Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0206C0903BA611F09B5401B4DAE4EC9C.roa
File: 0206C0903BA611F09B5401B4DAE4EC9C.roa (raw, json)
Hash identifier: 2SnFigvle+tT/wvSVq2wSNDDovNChkA9GbysbN9sOyo=
Subject key identifier: F9:0B:B1:BD:35:77:2F:22:34:7A:07:03:22:60:49:81:A9:6D:AC:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018330
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0206C0903BA611F09B5401B4DAE4EC9C.roa
Signing time: Wed 28 May 2025 09:27:44 +0000
ROA not before: Wed 28 May 2025 09:27:38 +0000
ROA not after: Sat 07 Jun 2025 09:27:38 +0000
asID: 9009
IP address blocks: 154.216.194.0/24 maxlen: 24
154.216.202.0/24 maxlen: 24
154.216.207.0/24 maxlen: 24
154.216.208.0/24 maxlen: 24
154.216.209.0/24 maxlen: 24
154.216.214.0/24 maxlen: 24
154.216.223.0/24 maxlen: 24
154.216.228.0/24 maxlen: 24
154.216.234.0/24 maxlen: 24
154.216.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99120 (0x18330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 09:27:38 2025 GMT
Not After : Jun 7 09:27:38 2025 GMT
Subject: CN=6836d710-4e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:be:9e:4c:6c:fb:78:4d:d2:4e:6d:9e:dc:
ed:3e:81:1c:00:bf:35:f4:d9:16:fd:43:f4:8a:6e:
61:44:53:1d:37:89:02:d4:68:bc:c8:b2:5d:f1:84:
f8:dc:9c:49:de:f3:38:89:a5:f2:f1:63:bd:75:0a:
ea:39:99:74:07:43:15:4e:27:2c:9c:dd:f2:17:17:
bb:dc:12:d0:34:da:8f:af:58:22:bc:21:5c:f7:4f:
4c:3b:86:97:72:11:41:98:57:56:24:e5:3a:5a:7a:
2c:1d:68:2b:6b:4e:82:33:07:11:50:ab:76:db:77:
c0:b3:6b:13:c3:4b:6e:bb:ae:6d:8d:90:46:11:90:
ac:a9:b6:84:9c:bc:10:0f:54:b5:48:d6:14:09:84:
49:02:75:0d:1a:a6:ca:0d:a3:7d:ac:20:6c:21:ec:
d8:17:23:c2:d1:27:59:55:d3:e9:74:4e:e6:fb:28:
7a:1a:08:7b:d8:b4:db:67:eb:d4:14:dc:15:24:e7:
7e:29:6b:5d:c5:3c:25:63:02:a3:89:e7:f0:d5:80:
7d:1a:d9:b5:4f:ed:7b:b0:c9:b3:4f:a1:c1:0a:67:
ae:e9:9f:fa:ab:4b:99:97:3a:94:24:da:92:12:9e:
a1:94:cf:30:a9:f1:95:12:ac:f9:14:43:0f:82:12:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0B:B1:BD:35:77:2F:22:34:7A:07:03:22:60:49:81:A9:6D:AC:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0206C0903BA611F09B5401B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.194.0/24
154.216.202.0/24
154.216.207.0-154.216.209.255
154.216.214.0/24
154.216.223.0/24
154.216.228.0/24
154.216.234.0/24
154.216.250.0/24
Signature Algorithm: sha256WithRSAEncryption
12:97:8e:65:94:bf:e5:c5:73:99:7a:53:8d:20:c6:02:07:c1:
a5:de:ef:d7:e8:e0:29:2e:72:51:60:fe:81:d3:3f:59:04:f1:
51:f7:c1:f9:7d:4a:42:7f:20:5a:1d:a6:71:1e:1b:69:e6:86:
6f:a7:f3:90:f2:45:94:93:a8:39:a7:ed:0e:8b:1b:02:38:63:
ef:ca:27:49:cb:c1:00:d7:2d:6d:c0:02:e8:2c:54:e3:21:30:
8b:e0:2e:87:19:ca:41:c7:31:20:66:6f:6e:18:b3:ff:04:3c:
e4:55:8f:f0:7b:e8:00:c1:02:b0:97:95:e5:8e:2a:db:1b:0d:
11:db:38:59:02:4e:bb:65:71:bd:26:39:09:5e:98:ac:88:4c:
da:70:49:8f:b9:26:84:b3:4c:5c:72:b3:b5:ef:d5:ee:be:c8:
97:73:7e:43:f4:70:d8:0f:df:da:22:8f:52:a4:ab:aa:c5:53:
68:98:15:a2:b9:0d:12:4e:2b:0b:2c:53:a5:ae:d0:22:08:94:
ff:72:f1:68:25:7b:2a:8c:11:32:e8:6a:f0:d8:2e:e5:ad:ea:
82:72:17:7c:a4:b3:71:93:c1:fe:de:dc:b7:c8:2f:c9:b4:67:
9b:56:32:5f:89:45:2c:67:d7:06:3e:f5:76:18:91:f7:a5:7c:
3f:97:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:18:54 2025 by rpki-client