Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FACE6AAA25AF11F082C8469CDAE4EC9C.roa
File: FACE6AAA25AF11F082C8469CDAE4EC9C.roa (raw, json)
Hash identifier: isav6bCNz89xQnf3mssQXAc6ifv+z8Upovj9LuxQl0w=
Subject key identifier: 73:B9:B9:A7:4E:B6:FC:41:33:D5:86:E9:02:C9:3A:E7:CA:16:81:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FACE6AAA25AF11F082C8469CDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 10:43:41 +0000
ROA not before: Wed 30 Apr 2025 10:43:36 +0000
ROA not after: Tue 25 Apr 2028 10:43:36 +0000
asID: 17561
IP address blocks: 154.194.67.0/24 maxlen: 24
154.197.84.0/24 maxlen: 24
154.199.49.0/24 maxlen: 24
154.199.51.0/24 maxlen: 24
154.199.52.0/24 maxlen: 24
154.199.53.0/24 maxlen: 24
154.200.93.0/24 maxlen: 24
154.212.142.0/24 maxlen: 24
154.212.143.0/24 maxlen: 24
154.220.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97606 (0x17d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 10:43:36 2025 GMT
Not After : Apr 25 10:43:36 2028 GMT
Subject: CN=6811fedd-6adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:12:ca:81:53:dd:f9:81:b2:0f:f6:f3:56:
59:10:a1:da:85:09:91:07:09:ef:db:2d:63:ac:06:
0b:89:f3:c6:27:7d:e4:70:a6:a1:f6:83:be:d5:72:
3f:f2:ed:bf:c4:8a:0f:49:cb:4d:10:4a:02:7b:a1:
01:b5:64:dd:40:de:88:98:d1:af:d8:d6:67:cb:5f:
d9:be:3d:54:6f:9c:20:08:a9:3e:f6:dd:ba:42:da:
71:93:b1:bf:df:26:de:4f:d3:0a:44:a4:19:ad:1d:
1f:4d:24:cf:cd:1b:00:f4:7a:f7:49:6a:e4:67:4a:
8d:86:68:5a:53:1c:00:ba:ea:19:fb:af:5f:76:28:
7f:90:8e:b0:0f:8c:ec:6f:92:ec:4f:bd:3a:a6:4e:
79:03:73:58:7a:cf:83:10:a5:18:00:83:f8:69:6b:
5d:0b:2b:e6:a7:75:23:98:4a:0d:92:1c:c1:58:61:
e7:43:89:0a:8f:c5:d7:c6:c1:77:a6:54:8f:ea:fa:
bd:22:1b:5b:3e:6f:21:71:0c:a6:e9:79:bc:ae:d2:
a6:5d:a3:22:7b:06:49:57:53:2d:8e:4f:cd:ad:57:
b6:d4:ef:68:ee:25:a7:59:05:2f:ee:90:ed:ad:17:
a4:62:bb:5b:21:97:05:8f:8e:5a:71:5f:2f:7b:cb:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B9:B9:A7:4E:B6:FC:41:33:D5:86:E9:02:C9:3A:E7:CA:16:81:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FACE6AAA25AF11F082C8469CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.67.0/24
154.197.84.0/24
154.199.49.0/24
154.199.51.0-154.199.53.255
154.200.93.0/24
154.212.142.0/23
154.220.3.0/24
Signature Algorithm: sha256WithRSAEncryption
09:00:58:c5:c0:d4:cc:c2:4c:30:c4:31:dd:c1:0f:b0:68:83:
55:db:c7:db:73:ab:32:ea:08:de:a6:16:fd:77:21:a3:8d:3c:
bd:8b:83:5d:02:76:b1:31:30:fb:30:90:35:a1:67:08:61:dc:
7f:3b:7f:f5:3a:d4:75:bf:ab:c0:65:5c:41:3f:fd:9f:4d:5c:
61:1c:ac:d8:0d:3e:e3:74:d4:dc:bf:20:52:ed:d1:bb:44:14:
ae:d4:32:f9:96:c5:07:61:a5:3f:90:52:8e:c7:e0:5a:22:f1:
7b:2c:b7:44:3d:f8:48:49:46:2e:95:fb:25:26:5a:ce:66:26:
c7:94:a0:a7:c4:6c:17:c0:ef:89:85:ee:c4:db:4e:09:98:8d:
05:00:10:b4:cb:7a:38:af:b4:04:31:de:3f:d2:0b:13:6c:75:
db:5b:9a:8c:d0:21:60:98:78:4e:77:25:7b:83:7c:68:16:80:
9b:d7:28:8e:78:99:f5:3b:cb:a8:62:d1:31:a3:22:35:dd:ce:
4f:c2:06:19:0c:f3:0f:b7:6c:f7:af:10:78:bc:ce:25:aa:ba:
15:2b:f0:e5:6c:59:8b:56:3b:7b:57:35:6a:2d:76:30:54:82:
3f:2d:1c:8d:52:3b:45:20:c3:53:95:22:57:03:0b:a2:d0:b5:
23:d6:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:20:36 2025 by rpki-client