Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/9191CE4835BC11F0ADC413F2DAE4EC9C.roa
File: 9191CE4835BC11F0ADC413F2DAE4EC9C.roa (raw, json)
Hash identifier: tjdydV2+knDF3anDJwSg6GbYJfchyTmFXbZYgjHsjFs=
Subject key identifier: CD:A4:09:BA:74:38:E3:27:8B:93:61:45:FB:2C:82:F5:5B:81:CE:1E
Certificate issuer: /CN=F363A17BAF/serialNumber=9AE827D4B934C1487017971C276773226F488FC2
Certificate serial: 02
Authority key identifier: 9A:E8:27:D4:B9:34:C1:48:70:17:97:1C:27:67:73:22:6F:48:8F:C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/9191CE4835BC11F0ADC413F2DAE4EC9C.roa
Signing time: Tue 20 May 2025 20:54:06 +0000
ROA not before: Tue 20 May 2025 20:54:02 +0000
ROA not after: Fri 31 May 2030 20:54:02 +0000
asID: 327716
IP address blocks: 154.70.144.0/21 maxlen: 21
154.70.144.0/24 maxlen: 24
154.70.145.0/24 maxlen: 24
154.70.146.0/24 maxlen: 24
154.70.147.0/24 maxlen: 24
154.70.148.0/24 maxlen: 24
154.70.149.0/24 maxlen: 24
154.70.150.0/24 maxlen: 24
154.70.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.crl
rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.mft
rsync://rpki.afrinic.net/repository/afrinic/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 05:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363A17BAF, serialNumber=9AE827D4B934C1487017971C276773226F488FC2
Validity
Not Before: May 20 20:54:02 2025 GMT
Not After : May 31 20:54:02 2030 GMT
Subject: CN=682cebee-4b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:96:76:0c:a7:b4:31:fa:70:fd:ea:3c:21:
a1:51:f7:9a:4e:73:a0:8c:a4:9a:36:8e:2c:d9:89:
44:63:5d:77:14:87:2a:3b:ac:79:92:e5:48:74:5a:
07:a0:63:20:7e:44:68:54:85:5e:50:98:b6:e4:26:
47:7e:31:84:93:af:2b:24:9f:7d:23:fe:77:9b:c6:
0b:66:fe:d1:33:3f:64:63:4a:3c:e1:e7:6f:33:48:
ad:ab:12:80:7b:61:78:84:22:42:2e:c4:3c:b4:f6:
14:15:88:88:75:8b:47:61:38:96:c2:9c:85:5a:f4:
dd:44:f8:1d:ed:70:13:ce:c9:20:49:cd:40:93:10:
2b:13:6c:26:2b:48:6e:b1:bc:57:e5:36:2b:e5:01:
63:d4:64:01:44:d6:8c:0f:fd:fa:26:11:96:bb:ef:
4d:a8:10:31:d6:a2:dd:3b:04:0c:11:ab:80:4f:ce:
e3:19:9d:f6:45:9c:33:94:2b:47:8c:ed:72:86:01:
92:40:a5:5b:f2:b6:a7:22:e5:1b:06:da:6c:ab:41:
44:13:66:17:b0:8c:a5:46:28:61:ba:c2:08:9a:32:
52:c1:8a:a3:04:da:e7:53:22:c5:b8:7f:7a:a0:d5:
a6:72:9f:3b:17:d4:5f:36:0b:28:b0:82:bf:ff:b3:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:09:BA:74:38:E3:27:8B:93:61:45:FB:2C:82:F5:5B:81:CE:1E
X509v3 Authority Key Identifier:
keyid:9A:E8:27:D4:B9:34:C1:48:70:17:97:1C:27:67:73:22:6F:48:8F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mugn1Lk0wUhwF5ccJ2dzIm9Ij8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A17B/5F244F0E35BB11F0A9427EEBDAE4EC9C/9191CE4835BC11F0ADC413F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.144.0/21
Signature Algorithm: sha256WithRSAEncryption
62:9d:90:98:ae:99:d5:e6:45:cf:af:57:34:f9:e5:70:f6:f3:
25:bd:fc:ed:84:25:87:79:c7:12:14:61:73:c5:ae:19:bd:05:
f3:e2:4a:eb:90:95:a6:d4:fd:f6:78:b9:62:01:c3:5e:b9:3f:
ee:1f:02:a1:7c:04:a0:df:03:27:f7:ac:56:ed:9e:7c:ec:b0:
45:0f:9e:66:32:d3:12:5c:4c:2e:f4:a8:75:81:e8:80:47:2c:
2f:d1:e1:84:c1:5a:2e:c8:cb:22:7e:1e:4b:ad:d7:81:9e:22:
3d:12:1a:54:31:a1:9d:bc:a3:c6:6f:1e:ec:81:bc:b8:b9:60:
2f:e9:fb:9e:6a:30:f4:e4:9f:cd:18:95:dc:fb:44:2a:67:1b:
9a:fc:d0:87:72:ff:62:62:e7:28:17:c4:0e:80:e3:76:3e:6a:
4a:9e:75:21:36:86:d3:46:17:b6:bb:9b:a9:ef:60:46:4a:ca:
71:bb:1a:b4:a8:9f:d2:48:a0:1f:45:ba:b1:70:23:8e:3b:6b:
9c:5c:7a:1c:2c:6b:59:1e:d2:7b:5b:ca:09:84:53:e3:2e:08:
d4:ae:2e:0f:a5:4e:4a:7c:7a:1d:5b:33:67:ea:37:c2:9c:43:
99:f7:19:af:8d:bd:fb:50:01:a7:9a:cc:4d:91:a9:24:b2:55:
30:92:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:09:45 2025 by rpki-client