:2a:42:ce:32:23:2c:cf:b9:90:a6:
d0:ac:ab:35:42:03:8c:e8:f9:c6:bc:b2:dd:47:98:fc:a6:fe:
1e:c4:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:42:47 2025 by rpki-client