Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0187FAA8438F11F08B249F9EDAE4EC9C.roa
File: 0187FAA8438F11F08B249F9EDAE4EC9C.roa (raw, json)
Hash identifier: EVobYKFFKR5SQa7YKbWhSeBc4p0NOycfI/5GBZK8VyQ=
Subject key identifier: E5:2C:A7:53:1B:E1:92:29:ED:02:1A:36:63:B0:0F:8D:DA:F2:D0:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01854E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0187FAA8438F11F08B249F9EDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 11:03:14 +0000
ROA not before: Sat 07 Jun 2025 11:03:09 +0000
ROA not after: Sun 31 Aug 2025 11:03:09 +0000
asID: 399077
IP address blocks: 154.91.117.0/24 maxlen: 24
154.91.118.0/24 maxlen: 24
154.91.119.0/24 maxlen: 24
154.91.120.0/24 maxlen: 24
154.91.121.0/24 maxlen: 24
154.91.122.0/24 maxlen: 24
154.91.123.0/24 maxlen: 24
154.91.124.0/24 maxlen: 24
154.91.125.0/24 maxlen: 24
154.91.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99662 (0x1854e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 11:03:09 2025 GMT
Not After : Aug 31 11:03:09 2025 GMT
Subject: CN=68441c72-f114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:d3:ac:70:33:74:00:ab:08:91:6e:69:c0:
40:4d:32:09:31:a7:78:77:32:17:9a:f6:6d:c5:22:
ea:7f:08:71:15:43:67:2e:be:ca:37:b2:46:50:a4:
db:c2:db:c9:4b:3b:00:6a:1b:b7:b1:4f:91:3a:dd:
b5:02:11:28:13:0a:28:5e:5c:39:4e:1c:b8:ca:b8:
c3:ed:b4:57:07:14:65:ed:d2:00:63:1e:e2:c7:2c:
42:aa:b9:84:71:cc:04:fc:ed:30:20:2a:68:60:88:
fe:24:6b:50:56:ec:3e:26:83:95:a8:e1:71:49:e3:
c7:e7:09:a3:97:47:71:85:a4:cd:82:2f:64:e7:4d:
32:ad:3b:23:6c:12:09:ce:d0:6e:28:88:37:40:ad:
07:dc:33:3d:91:6c:91:92:b7:8e:53:77:fe:e1:d5:
91:ec:57:ab:94:a0:01:0f:46:47:b4:b9:9d:6d:39:
99:a3:9b:2a:37:b9:ac:a3:a5:ac:95:e6:8e:12:a5:
b9:4d:4a:f8:3c:47:02:e1:60:0f:91:fd:b5:e0:ed:
1b:92:08:31:cd:2f:9f:78:18:14:46:f5:b6:26:ad:
46:97:51:b3:47:a2:ac:40:98:af:4b:f7:19:51:55:
5e:17:e1:b9:9c:36:d0:d5:25:a4:f8:28:40:04:55:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:A7:53:1B:E1:92:29:ED:02:1A:36:63:B0:0F:8D:DA:F2:D0:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0187FAA8438F11F08B249F9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.117.0-154.91.126.255
Signature Algorithm: sha256WithRSAEncryption
cf:23:02:71:68:99:06:65:23:c1:a0:14:f8:f1:5f:4f:25:cc:
37:7c:47:4b:38:87:4a:9c:5d:b7:20:da:15:e0:46:a8:00:9a:
00:5d:f0:59:bb:1c:fe:03:02:16:5a:b8:8c:49:8d:f1:4c:ce:
7c:39:72:50:2a:a2:2b:09:25:b4:27:22:2b:41:57:d3:da:54:
42:2e:66:66:10:8a:6b:90:96:ac:24:ac:9a:8f:73:55:1f:77:
24:cb:4f:67:86:ad:80:e1:a2:6a:27:e6:d9:8c:1d:53:30:03:
a6:c5:96:ed:2a:11:e1:8c:87:9d:a0:eb:cb:e4:00:b7:16:a7:
ae:e5:3b:d8:c8:46:17:bc:03:b8:c1:85:15:c5:01:8b:ae:ce:
00:7b:6a:6a:74:57:1b:19:74:c2:28:e4:32:be:92:26:a6:00:
37:49:eb:57:d9:5d:0d:47:42:ea:ea:a2:16:6d:5c:9f:1e:70:
71:cf:0d:68:6e:30:03:e3:78:24:79:b1:a5:c9:ed:62:7a:50:
92:ed:e0:8e:32:39:e8:92:8d:43:64:af:63:a9:86:ad:a7:c6:
53:17:34:0c:94:86:68:4c:21:b9:0f:7b:2d:75:c1:a4:ef:d9:
b2:06:d0:d8:0a:32:bf:96:0f:b8:0a:41:37:ba:4b:bc:35:09:
ed:2d:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:16 2025 by rpki-client