Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2316FA5E25C911F0B4A402C2DAE4EC9C.roa
File: 2316FA5E25C911F0B4A402C2DAE4EC9C.roa (raw, json)
Hash identifier: NzlFMDSb7Z5u0erq39aP6IYVO7Qp1i5Mf2u1CIAjAVM=
Subject key identifier: 87:11:D7:A7:19:58:62:CC:AF:97:B2:46:29:FF:AF:8D:CE:4B:FC:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2316FA5E25C911F0B4A402C2DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 13:43:46 +0000
ROA not before: Wed 30 Apr 2025 13:43:41 +0000
ROA not after: Tue 28 Apr 2026 13:43:41 +0000
asID: 984
IP address blocks: 154.80.172.0/24 maxlen: 24
154.80.173.0/24 maxlen: 24
154.80.174.0/24 maxlen: 24
154.80.175.0/24 maxlen: 24
154.80.176.0/24 maxlen: 24
154.80.177.0/24 maxlen: 24
154.80.178.0/24 maxlen: 24
154.80.179.0/24 maxlen: 24
154.80.180.0/24 maxlen: 24
154.80.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97665 (0x17d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 13:43:41 2025 GMT
Not After : Apr 28 13:43:41 2026 GMT
Subject: CN=68122912-6023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:d2:6d:cd:2e:65:9f:12:4e:27:b1:5e:63:
28:91:09:b6:f7:31:ab:bc:6f:40:05:ad:55:e6:05:
7a:1c:3d:e2:10:fd:cb:84:04:7f:bc:fb:f2:bc:55:
ce:d9:fa:34:b0:45:c0:f2:cd:41:15:bd:2e:f1:41:
39:2f:cb:7c:18:f9:dc:20:81:f6:fe:36:43:1a:39:
ba:de:3b:71:30:f7:c8:4e:ac:02:b9:99:ac:53:e1:
fc:11:3c:72:67:33:66:c4:5e:a9:27:6b:cc:78:5f:
d9:58:e9:03:e3:3c:1f:b1:ca:56:5c:3e:c4:5c:0a:
8d:0d:6a:48:e8:2f:59:44:07:62:cf:26:4a:62:30:
4e:c5:aa:7c:4b:c6:9e:75:c6:8a:63:38:99:77:ef:
2d:0e:dd:a0:bf:3b:a5:ab:bf:34:89:39:8e:99:e6:
ff:fb:21:95:0a:92:b9:d3:f1:57:c9:ce:21:51:37:
40:1a:22:36:e5:33:97:74:53:8b:92:25:5f:5f:59:
f4:9e:8d:5e:aa:d3:b5:2b:c3:e0:53:25:d3:ba:5e:
fc:13:79:c6:c3:96:0e:94:3c:ed:19:88:47:37:0c:
3c:fc:6d:39:7f:47:10:3a:6d:31:7f:d3:d5:72:60:
88:89:fd:21:35:62:49:48:f3:bd:98:1b:c5:bb:1e:
05:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:11:D7:A7:19:58:62:CC:AF:97:B2:46:29:FF:AF:8D:CE:4B:FC:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2316FA5E25C911F0B4A402C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.80.172.0-154.80.181.255
Signature Algorithm: sha256WithRSAEncryption
68:a6:06:9e:57:ac:fd:a7:11:b2:a4:4c:27:19:ea:0b:eb:e0:
b6:8e:c4:af:a4:3f:26:69:bd:5a:79:b6:b3:68:a0:8b:14:4d:
16:55:55:eb:f5:34:37:9b:6e:5c:e1:20:b0:aa:b9:34:87:e6:
45:58:3a:16:f4:84:79:43:cd:bf:73:d5:02:b1:74:38:d6:75:
c0:f6:1b:bd:f9:6f:13:4d:c6:bf:12:ed:67:ab:01:d0:3d:ca:
e0:cc:af:69:44:44:80:a0:60:00:6e:e8:b5:ff:a2:ac:fb:25:
96:28:a7:44:e8:c8:38:5c:d5:3f:19:a1:c3:58:96:20:0a:04:
3b:02:80:87:2c:9c:fb:34:89:c0:6e:c9:a5:fc:6c:bd:21:b2:
5d:c3:64:3d:3e:00:4e:c3:54:b6:7e:3c:8b:7e:f1:9f:70:54:
f5:27:c9:35:c4:57:8e:20:9f:aa:86:44:51:39:ed:08:36:5c:
49:90:0a:3d:fa:18:c8:3c:76:49:b6:99:4d:e1:81:37:55:a2:
b8:d6:4b:53:5a:cd:f1:ef:34:96:44:f9:a4:1d:bb:22:5d:3a:
8d:9b:c0:2f:6b:3e:e8:e6:02:55:a6:f3:bc:87:c8:2e:85:2d:
e0:56:30:1c:8f:e5:79:15:3c:4a:c2:44:2d:f2:00:54:f8:98:
7e:9d:eb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:09 2025 by rpki-client