Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AC0CB1A41F511F0A2F2D4BADAE4EC9C.roa
File: 8AC0CB1A41F511F0A2F2D4BADAE4EC9C.roa (raw, json)
Hash identifier: AydnbyOFXbu4tYKP0xuiVxZHxSxRQSg5rowalCbBjkU=
Subject key identifier: F9:83:A3:74:99:E7:4E:B9:51:47:FE:DA:D9:01:7C:FF:0E:83:55:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018506
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AC0CB1A41F511F0A2F2D4BADAE4EC9C.roa
Signing time: Thu 05 Jun 2025 10:12:10 +0000
ROA not before: Thu 05 Jun 2025 10:12:05 +0000
ROA not after: Sun 10 Aug 2025 10:12:05 +0000
asID: 203020
IP address blocks: 154.217.7.0/24 maxlen: 24
154.217.8.0/24 maxlen: 24
154.217.9.0/24 maxlen: 24
154.217.10.0/24 maxlen: 24
154.217.11.0/24 maxlen: 24
154.217.12.0/24 maxlen: 24
154.217.13.0/24 maxlen: 24
154.217.14.0/24 maxlen: 24
154.217.15.0/24 maxlen: 24
154.217.21.0/24 maxlen: 24
154.217.22.0/24 maxlen: 24
154.217.23.0/24 maxlen: 24
154.217.24.0/23 maxlen: 24
154.217.26.0/23 maxlen: 24
154.217.28.0/24 maxlen: 24
154.217.29.0/24 maxlen: 24
154.217.62.0/24 maxlen: 24
154.217.63.0/24 maxlen: 24
154.217.128.0/22 maxlen: 24
154.217.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99590 (0x18506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 10:12:05 2025 GMT
Not After : Aug 10 10:12:05 2025 GMT
Subject: CN=68416d7a-1cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:d7:23:a3:19:a3:b1:41:ed:82:24:df:90:
70:e7:c3:d8:c8:8a:b5:c2:83:8b:a6:64:0d:bd:5e:
77:7f:3d:e3:a8:f7:62:ea:7d:2e:0d:50:26:6b:5e:
95:bc:02:fa:23:79:d0:cc:e3:a6:e1:76:28:8f:87:
2e:12:41:17:3c:e1:15:6e:fd:b9:8c:72:40:e9:96:
82:ca:66:13:8d:2d:11:55:4d:4b:9b:32:7d:b1:6f:
03:d3:bf:db:6d:46:9d:d5:c0:eb:61:c0:74:f2:76:
0b:04:e6:0a:3c:ac:98:dd:1f:a4:9e:ec:87:de:80:
cd:1c:c6:b0:8a:46:d6:f8:98:8a:ee:4c:e5:7b:95:
a2:bc:49:62:32:b7:90:2c:f0:c8:14:2a:e8:35:e6:
7d:53:a1:6e:cd:af:50:f2:4a:49:ab:ae:94:56:47:
eb:98:2f:16:46:0a:59:1b:9e:b8:49:2d:e9:51:09:
fd:16:5e:65:5b:ce:fa:b0:3e:2c:6d:cd:ad:ad:9e:
6c:e1:1a:f2:4d:4f:62:c7:2d:e8:e2:85:8a:28:45:
d4:92:ed:93:2f:24:7b:8c:30:06:e2:48:90:ca:81:
4b:75:66:06:82:05:e6:bd:b0:76:10:d7:5e:d0:d3:
23:63:62:59:f2:53:a9:2e:f5:2e:88:f9:4d:0d:e9:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:83:A3:74:99:E7:4E:B9:51:47:FE:DA:D9:01:7C:FF:0E:83:55:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AC0CB1A41F511F0A2F2D4BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.7.0-154.217.15.255
154.217.21.0-154.217.29.255
154.217.62.0/23
154.217.128.0-154.217.133.255
Signature Algorithm: sha256WithRSAEncryption
73:08:ee:4e:2a:35:38:7c:6f:1a:80:39:70:52:62:74:e0:f9:
87:7a:e7:05:ae:22:26:2c:99:68:23:09:9e:5b:d2:57:b7:47:
5f:96:db:f5:f5:ae:27:d4:8b:db:47:30:88:2c:83:47:b3:5f:
cd:25:ea:73:c7:c6:e4:76:cd:e3:a3:0e:16:67:ff:ad:8b:40:
e2:c6:f4:31:6f:ae:23:7b:88:4e:ac:c9:3f:7c:f4:69:3c:f1:
06:aa:e6:12:02:0b:4a:2a:b3:3f:a2:7f:47:6b:47:77:e3:16:
9d:29:58:2a:53:db:e5:96:a1:1b:25:1a:1c:a4:9f:25:45:bf:
9a:87:56:16:89:53:12:ce:18:7d:9d:7f:80:ad:1f:41:01:a0:
80:14:f4:0b:87:1e:3f:17:e6:11:8b:14:f9:6c:63:1e:eb:9a:
50:2e:1a:1b:55:81:87:12:da:b4:a0:47:28:21:e5:0e:a2:b2:
b7:78:e4:3b:33:34:60:7e:83:17:b1:d9:37:be:c8:8f:8d:ec:
e4:cd:e1:e1:dc:30:a8:5c:5e:2d:30:6c:7f:73:22:78:03:02:
df:bb:d8:b3:38:b8:19:fe:4f:ac:c4:d7:98:06:77:5d:33:6c:
60:d3:fb:eb:87:6f:5e:6a:72:1f:bc:78:b0:d5:1b:02:60:3c:
3e:48:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:48:04 2025 by rpki-client