Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EEF9336273B11F0885FF0F1DAE4EC9C.roa
File: 2EEF9336273B11F0885FF0F1DAE4EC9C.roa (raw, json)
Hash identifier: W7gw9yyevYIFytuj7mQitawXvWeBSQ97s3h+ugthxME=
Subject key identifier: A0:8E:7D:5C:D7:A0:99:C6:4E:15:B9:C5:AD:54:1B:F1:B8:17:BA:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EEF9336273B11F0885FF0F1DAE4EC9C.roa
Signing time: Fri 02 May 2025 09:52:40 +0000
ROA not before: Fri 02 May 2025 09:52:35 +0000
ROA not after: Fri 13 Jun 2025 09:52:35 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97894 (0x17e66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:52:35 2025 GMT
Not After : Jun 13 09:52:35 2025 GMT
Subject: CN=681495e7-9f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:b1:bc:80:9d:48:0a:14:8f:a7:ec:21:3a:
8a:17:9c:d6:e2:81:e8:8f:a0:89:82:57:0d:c1:d0:
63:3b:72:3b:64:0c:3b:8a:6f:cc:4d:fe:9a:94:d6:
35:26:df:35:cb:cc:f7:69:ba:8f:0f:ea:de:5c:54:
db:c9:22:2c:e9:19:42:fe:97:a9:cc:be:eb:91:44:
da:17:82:8b:e6:35:e3:61:b3:f1:f7:0c:25:e7:ed:
cc:07:05:7a:9b:ce:7f:5e:a2:c7:76:29:6b:35:75:
d4:75:54:c3:37:91:bc:17:71:02:88:52:12:93:da:
54:cb:cd:b1:64:d8:80:21:94:1a:27:e0:e5:45:f4:
c4:cc:64:06:b1:4a:f1:5b:b2:d1:8a:74:1f:39:2c:
a9:51:0c:60:b3:93:53:a4:f6:e8:3a:8e:e1:11:a1:
85:b4:d8:06:b1:01:c4:f7:fa:49:2c:a8:3f:93:57:
2d:0f:d5:a6:d1:5d:44:2c:0b:d8:e2:db:be:ad:77:
e2:e4:5b:aa:25:13:f9:92:07:e3:cf:a9:16:68:de:
24:e9:2e:26:30:a7:c8:1b:fd:7d:10:78:b9:e1:28:
63:2a:27:4a:ed:f7:bf:f7:eb:27:b5:d4:eb:c5:8d:
64:bc:b7:c6:1c:6b:03:e4:f7:02:bd:d6:3b:8a:fd:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:7D:5C:D7:A0:99:C6:4E:15:B9:C5:AD:54:1B:F1:B8:17:BA:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EEF9336273B11F0885FF0F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:31:c0:15:6f:e5:f0:60:e2:7e:6e:d5:fa:33:df:b6:8c:4e:
b1:2f:85:3a:38:46:52:4b:36:98:7d:11:05:b3:3d:17:be:91:
ae:2a:ba:dd:1c:91:87:d1:c2:82:66:ed:5b:27:da:af:4e:58:
29:30:57:55:20:23:41:fb:c5:54:23:d4:25:0d:03:4d:83:91:
50:7f:fc:58:a5:05:58:0a:0e:5c:ec:c1:38:e5:4b:4a:44:6e:
d5:0f:a5:07:db:e2:09:fb:45:48:1e:c5:22:57:73:78:a6:fb:
d1:af:83:59:93:74:35:bc:7f:4e:cd:b0:de:b9:01:a2:3d:b6:
36:8b:41:27:84:3b:0d:5e:d1:59:bf:ee:4e:32:11:98:b7:c3:
0c:d2:d5:69:b0:b0:46:98:cd:35:8b:b4:e2:76:39:31:b7:30:
10:39:e0:2c:30:bb:19:78:22:10:7d:04:37:87:64:2a:2e:fb:
83:78:7a:76:17:d8:39:82:b7:e5:8b:db:e9:fa:fb:c5:b4:13:
2a:81:6e:1c:ad:c1:21:a8:26:8b:bf:ad:8d:81:d1:1b:33:d1:
4f:12:17:9f:1d:10:ee:f9:37:ee:62:73:24:c0:51:61:3a:02:
d5:68:26:44:f0:bb:d9:d0:87:6d:6e:91:dc:2c:9c:16:cc:6c:
6a:96:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:55:53 2025 by rpki-client