Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A83B897E25B611F095274EC8DAE4EC9C.roa
File: A83B897E25B611F095274EC8DAE4EC9C.roa (raw, json)
Hash identifier: 0grcJ+fPKZJJIn6gKoc12rbhHLlZRHw5EZ9YqevRo38=
Subject key identifier: 01:2B:EE:1E:40:E9:D0:28:8D:FD:08:6A:6A:6B:13:30:0A:9F:CC:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A83B897E25B611F095274EC8DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 11:31:29 +0000
ROA not before: Wed 30 Apr 2025 11:31:24 +0000
ROA not after: Wed 26 Apr 2028 11:31:24 +0000
asID: 17561
IP address blocks: 154.198.23.0/24 maxlen: 24
154.198.24.0/24 maxlen: 24
154.198.25.0/24 maxlen: 24
154.198.26.0/24 maxlen: 24
154.198.27.0/24 maxlen: 24
154.198.28.0/24 maxlen: 24
154.198.29.0/24 maxlen: 24
154.198.30.0/24 maxlen: 24
154.198.31.0/24 maxlen: 24
154.200.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97620 (0x17d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 11:31:24 2025 GMT
Not After : Apr 26 11:31:24 2028 GMT
Subject: CN=68120a11-037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:90:a8:c3:5d:4b:b8:5e:a1:ec:a1:09:53:
45:a0:6d:9c:36:ec:f0:80:d0:58:a9:7a:bb:fa:6f:
31:bf:f4:86:93:f6:64:c8:1e:70:d2:fd:fd:0c:2d:
50:65:36:f8:eb:b8:a2:e2:aa:5b:fe:f0:fa:d1:8c:
6a:3b:8c:48:67:1f:66:96:b8:31:1d:b0:ea:87:5a:
22:cc:f6:3b:f1:e1:56:d7:84:47:7f:79:6c:eb:d2:
3d:0f:e8:4f:3d:2c:de:94:70:54:f2:e3:2d:a2:1b:
49:42:61:17:c7:58:ab:47:26:43:44:69:07:58:4a:
21:42:17:42:7e:94:43:5c:39:d8:b3:4c:3d:eb:e9:
a1:74:6d:bc:25:d3:98:59:74:af:61:1b:b8:65:e3:
82:6d:90:1e:6a:d8:62:c2:73:63:b5:7a:b9:01:6c:
e7:60:bc:5b:3a:83:51:cd:43:5b:54:5e:09:83:ca:
6f:3b:22:ae:33:22:51:88:4e:0d:bb:5f:b9:41:cc:
9a:ef:96:c0:04:88:17:17:35:c9:cd:19:7c:5d:8b:
4e:68:01:82:62:d3:2b:35:c3:e8:bb:a4:cf:12:df:
b0:a0:33:20:ad:06:d7:9d:bd:be:24:68:b8:2d:cc:
af:c6:ec:3b:07:fb:51:3f:d8:3c:66:d2:ab:01:33:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:EE:1E:40:E9:D0:28:8D:FD:08:6A:6A:6B:13:30:0A:9F:CC:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A83B897E25B611F095274EC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.23.0-154.198.31.255
154.200.203.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bc:25:3c:fa:b4:c0:3e:68:12:91:51:78:1d:f5:5b:b9:fd:
8a:5f:8c:56:f7:b6:d8:b1:4e:69:bc:60:02:3e:92:0e:2a:38:
60:f9:f7:65:e7:9c:5b:23:c6:f6:04:b7:93:2f:1d:fe:30:8a:
7a:33:d5:0b:61:94:56:25:5c:2b:ad:99:96:3b:5b:66:4d:91:
96:03:ed:ce:85:cb:4d:e3:69:7c:dc:6c:a5:85:89:b8:e6:4f:
86:9d:f8:73:4a:0d:63:7c:48:f5:a7:48:8a:98:c5:49:bf:86:
82:e0:88:60:95:f1:a2:e6:75:0f:2f:0d:4e:38:dd:8b:7b:d8:
2a:61:45:5c:b7:4c:47:b2:ec:22:bf:75:4f:62:96:5d:73:1c:
f9:d3:0b:db:7a:ff:03:74:b7:88:5d:0a:44:3e:4a:94:4e:5d:
e6:28:d6:c7:3a:7e:84:03:ec:82:5d:58:9a:5e:80:09:9d:4b:
68:01:6b:e4:e1:98:d2:65:7e:e0:b7:fd:ee:b5:d5:d1:17:ef:
91:23:5d:cb:6b:d7:6f:31:3a:1c:7b:29:9d:94:c0:2f:64:91:
8d:75:88:ec:47:98:e9:30:da:31:86:48:1c:ef:6f:1f:29:2e:
79:db:77:9a:c6:5e:61:6b:03:71:71:ff:b1:1f:4c:16:04:2f:
50:c3:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:07:32 2025 by rpki-client