Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267AD15E3BBB11F0A82A49BADAE4EC9C.roa
File: 267AD15E3BBB11F0A82A49BADAE4EC9C.roa (raw, json)
Hash identifier: AA+q/79knMAOnUxxbDhgc0JdC5djTD2irhv3Zm0oYNc=
Subject key identifier: 2E:85:6D:E2:2F:18:D8:83:24:30:28:D8:92:30:2D:BA:E4:52:4C:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01835C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267AD15E3BBB11F0A82A49BADAE4EC9C.roa
Signing time: Wed 28 May 2025 11:59:04 +0000
ROA not before: Wed 28 May 2025 11:58:59 +0000
ROA not after: Sun 06 Jul 2025 11:58:59 +0000
asID: 49505
IP address blocks: 154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99164 (0x1835c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 11:58:59 2025 GMT
Not After : Jul 6 11:58:59 2025 GMT
Subject: CN=6836fa88-1255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:9c:4c:fe:6c:42:68:6e:65:b8:7d:1a:95:
56:3d:42:42:8c:84:17:88:52:60:57:2f:26:e4:f3:
15:b0:5c:28:a2:f8:2b:31:b2:d2:54:10:92:f9:2b:
14:90:33:50:a5:a2:9e:00:be:5e:ec:05:c4:0a:44:
d2:08:81:be:8b:48:9b:c0:0d:c0:8d:7e:26:b2:3b:
17:30:64:09:82:1b:2a:1b:e4:5b:d8:83:7e:e3:f2:
af:d2:45:bf:42:60:53:f8:55:3b:a9:13:ef:b0:be:
93:75:8d:f4:54:99:d0:23:ee:5d:e8:f3:b5:3f:54:
32:13:c6:25:ce:3c:bb:65:0c:f5:25:ae:e0:5f:7f:
ad:cd:6f:6f:8d:d1:ae:1b:28:53:f6:a0:8c:b4:b0:
b8:a2:16:ed:34:39:0e:60:a5:c9:54:8a:02:5d:f0:
c4:0d:69:56:03:aa:85:62:30:05:d4:a4:d3:6c:36:
15:e0:0e:6d:cc:7c:ba:55:90:91:77:20:0e:05:94:
40:25:ec:1f:78:1d:c4:cc:45:c7:06:67:62:93:2d:
e7:d9:34:59:40:2c:12:ec:70:fa:ac:6d:a2:9d:96:
e9:4c:39:be:05:19:ed:03:b9:b4:24:24:30:2e:f5:
30:eb:65:aa:9b:5c:4b:80:b8:83:67:ed:d7:0a:10:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:85:6D:E2:2F:18:D8:83:24:30:28:D8:92:30:2D:BA:E4:52:4C:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/267AD15E3BBB11F0A82A49BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.215.0-154.209.220.255
154.212.30.0/24
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a9:78:da:e0:88:35:cd:f3:e6:83:d4:e2:7b:28:5e:0e:35:
55:79:52:3d:cb:00:5b:b4:35:5e:6a:19:87:39:2f:69:a7:33:
06:db:f8:5a:12:e5:74:45:e5:c8:db:9a:cb:6b:2d:db:b7:86:
68:ad:04:ef:1a:09:ee:32:3b:d3:72:6a:54:dc:b1:43:ef:66:
23:67:0c:c5:7e:31:9a:3a:ce:ea:a1:f0:d9:22:ea:8f:4c:e1:
c3:b8:9a:d2:4d:6e:bb:36:5c:51:66:9b:ae:bd:2b:bc:d3:a8:
89:5a:f2:3c:2a:e8:8d:64:b6:b7:c4:ae:88:62:72:8d:8c:b7:
9f:a2:4c:d7:cd:c3:01:0a:bf:19:cb:01:5a:c2:7e:54:74:2d:
e1:fa:fa:fc:95:26:5c:fe:ac:77:f9:c0:4d:54:77:b4:f0:b2:
7f:ff:7a:c6:4d:86:e3:11:40:3b:e0:c5:b7:8d:88:39:e7:45:
56:91:cc:d8:de:ec:be:e4:28:c4:40:26:8a:c8:99:ce:9a:16:
99:52:c0:c7:f5:71:80:3e:fb:eb:ee:93:93:c1:f9:01:d2:e7:
01:bb:48:fa:fd:c0:ce:5b:b4:1f:27:ba:3d:b0:1f:97:ac:84:
ca:d0:4d:52:53:20:aa:d5:d8:04:e4:90:09:76:bb:9d:7f:c8:
bc:c9:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:46:40 2025 by rpki-client