Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A450E3C13E811F08E5F658D762E951A.roa
File: 5A450E3C13E811F08E5F658D762E951A.roa (raw, json)
Hash identifier: /h2lxEBe4bfbJkcP1TaIIk05EyknqxPPa09l4t9T8Rc=
Subject key identifier: A6:EB:A6:D4:76:47:BC:1B:06:78:91:52:CB:86:EE:E9:73:DF:E6:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017831
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A450E3C13E811F08E5F658D762E951A.roa
Signing time: Mon 07 Apr 2025 19:41:52 +0000
ROA not before: Mon 07 Apr 2025 19:41:48 +0000
ROA not after: Tue 10 Jun 2025 19:41:48 +0000
asID: 203020
IP address blocks: 154.217.84.0/24 maxlen: 24
154.217.86.0/24 maxlen: 24
154.217.88.0/24 maxlen: 24
154.217.89.0/24 maxlen: 24
154.217.90.0/24 maxlen: 24
154.217.92.0/24 maxlen: 24
154.217.93.0/24 maxlen: 24
154.217.94.0/24 maxlen: 24
154.217.156.0/23 maxlen: 24
154.217.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96305 (0x17831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 19:41:48 2025 GMT
Not After : Jun 10 19:41:48 2025 GMT
Subject: CN=67f42a80-92bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:62:50:0b:21:0b:39:84:c5:44:42:63:dc:
1c:61:7e:05:47:b1:8e:12:e7:2b:b1:a2:03:89:aa:
47:d8:70:c4:84:3a:4a:a3:23:6c:f7:85:3d:fd:02:
22:2e:31:c9:11:a7:e2:5b:ff:05:30:54:aa:17:0a:
30:41:ab:5f:dc:eb:d5:c7:2d:91:94:3a:a0:d6:10:
05:76:28:a9:7f:2e:7a:1f:2b:28:e0:17:8c:e4:43:
90:e9:9a:07:f7:bc:e7:90:b8:5a:07:a5:cb:b6:c9:
66:dd:06:08:fc:fc:82:41:8b:0f:5a:5f:d5:26:48:
f0:b4:fb:7a:67:7d:3a:a0:9c:20:02:f4:ff:c8:25:
cf:a1:b7:a7:f8:ee:86:43:15:2c:06:d7:a8:05:1c:
da:71:0d:59:f1:30:7d:45:ce:0a:56:06:0b:c0:76:
51:17:f2:f4:a7:01:8a:31:c8:1b:9b:72:34:0c:c0:
51:77:e2:dd:b6:7c:d3:c1:7b:ba:48:3f:35:d8:49:
fa:c3:7d:39:d9:c6:64:3e:01:e6:7c:ea:70:19:44:
76:86:a2:b3:22:1c:e9:55:f7:d7:32:9a:eb:0a:ba:
d4:a3:78:a3:09:94:84:68:b0:6e:5b:6c:a6:de:e5:
8c:a8:a6:32:ca:b6:1a:b9:86:32:19:12:d1:bd:f8:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EB:A6:D4:76:47:BC:1B:06:78:91:52:CB:86:EE:E9:73:DF:E6:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A450E3C13E811F08E5F658D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.84.0/24
154.217.86.0/24
154.217.88.0-154.217.90.255
154.217.92.0-154.217.94.255
154.217.156.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:76:7b:7b:6d:16:fb:31:64:f6:79:1c:c1:79:6f:9f:37:7f:
3a:a2:42:2b:0c:9d:58:17:a8:23:85:92:f9:81:9b:0e:34:57:
94:49:5a:b4:9a:ce:58:23:c4:f9:d6:f2:98:2b:57:18:2f:64:
06:7d:8e:12:80:63:80:d9:ce:40:fb:d5:51:75:92:5b:36:18:
d4:06:ed:94:2b:63:cb:2d:18:cd:c7:73:60:26:0c:d6:fa:f5:
a2:fb:41:f6:10:36:f7:35:d9:f4:7e:b8:2e:94:2b:c4:a3:be:
ed:94:31:27:e3:4e:bf:36:c9:77:a0:cd:7c:ae:6b:56:f9:c1:
65:cf:b3:8d:0b:e2:2c:e5:8d:81:41:44:cb:d5:1b:0a:55:be:
94:6b:7a:5c:9e:27:61:6c:ba:b3:b4:6f:ad:a1:97:1b:1e:b4:
37:9b:06:e5:04:50:ea:4a:ee:59:98:cf:a5:e7:24:47:15:c9:
53:a4:dc:8c:56:6e:a5:99:9f:36:13:ac:b0:2b:eb:47:76:8d:
df:eb:27:9b:1e:eb:5a:11:20:62:17:25:ef:49:15:44:b4:20:
1f:b6:37:ce:a0:38:ba:b9:6f:41:75:0e:0e:de:c8:03:20:8a:
f0:c9:36:de:3b:f1:d3:a8:f1:e8:0d:0f:79:b0:c1:5d:77:cd:
b1:e2:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:59 2025 by rpki-client