Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F229CC44248A11F0B662ECE3DAE4EC9C.roa
File: F229CC44248A11F0B662ECE3DAE4EC9C.roa (raw, json)
Hash identifier: KvlDfgvkGFto6I25fsdILuZuOy55KY6aDXTqox86eV8=
Subject key identifier: EE:17:63:C1:93:66:AB:20:F7:17:CE:9E:60:83:7C:D2:C4:F4:11:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F229CC44248A11F0B662ECE3DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 23:46:04 +0000
ROA not before: Mon 28 Apr 2025 23:45:59 +0000
ROA not after: Tue 17 Jun 2025 23:45:59 +0000
asID: 138915
IP address blocks: 154.206.56.0/23 maxlen: 24
154.206.58.0/23 maxlen: 24
154.206.60.0/23 maxlen: 24
154.206.62.0/23 maxlen: 24
154.206.96.0/23 maxlen: 24
154.206.100.0/23 maxlen: 24
154.206.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 08 May 2025 00:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97441 (0x17ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 23:45:59 2025 GMT
Not After : Jun 17 23:45:59 2025 GMT
Subject: CN=6810133c-61d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:fd:72:0b:c1:10:a3:82:c8:43:00:08:da:
5b:5a:ad:c7:eb:23:15:8d:65:fa:8b:68:b0:49:96:
fd:6e:66:fd:5e:e1:3a:6b:45:cf:44:3f:8c:57:b9:
94:ed:c0:7a:3e:ff:27:00:9e:02:54:89:62:b5:84:
06:0c:76:84:d3:f5:93:b3:c2:41:19:81:f0:42:b2:
38:fb:89:6d:cf:8a:9e:97:b0:12:79:a2:44:2f:6c:
7f:7b:75:42:38:54:b3:ab:e2:bd:85:11:45:1b:4b:
84:91:b7:31:7d:fc:17:43:74:55:b0:fb:88:88:2a:
9c:e4:57:65:dc:12:5b:2a:b7:cb:c6:4c:5c:ab:85:
09:b9:6f:4b:19:5e:41:f6:be:6a:a6:c6:b8:72:de:
7a:58:80:0d:9b:bb:b6:47:c0:b0:7c:76:2d:e8:bb:
f0:c4:8f:78:4e:dc:d6:85:ea:e1:b6:5d:bd:1b:aa:
36:7f:8c:a7:e0:6f:71:84:d8:b4:91:fe:29:34:04:
1c:95:9c:68:3e:19:c4:b1:50:f2:7b:79:48:0d:ce:
67:16:29:1e:79:85:d0:ac:93:44:04:62:8f:9c:2a:
21:a3:c8:b5:db:8a:9e:af:99:2a:e3:67:6e:33:8b:
7f:60:d9:dd:81:40:18:f0:5e:ae:a9:84:2e:4f:af:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:63:C1:93:66:AB:20:F7:17:CE:9E:60:83:7C:D2:C4:F4:11:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F229CC44248A11F0B662ECE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.56.0/21
154.206.96.0/23
154.206.100.0/23
154.206.107.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:84:51:32:dd:ad:a9:c4:61:b1:e4:d1:f2:a5:07:ac:4f:0c:
a1:49:75:cc:6c:90:c0:fc:b6:f7:47:dd:52:10:44:23:51:ea:
99:60:14:4d:8b:68:02:7a:49:6a:46:ac:4b:82:41:a2:c1:56:
a9:8e:db:47:25:81:f9:c8:68:31:a2:90:3f:d2:30:d2:89:83:
a1:a8:8d:74:cd:80:66:a3:4c:d8:71:3c:38:1a:71:4f:a6:f5:
6d:39:f0:14:a0:04:a8:db:c4:e3:93:ea:0a:3f:24:b6:4e:e0:
2a:d5:61:f3:cf:0e:1f:6a:b4:fb:7f:06:36:8f:49:72:75:c1:
43:fe:9a:22:7c:98:63:db:81:2d:c6:30:11:30:6a:bf:b9:1d:
9a:0f:64:87:01:b1:4f:6f:3e:96:e1:dc:f4:1c:51:e5:6f:e8:
d9:30:fc:68:d3:67:a9:83:df:50:ce:87:ef:7d:04:90:16:d1:
7b:77:10:0c:6d:59:ab:f1:2d:69:a4:3d:46:6d:66:62:d0:4d:
5e:b7:85:19:83:1d:4c:ca:24:90:e8:0c:71:52:3f:82:89:a6:
c0:72:ea:8a:4b:67:64:64:b5:6a:56:b7:d8:ff:5f:e2:90:fc:
1d:12:66:06:31:4a:c7:56:7b:73:d5:ad:b7:4f:c9:a1:c6:57:
23:73:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:21:42 2025 by rpki-client