Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A6297C37FC11F0A2A1C8D2DAE4EC9C.roa
File: D3A6297C37FC11F0A2A1C8D2DAE4EC9C.roa (raw, json)
Hash identifier: hTxejGw3/hMHopArN/927rbrxhPc7Oc3DmcqwT6X7OM=
Subject key identifier: 14:F5:E5:68:9F:78:4D:80:B8:30:E2:0F:EA:8E:07:8B:29:1E:3F:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018243
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A6297C37FC11F0A2A1C8D2DAE4EC9C.roa
Signing time: Fri 23 May 2025 17:39:07 +0000
ROA not before: Fri 23 May 2025 17:39:03 +0000
ROA not after: Tue 01 Jul 2025 17:39:03 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98883 (0x18243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 17:39:03 2025 GMT
Not After : Jul 1 17:39:03 2025 GMT
Subject: CN=6830b2bb-8d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:56:ff:76:90:34:1c:18:33:a8:6b:b4:af:
53:4a:78:d9:f3:61:ee:b1:3e:8e:d8:45:43:18:d0:
38:26:e1:e6:2e:59:9d:68:7c:71:0a:97:e7:42:81:
15:e3:8e:f7:f5:aa:b3:b9:5e:3f:20:12:3f:07:57:
08:27:bd:67:1b:6b:22:17:f9:c7:e2:b3:08:69:b7:
c6:78:a2:87:32:b5:0a:50:66:30:fa:a4:c0:a0:49:
35:73:00:6b:9d:5c:52:fb:88:aa:a8:f3:76:7c:dd:
96:b7:f8:84:2f:17:f7:f8:9a:bc:41:69:fe:ff:8a:
5c:15:20:2d:79:cd:42:e6:dd:b9:a6:ad:24:e9:16:
d3:5e:6c:86:64:53:17:a8:9c:d8:8b:8f:05:da:ec:
97:d3:d4:82:6e:f1:4e:9f:5e:bd:b0:49:da:71:65:
f1:52:e8:04:91:ca:89:8b:67:0b:ab:a0:90:28:63:
32:b9:5f:53:13:1e:20:ef:f2:cb:48:25:8f:99:59:
3a:05:6d:13:31:c9:38:4b:9e:e3:a1:52:a4:e6:c8:
56:b6:70:2a:16:fd:3b:ba:02:1d:56:fb:03:64:80:
12:cf:69:6a:d2:f0:41:9d:63:7d:d4:49:e4:ea:81:
33:ea:d4:cc:f2:2f:95:97:aa:0c:b2:32:59:4a:cd:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:E5:68:9F:78:4D:80:B8:30:E2:0F:EA:8E:07:8B:29:1E:3F:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3A6297C37FC11F0A2A1C8D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.233.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
4a:ee:32:03:59:1d:53:55:c4:36:71:70:49:7c:97:60:3d:6d:
f3:8c:34:6b:3b:ac:76:da:de:0f:0d:6f:15:23:28:19:d6:3c:
9d:70:bd:a4:a7:05:5d:b8:a2:37:8b:c7:14:48:6c:e4:40:1f:
2d:14:85:2c:45:a9:6f:2d:b5:68:01:e0:28:0f:08:94:31:02:
d2:25:63:64:26:49:fc:40:c9:9a:b1:79:1d:d1:58:08:7b:57:
0e:96:0e:0a:f5:8a:d9:ec:18:cb:f4:bb:05:75:62:4a:e9:91:
13:3e:30:c3:83:7d:c8:50:e6:02:d9:ff:07:29:96:c4:02:8f:
84:73:23:d2:c4:c2:de:ff:27:1b:4e:84:a3:78:6c:42:3e:b4:
f7:82:76:d2:ee:ab:25:00:6b:fe:04:93:83:87:c6:e1:cc:6c:
92:cd:c2:68:11:9d:82:ec:fb:7e:7f:3a:27:46:dd:f9:05:5a:
77:a0:79:dd:df:f5:fc:be:94:39:e2:09:5d:ee:d4:3e:db:71:
0e:fd:1c:25:50:38:4d:a6:d0:4f:61:0d:43:6b:b9:77:8c:fb:
a9:61:75:0a:58:4c:f4:e5:a8:13:cf:43:7b:4f:37:81:2e:4c:
92:2e:10:f7:db:2a:e7:3f:cd:e8:a5:a6:d2:6e:4d:b9:02:8a:
41:ee:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:49:25 2025 by rpki-client