Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE92D7AC246F11F09EC6BAB2DAE4EC9C.roa
File: FE92D7AC246F11F09EC6BAB2DAE4EC9C.roa (raw, json)
Hash identifier: 9KaeI+fmi8KJfrbtnS1r92h6F+4krqptNHpEH1nZC9Q=
Subject key identifier: F9:98:71:4B:1D:D3:4D:70:DF:AD:39:A2:B0:8B:69:8A:6B:C6:90:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE92D7AC246F11F09EC6BAB2DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 20:33:08 +0000
ROA not before: Mon 28 Apr 2025 20:33:03 +0000
ROA not after: Wed 11 Jun 2025 20:33:03 +0000
asID: 138915
IP address blocks: 154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97399 (0x17c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 20:33:03 2025 GMT
Not After : Jun 11 20:33:03 2025 GMT
Subject: CN=680fe604-6c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:d3:39:41:ba:51:2a:90:11:f4:d1:ab:cd:
a0:2f:8d:65:41:e2:95:04:3b:7d:15:f5:a0:5c:d2:
cc:76:6d:d1:f9:b3:d6:5d:e7:0b:77:0c:b0:1f:26:
61:41:be:34:92:09:71:59:4d:c7:dc:6b:5e:2a:ba:
61:63:1b:e5:fd:67:54:8c:a1:8e:00:af:1b:2b:2d:
5f:35:db:32:e9:13:3d:07:76:d2:a9:07:78:0b:f1:
66:46:03:f3:66:12:91:13:a7:c3:d1:84:a7:a7:36:
e9:88:f1:e9:65:e1:61:da:fd:13:bb:d4:76:5a:a8:
55:a3:ec:0d:ab:58:26:7d:95:e6:9c:fb:0c:24:b4:
c7:6f:39:38:75:fd:5b:86:52:b3:24:fd:7c:72:60:
d5:de:33:f5:c6:e9:4c:9c:df:f7:b1:07:a6:a1:7c:
b9:2d:ee:90:ec:59:f3:86:f2:4a:90:dc:53:e5:5e:
bb:df:47:70:8b:79:77:9b:e3:c2:8d:ff:63:e1:70:
e4:3d:f1:e4:dc:ca:c6:3e:64:f3:c9:ea:ed:d8:bb:
10:77:64:0b:51:30:06:b9:06:ff:c3:15:1c:e4:46:
01:4c:f0:96:80:ad:4c:22:e1:87:42:81:4a:3e:52:
41:9e:b1:39:01:a6:a5:37:46:bb:f8:5c:f6:33:4e:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:98:71:4B:1D:D3:4D:70:DF:AD:39:A2:B0:8B:69:8A:6B:C6:90:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE92D7AC246F11F09EC6BAB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.22.0/23
154.223.26.0-154.223.30.255
154.223.72.0/21
Signature Algorithm: sha256WithRSAEncryption
58:f7:4e:63:ec:4b:85:66:a5:ed:b5:98:df:28:ce:e3:0d:5c:
68:69:7e:ff:37:2e:77:bf:93:d2:59:8a:70:82:b9:6f:77:25:
a8:d0:f9:45:c6:00:a5:08:29:c6:8d:ee:45:43:9f:df:1d:86:
f7:0d:2d:ce:31:78:a9:e6:fc:eb:e8:a0:f4:16:7f:4a:46:b2:
49:93:a5:e3:ce:f5:8b:7d:c9:19:da:0a:67:6a:64:a2:8f:5f:
40:72:45:88:2f:34:a0:4f:7d:15:e3:a0:6d:ac:a3:e2:97:12:
79:06:99:d4:26:be:43:24:45:e8:eb:7a:12:47:fc:ff:04:fc:
9a:f1:b4:d4:3b:9a:6d:87:ca:3c:de:a0:86:6d:58:6c:24:b0:
15:95:9b:c4:af:43:16:67:d8:9f:97:8a:ac:2d:cb:e9:c8:a7:
a8:f8:54:39:6e:25:57:69:59:b7:01:67:b4:cc:c3:d6:d8:2d:
c5:eb:be:f3:29:db:18:40:02:11:2d:1c:e4:11:85:78:ec:03:
84:8d:e1:46:57:1f:81:6f:1f:8e:9a:4c:96:f6:17:3b:90:2a:
b6:73:3f:46:38:18:9e:b5:ce:24:47:f9:e8:85:18:c3:ad:50:
d0:4c:ec:5a:b5:47:bd:c8:7e:14:42:ce:72:c8:b3:fb:a5:97:
f3:68:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:02:00 2025 by rpki-client