Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2311196298E11F082C3FA83DAE4EC9C.roa
File: D2311196298E11F082C3FA83DAE4EC9C.roa (raw, json)
Hash identifier: hSWAqSoM5B+jooONkpnr5zAz/zr+qxWztAfpuJfIHDQ=
Subject key identifier: 1D:7F:FC:67:7F:F3:07:8C:A2:02:7C:36:60:F1:15:74:89:38:DF:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2311196298E11F082C3FA83DAE4EC9C.roa
Signing time: Mon 05 May 2025 08:56:24 +0000
ROA not before: Mon 05 May 2025 08:56:19 +0000
ROA not after: Thu 10 Jul 2025 08:56:19 +0000
asID: 203020
IP address blocks: 154.217.5.0/24 maxlen: 24
154.217.6.0/24 maxlen: 24
154.217.18.0/24 maxlen: 24
154.217.19.0/24 maxlen: 24
154.217.20.0/24 maxlen: 24
154.217.47.0/24 maxlen: 24
154.217.48.0/24 maxlen: 24
154.217.49.0/24 maxlen: 24
154.217.50.0/24 maxlen: 24
154.217.51.0/24 maxlen: 24
154.217.52.0/24 maxlen: 24
154.217.53.0/24 maxlen: 24
154.217.54.0/24 maxlen: 24
154.217.55.0/24 maxlen: 24
154.217.56.0/24 maxlen: 24
154.217.57.0/24 maxlen: 24
154.217.58.0/24 maxlen: 24
154.217.59.0/24 maxlen: 24
154.217.60.0/24 maxlen: 24
154.217.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98035 (0x17ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 08:56:19 2025 GMT
Not After : Jul 10 08:56:19 2025 GMT
Subject: CN=68187d38-7f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:ab:83:af:86:94:a0:39:6f:c2:e3:44:60:
0a:2e:6b:00:17:68:d2:0f:86:1f:12:fc:6f:9b:51:
7a:f8:c5:41:3a:8f:19:d4:7a:13:2b:cb:57:e9:ec:
24:fb:51:49:f7:2e:4e:48:cc:24:83:10:12:5f:64:
fa:93:4c:ff:55:0e:b0:dd:2c:da:d7:1e:d6:a9:cf:
32:71:64:c4:62:51:42:b8:73:3d:70:79:1d:49:15:
86:1d:30:04:4c:d5:d5:92:b5:7a:f5:ac:4e:54:25:
16:b2:99:77:4a:95:5b:f0:72:11:9d:9f:14:60:04:
7b:06:b3:61:8c:b1:ff:9b:2c:9a:92:b7:20:94:60:
1f:af:f7:e4:28:23:fb:21:b4:77:df:11:7f:f0:13:
fe:f2:7d:31:f5:c6:9e:d4:89:08:b6:8d:84:90:ea:
53:30:ff:f4:3c:8f:9f:f3:87:87:8e:99:2b:7e:85:
69:c1:56:5a:39:15:07:b1:62:8f:e1:dd:d0:36:13:
8c:19:b2:95:4c:f1:e3:59:54:76:15:97:e3:e2:71:
fd:3e:ce:81:2b:c8:f2:59:69:85:00:ef:22:d0:47:
da:73:aa:98:0d:37:bb:9b:32:20:57:56:5d:7b:08:
c6:ac:3c:a4:87:46:66:00:24:3e:2d:79:6f:1c:97:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7F:FC:67:7F:F3:07:8C:A2:02:7C:36:60:F1:15:74:89:38:DF:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2311196298E11F082C3FA83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.5.0-154.217.6.255
154.217.18.0-154.217.20.255
154.217.47.0-154.217.61.255
Signature Algorithm: sha256WithRSAEncryption
4f:28:25:be:3e:79:ea:43:bc:8d:5a:29:fc:da:39:f5:ee:f6:
d1:dc:40:50:16:c6:9f:92:b0:0f:bb:ab:f1:a8:b4:f4:bf:ea:
5e:ff:d0:24:53:83:3e:59:86:09:f2:38:71:eb:c1:45:6d:d1:
cb:6f:59:06:0b:ab:34:7c:fc:bc:37:b9:79:94:b6:63:07:22:
9d:4e:87:b6:a0:14:76:15:e0:32:85:7a:8d:be:c4:e0:f6:48:
6d:04:9c:51:b3:83:9d:45:59:bf:f6:4c:e9:6d:90:60:cc:8f:
1c:09:2b:9c:29:d9:2c:d5:0a:4b:c0:a4:ac:c5:a7:79:b7:d8:
69:e5:47:ce:b2:f1:c5:b8:32:8e:ab:37:dd:6a:f0:4a:28:80:
19:73:6f:6d:32:bc:9f:ce:33:61:47:f4:80:62:34:8a:d3:c5:
90:4c:12:6d:77:e3:37:c0:e3:f7:a3:ee:0f:b3:6d:1c:ca:c8:
d1:21:35:a8:29:fd:60:eb:30:a2:62:f5:6a:19:6d:5b:4c:4e:
43:f7:61:aa:86:29:ab:54:3a:e4:15:e9:68:e2:bd:ce:22:20:
eb:75:f3:8c:80:5d:4d:e1:c4:02:3d:08:e4:e5:5d:3b:6c:a2:
40:c0:d0:9e:49:bd:df:c7:c9:cd:3a:be:dd:7c:85:66:b1:c6:
ad:4e:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:33:01 2025 by rpki-client