Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8109621C5811F0A55D4399DAE4EC9C.roa
File: DE8109621C5811F0A55D4399DAE4EC9C.roa (raw, json)
Hash identifier: Dlc0cL79jVK+Nn22KO/RVqnhzvtHaav52vQUeWuosDE=
Subject key identifier: D8:3C:FB:D6:B5:C2:22:D7:2D:15:2F:F0:9E:96:19:94:7C:1C:7F:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017991
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8109621C5811F0A55D4399DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 13:27:27 +0000
ROA not before: Fri 18 Apr 2025 13:27:22 +0000
ROA not after: Sat 24 May 2025 13:27:22 +0000
asID: 54600
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96657 (0x17991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 13:27:22 2025 GMT
Not After : May 24 13:27:22 2025 GMT
Subject: CN=6802533f-fae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:ee:b7:61:20:73:b0:79:eb:27:16:b8:1a:
72:27:06:37:48:3b:61:92:18:16:70:2d:37:fd:b1:
bf:29:44:0c:48:09:6f:28:a1:bc:d3:68:17:09:c7:
65:06:b9:49:99:e3:9b:50:81:22:9a:99:a0:77:62:
ff:54:08:4c:af:a8:50:eb:b3:7d:9e:a6:7c:61:d8:
b0:40:ed:c2:e3:b5:dd:27:7f:3e:31:d8:fe:e5:0a:
c3:b5:01:db:7b:ff:c5:b6:cb:5a:69:a0:c8:76:f9:
b1:ac:91:ab:50:d4:86:35:ba:5a:09:cc:d3:6c:a8:
df:f0:e9:fe:7c:cc:85:02:cf:4d:e5:b9:39:e2:23:
2d:5b:70:7a:6e:dc:e2:ae:fd:62:71:1d:1c:e0:09:
25:cc:97:12:fb:c7:53:5b:ef:d4:d0:80:8c:fe:f4:
53:34:0d:45:07:14:a6:ba:55:14:10:ba:ba:0e:f0:
be:13:35:85:79:b9:8f:de:b4:74:36:67:1f:39:f7:
11:c8:c4:e8:c6:b7:5d:f8:67:5c:b5:5d:29:95:09:
65:09:88:6d:7b:c7:c1:19:cd:5f:b7:c9:35:fa:4c:
50:6f:71:b7:0f:33:8e:bc:e6:2e:9e:92:8b:c9:32:
ca:58:60:64:a3:1c:9e:78:83:2e:58:7d:11:fe:6e:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3C:FB:D6:B5:C2:22:D7:2D:15:2F:F0:9E:96:19:94:7C:1C:7F:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8109621C5811F0A55D4399DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
03:fc:b3:63:01:41:3a:0d:c7:63:36:c6:be:9a:0e:e8:52:c9:
d7:e5:be:b8:bd:6e:f0:22:39:32:93:08:8a:fa:96:f4:bd:ef:
10:06:90:70:83:39:00:3d:44:88:ae:53:b7:63:91:df:db:30:
44:9c:2e:9f:ba:03:e1:85:10:34:76:1a:d9:7c:ab:d9:2a:c8:
78:e1:c9:f0:a5:94:33:15:1a:e6:14:68:b3:2a:af:d7:30:5f:
87:25:d8:a4:65:ee:78:3d:93:59:5b:fd:18:3d:f7:31:51:56:
2f:35:72:4e:60:f7:5a:b6:51:44:57:f0:95:f1:5b:d6:fc:d8:
40:f2:bb:82:ce:f8:c6:e9:ca:49:ab:c9:21:63:bc:8a:10:6f:
e2:bf:7b:6d:34:f2:64:bd:85:68:c5:da:3c:f9:c9:47:94:93:
fd:47:28:4d:cd:73:3d:94:94:70:e1:b0:1d:69:96:2d:43:26:
64:72:68:43:64:77:66:51:f5:9d:7d:bf:79:84:b6:e8:95:34:
07:eb:33:db:11:33:ac:47:c4:e1:6a:77:eb:d0:b3:72:c6:dd:
da:f9:91:c3:d8:da:15:a3:50:b9:9d:63:46:f3:1d:00:44:17:
62:5c:83:ba:bb:17:49:7a:be:91:7e:1f:c9:ec:cc:1b:c3:13:
46:99:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:24 2025 by rpki-client