Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342AF600437F11F08C565CB9DAE4EC9C.roa
File: 342AF600437F11F08C565CB9DAE4EC9C.roa (raw, json)
Hash identifier: qiKzFb9nELb1JPQvxj40yhZMEbpmwdCptUJ2QcUyp9g=
Subject key identifier: 94:AE:74:52:1E:E6:27:3E:74:69:E3:63:EE:F1:64:56:61:6D:23:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018544
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342AF600437F11F08C565CB9DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 09:10:07 +0000
ROA not before: Sat 07 Jun 2025 09:10:02 +0000
ROA not after: Wed 09 Jul 2025 09:10:02 +0000
asID: 45194
IP address blocks: 154.84.222.0/24 maxlen: 24
154.84.223.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
154.84.249.0/24 maxlen: 24
154.84.250.0/24 maxlen: 24
154.84.251.0/24 maxlen: 24
154.84.252.0/24 maxlen: 24
154.84.253.0/24 maxlen: 24
154.84.254.0/24 maxlen: 24
154.84.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Jun 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99652 (0x18544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 09:10:02 2025 GMT
Not After : Jul 9 09:10:02 2025 GMT
Subject: CN=684401ef-731f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:82:de:a1:c5:9b:47:7e:da:30:78:66:2b:
61:bf:5b:7d:2b:11:90:2e:16:0a:8c:51:19:34:3d:
23:96:13:17:b9:ee:07:a3:2f:ff:93:00:75:ab:f2:
2a:4a:84:30:a6:44:5f:9e:8b:a2:5c:e6:78:77:84:
0b:38:5a:e6:be:5c:cb:8b:8c:eb:d4:c1:9d:43:95:
59:ba:26:47:69:06:5b:39:b8:77:cb:ff:0c:5c:68:
9d:ed:1a:91:db:b1:d3:72:f8:77:64:f1:2b:d3:30:
4d:3c:bb:17:73:59:5a:06:4a:c2:21:0e:a1:e3:67:
46:e7:00:0d:89:80:19:9a:9e:6f:cb:98:12:32:5d:
f0:d9:0d:15:b9:bd:61:7a:96:90:48:58:12:f7:41:
8d:6a:14:cf:44:39:93:d6:ea:ff:dc:ad:85:6e:0f:
5f:da:8c:cc:da:94:a4:6c:ba:2b:48:1d:07:1b:61:
cb:8c:15:22:1d:c7:be:a8:77:3a:a1:0b:8b:8f:62:
11:be:80:cc:b3:6d:ce:b8:89:a7:c9:d2:54:3c:4c:
3f:64:57:bd:7d:a5:97:ff:57:14:16:a9:6d:2e:f3:
f6:f8:7d:60:60:81:1d:66:55:d5:fa:27:f3:d5:3e:
d7:84:52:85:95:4e:8a:94:0d:53:64:cb:89:bc:e3:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:74:52:1E:E6:27:3E:74:69:E3:63:EE:F1:64:56:61:6D:23:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/342AF600437F11F08C565CB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.222.0-154.84.224.255
154.84.249.0-154.84.255.255
Signature Algorithm: sha256WithRSAEncryption
4e:99:79:80:d7:03:d3:95:ea:8a:36:ec:67:dc:5d:96:a5:f9:
46:94:19:75:62:79:4b:83:51:49:d1:a7:c9:2f:44:ac:ac:4a:
ec:56:3d:b0:11:8c:07:24:f1:4f:0d:f0:97:5c:3d:9a:67:0d:
41:e7:49:33:5f:69:ff:47:18:32:78:44:4c:22:8c:01:22:4c:
9c:bb:58:a2:c2:2f:0f:77:48:c0:67:48:cd:b3:77:65:1e:0a:
cb:3b:4f:e6:eb:66:1c:3c:ed:e8:a2:5c:96:77:4c:31:9a:f0:
b9:ce:07:6f:0c:3b:46:4a:18:65:13:f8:54:7a:af:70:60:de:
56:c1:18:3f:9e:b1:d4:81:aa:62:33:ac:03:e1:a9:78:6f:cf:
0c:ce:ab:95:41:1e:52:31:4e:fb:88:20:da:cb:cf:49:74:3e:
3e:06:76:3c:3f:c4:04:62:db:0b:98:65:dd:54:81:b8:f8:73:
56:c5:fd:ff:27:ef:64:40:c2:d9:16:aa:c2:c5:7d:c6:f9:15:
83:54:79:ba:de:29:f4:b7:5f:f4:23:e3:b3:6e:e8:30:aa:34:
ed:06:21:2e:4e:00:4c:0d:26:35:a7:8a:a2:f3:e6:ef:d0:cd:
ec:0d:1f:9d:8d:6d:1a:93:6d:00:b5:cd:f1:2e:55:11:5e:2b:
3e:cb:f5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:05:18 2025 by rpki-client