Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9E49FA248811F0B093F7D1DAE4EC9C.roa
File: 1F9E49FA248811F0B093F7D1DAE4EC9C.roa (raw, json)
Hash identifier: KmYKCJKebQd4zgJyX3hasPATzq2S5OGaKerd0ZO/eoM=
Subject key identifier: 59:54:2C:E1:47:36:20:18:00:ED:07:C8:6A:9B:28:13:76:9C:F7:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C9B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9E49FA248811F0B093F7D1DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 23:25:52 +0000
ROA not before: Mon 28 Apr 2025 23:25:47 +0000
ROA not after: Tue 17 Jun 2025 23:25:47 +0000
asID: 138915
IP address blocks: 154.203.143.0/24 maxlen: 24
154.206.80.0/23 maxlen: 24
154.206.82.0/23 maxlen: 24
154.206.84.0/23 maxlen: 24
154.206.86.0/23 maxlen: 24
154.206.88.0/23 maxlen: 24
154.206.112.0/23 maxlen: 24
154.206.114.0/23 maxlen: 24
154.206.116.0/23 maxlen: 24
154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97435 (0x17c9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 23:25:47 2025 GMT
Not After : Jun 17 23:25:47 2025 GMT
Subject: CN=68100e80-bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:c5:f6:d4:51:b8:25:42:7d:e6:c1:39:88:
86:34:72:73:a1:9c:c5:db:bc:82:9e:3f:93:a6:11:
fc:98:7b:1c:41:9c:73:5d:c5:41:e3:92:11:fb:34:
62:50:f9:57:d8:45:d0:14:15:bc:1c:c2:35:e0:fa:
56:08:7b:1e:75:02:c8:10:6a:54:08:b2:61:98:f9:
5a:a0:d8:7f:35:1f:86:56:cb:c0:90:94:6b:62:d9:
1f:99:ef:3d:83:52:5f:94:60:99:6f:c1:00:55:5e:
54:54:4b:a5:55:51:28:e5:69:93:57:a2:92:ff:3c:
ad:88:b1:1a:51:77:a7:77:d2:6d:2d:3e:64:fd:71:
1b:57:96:c0:26:85:0b:50:80:88:23:a0:72:cf:89:
94:07:96:b6:4e:12:86:39:0d:cb:05:87:b3:0a:42:
14:da:96:21:b2:ef:c6:7b:64:b8:c7:23:59:fc:0c:
79:fd:76:1b:0f:a2:71:c8:75:88:24:55:d8:42:10:
6f:ac:7d:f8:c7:1e:19:08:55:b1:9c:79:64:71:fb:
45:79:0c:d6:59:b7:50:a1:ac:9e:95:e2:25:e9:bb:
51:7f:20:dc:c0:62:5a:92:0f:2f:42:55:8d:ba:c6:
81:24:74:a0:3e:7e:1a:c0:66:c3:1b:a2:8a:0a:84:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:2C:E1:47:36:20:18:00:ED:07:C8:6A:9B:28:13:76:9C:F7:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F9E49FA248811F0B093F7D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.143.0/24
154.206.80.0-154.206.89.255
154.206.112.0/21
Signature Algorithm: sha256WithRSAEncryption
49:bc:e9:9f:43:82:42:14:c9:2e:2e:0b:fc:6f:f9:0f:9a:2d:
3e:16:7a:db:0f:b8:d5:48:d3:a7:e0:96:09:de:ca:12:1e:af:
84:56:55:af:92:e8:86:2a:c2:2c:b9:b3:2f:ab:fe:4c:98:ac:
de:7a:cc:1c:64:07:88:e0:73:45:79:0e:f2:94:d5:d7:6d:a0:
61:07:5a:c1:14:1a:00:67:9d:12:af:49:fe:10:58:4b:b6:a8:
db:26:81:ba:91:fa:c9:6f:8c:e4:ac:25:57:5b:4f:48:a4:94:
93:db:dd:07:ff:fe:36:bf:7c:7b:fc:3c:05:aa:7c:66:c4:f4:
56:c6:b4:ba:00:88:e0:2f:ca:bf:c4:f1:d2:ce:18:ac:d8:18:
a7:f2:96:d3:25:62:08:b4:24:95:7c:d3:40:ba:ad:3f:1b:da:
4c:38:b9:3f:c8:5a:09:7c:f4:2a:38:2b:d8:eb:cf:b3:07:a6:
68:d8:47:d4:b5:6d:6a:39:91:59:61:a8:30:a6:5c:5e:e3:7d:
31:97:5b:87:1d:a6:d8:f2:13:68:2d:78:2a:66:a9:c3:1c:5e:
03:75:cd:86:2b:8e:02:e5:b9:1b:b0:fd:ae:1f:8f:b6:7c:7e:
d3:b0:2a:39:77:e8:2e:98:87:7b:38:4a:92:34:df:b7:94:c3:
f0:3d:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:58 2025 by rpki-client