Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15D69D7637F911F0A5E9EFBCDAE4EC9C.roa
File: 15D69D7637F911F0A5E9EFBCDAE4EC9C.roa (raw, json)
Hash identifier: XyXP0dqj/VTdxPq8DZlLzybfaIY3mTUqJiM/RX66xq0=
Subject key identifier: BA:C9:BE:60:9D:E3:1D:00:12:D7:25:04:BB:7A:75:C0:CB:20:2D:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01823B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15D69D7637F911F0A5E9EFBCDAE4EC9C.roa
Signing time: Fri 23 May 2025 17:12:20 +0000
ROA not before: Fri 23 May 2025 17:12:15 +0000
ROA not after: Tue 01 Jul 2025 17:12:15 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
154.198.38.0/24 maxlen: 24
154.198.39.0/24 maxlen: 24
154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98875 (0x1823b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 17:12:15 2025 GMT
Not After : Jul 1 17:12:15 2025 GMT
Subject: CN=6830ac74-48c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:e4:d4:55:cd:d5:96:4a:e6:fb:ca:c1:87:
26:f2:3f:4f:9f:68:05:bb:cd:f0:5a:b5:c6:1e:88:
2f:2b:07:96:36:3f:93:96:86:4c:6e:f8:f5:18:bf:
00:b4:1f:c8:76:88:29:38:e3:43:f0:0d:1c:32:3a:
e9:f2:f5:aa:68:ed:d3:c7:5d:6c:64:51:3a:e2:fd:
da:5f:e6:b6:99:3a:84:3e:a6:1c:0e:e7:af:c2:41:
4a:cd:8b:50:4b:53:c2:c6:d4:50:2c:a0:a5:d1:89:
b1:70:62:89:3a:d2:a4:94:1b:a2:c8:28:2a:1a:f4:
75:f0:1f:14:f6:5d:bc:ac:d9:11:2e:bf:77:b2:59:
e2:81:d9:b2:87:88:35:30:47:ff:72:4f:29:67:b4:
2d:b7:15:b3:26:57:e8:37:09:0e:9f:15:49:87:b7:
8f:ee:d1:83:1c:c7:c8:97:14:97:83:15:d7:e3:c9:
c7:75:59:05:d3:41:12:f1:93:5e:3b:d2:95:f3:5e:
40:53:b7:7d:41:cb:21:19:81:bb:b8:5f:b1:ec:88:
52:44:59:78:ce:af:ce:72:47:cc:10:f7:e4:e5:3a:
6b:21:0d:19:61:3e:88:c6:d3:a4:ee:67:7f:ce:58:
16:91:6d:9d:1a:3c:71:33:c5:d1:2a:f6:f2:f8:d9:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:BE:60:9D:E3:1D:00:12:D7:25:04:BB:7A:75:C0:CB:20:2D:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15D69D7637F911F0A5E9EFBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0-154.198.39.255
154.203.206.0/23
154.203.212.0/22
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e9:45:b4:04:ad:28:da:04:81:c9:38:80:60:ca:84:e2:01:
89:7c:c1:aa:6c:34:a0:11:44:63:2a:2a:6b:8a:62:70:7f:31:
75:5c:bb:54:f0:20:08:5f:89:71:fa:89:13:d8:13:a4:ad:db:
8c:08:20:e6:73:1f:13:c8:30:7e:97:9a:65:36:ad:93:6c:b1:
1e:4c:5c:07:0f:89:6b:52:9f:f2:06:b7:04:05:22:cd:45:86:
ea:bf:80:d7:77:8b:f0:9c:0f:41:cf:07:10:e5:af:ca:d0:f7:
aa:bb:74:18:6c:6e:ae:89:39:bf:99:04:9b:87:12:27:49:61:
b5:4f:46:ee:7f:53:68:58:2a:16:f0:1d:28:c5:da:e2:cb:3a:
5c:e0:4a:57:65:81:92:ea:0f:49:e1:dc:e8:93:a6:88:47:a8:
d5:cf:78:b8:0e:a9:c6:b9:9c:3f:b7:5d:ac:e8:be:9b:f9:8e:
fa:5f:ed:59:3c:43:98:25:f3:d4:35:de:34:7e:a5:5c:b5:9e:
0d:4c:43:95:b0:49:70:78:d7:55:8d:b2:1e:06:e2:17:60:1e:
85:7a:8e:01:8d:74:97:30:bf:de:fc:18:9c:ac:e6:56:f6:b3:
c0:92:bb:17:56:da:b1:a1:75:e9:59:88:3d:87:de:86:87:8f:
8e:a5:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:07:13 2025 by rpki-client