Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3F45374245711F09B7D3A95DAE4EC9C.roa
File: F3F45374245711F09B7D3A95DAE4EC9C.roa (raw, json)
Hash identifier: fjzQ+jKNojVNC+kWDkYmBaxZQTpL6RpzvlodyeEbB5w=
Subject key identifier: 27:79:9C:EF:14:34:C1:CD:12:73:7C:7A:97:35:56:11:19:7E:B4:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3F45374245711F09B7D3A95DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 17:41:03 +0000
ROA not before: Mon 28 Apr 2025 17:40:58 +0000
ROA not after: Sun 26 Apr 2026 17:40:58 +0000
asID: 984
IP address blocks: 154.206.53.0/24 maxlen: 24
154.206.54.0/24 maxlen: 24
154.207.131.0/24 maxlen: 24
154.207.132.0/24 maxlen: 24
154.207.135.0/24 maxlen: 24
154.212.0.0/24 maxlen: 24
154.212.8.0/24 maxlen: 24
154.212.9.0/24 maxlen: 24
154.212.10.0/24 maxlen: 24
154.212.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97351 (0x17c47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 17:40:58 2025 GMT
Not After : Apr 26 17:40:58 2026 GMT
Subject: CN=680fbdae-a79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:b3:83:24:34:77:4a:72:66:a2:ce:fc:4d:
6e:c1:9b:af:fd:ba:18:8c:f7:dc:07:f3:91:8c:9c:
45:34:40:f1:fe:5f:d8:96:10:bf:9e:f2:f4:41:54:
f4:66:8c:67:07:8e:38:1c:a1:f9:55:23:18:de:48:
c5:bc:db:1e:2f:91:c3:8e:97:ba:12:3f:d4:76:53:
ff:4b:66:cd:a2:9d:64:7b:ad:54:dd:2a:ff:ef:84:
55:33:89:6c:15:78:a9:7b:59:af:50:2e:84:5c:b6:
9d:90:25:04:06:e8:d3:64:ed:af:b6:6f:c1:16:ab:
3b:02:62:fb:08:fc:6a:f5:29:e5:00:80:2c:a8:f5:
86:d2:c7:0b:82:aa:b0:6f:42:24:09:2a:23:a3:f0:
fb:c4:48:86:3d:e9:8b:40:c9:16:9c:a9:4d:74:45:
a0:1b:67:39:b4:85:2f:d0:c7:61:4c:0e:c9:96:db:
c6:ee:31:28:f1:3e:56:47:49:a8:e9:7f:b7:b4:5b:
0c:f6:b4:8f:ff:a7:15:87:b0:3b:dc:83:53:a8:3c:
12:32:56:d6:f3:66:08:f5:f2:c1:d1:d7:5b:86:be:
ee:d7:21:c9:ee:d4:c6:81:68:80:88:0e:e5:d8:e9:
25:ca:27:b3:3a:de:ea:07:fb:c9:df:08:36:67:d4:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:9C:EF:14:34:C1:CD:12:73:7C:7A:97:35:56:11:19:7E:B4:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3F45374245711F09B7D3A95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.53.0-154.206.54.255
154.207.131.0-154.207.132.255
154.207.135.0/24
154.212.0.0/24
154.212.8.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d6:0f:22:e6:b8:f6:10:b4:08:d3:52:ef:d0:ab:fb:95:f5:
42:a4:d1:ca:0c:0a:88:3a:cb:f9:2a:cf:95:a5:37:97:28:fa:
52:81:78:b5:99:49:1d:85:a5:6c:b7:c9:a5:1a:b8:b1:d8:e1:
21:3b:e7:5b:02:cf:8b:a6:b4:9c:63:6c:9c:1e:54:45:5f:63:
4a:d1:61:68:75:12:1d:6b:d9:74:1f:36:f0:a2:69:ca:e6:4b:
2a:8c:56:78:66:19:ec:a9:7d:97:6e:db:59:67:44:cd:3b:8c:
57:d1:a5:09:3f:9b:9b:28:29:ce:b8:ba:b0:a6:55:8c:9a:c4:
c3:38:69:a4:c0:7e:77:f0:29:95:2e:e4:71:34:11:fd:3f:1d:
19:61:bb:1a:80:4e:41:b1:a6:6a:58:24:2c:3a:72:7d:89:f7:
11:c9:a9:d0:b5:48:9a:e3:2c:29:11:17:72:9c:57:76:8f:49:
4a:70:29:20:c3:0e:c5:49:40:cb:7f:c1:04:3e:f5:bf:72:cb:
61:87:4e:09:25:8a:c3:89:66:93:bc:d5:92:ba:7f:db:21:f3:
ac:b6:81:b5:12:68:73:68:fe:9d:16:00:3a:fe:72:c6:7d:d5:
76:69:f5:5a:01:9a:44:29:77:10:b2:fc:2a:8d:11:f9:1d:9a:
09:6c:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:28:01 2025 by rpki-client