Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44A8A48A3E2C11F084784899DAE4EC9C.roa
File: 44A8A48A3E2C11F084784899DAE4EC9C.roa (raw, json)
Hash identifier: CG6gsTDpADtMB5LSjhtpzI9vHR1hRpip7fIZhJSi718=
Subject key identifier: A9:EE:58:2D:F0:5C:0E:3A:16:E4:31:56:5D:6B:05:E7:16:76:9A:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018418
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44A8A48A3E2C11F084784899DAE4EC9C.roa
Signing time: Sat 31 May 2025 14:33:51 +0000
ROA not before: Sat 31 May 2025 14:33:45 +0000
ROA not after: Mon 07 Jul 2025 14:33:45 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99352 (0x18418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 14:33:45 2025 GMT
Not After : Jul 7 14:33:45 2025 GMT
Subject: CN=683b134e-5a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:fb:89:11:8c:52:19:1c:b4:3e:80:f9:50:
4c:0f:25:e6:3a:31:36:56:20:f6:31:ec:de:6e:bb:
7a:a0:eb:3d:d9:b1:1e:73:a2:25:12:69:a8:1d:c2:
43:09:cf:94:29:f6:74:93:87:be:18:33:87:c2:a2:
d5:23:22:17:8c:86:59:b6:b7:a7:fc:58:ee:8c:e1:
2f:de:ba:98:83:62:4c:f8:c5:48:48:82:89:51:84:
7b:57:46:64:ec:a4:bf:81:61:0c:ee:88:e7:b1:74:
f2:a1:2a:7d:5f:ab:62:dc:5e:e6:43:bd:ed:23:3f:
c5:46:c5:4e:73:52:f2:be:59:50:80:da:00:f1:03:
ec:32:91:8c:be:61:72:9e:14:5b:d3:9f:73:70:44:
48:b1:5a:ff:43:97:a4:79:dd:77:1a:25:f3:3e:bf:
fa:c0:13:05:d9:a4:63:d4:93:9a:c7:b8:e1:a0:bc:
02:93:f9:57:91:b8:ea:8b:9a:f3:a3:a5:2d:7d:e4:
65:3f:e0:e8:4b:17:09:b1:77:9d:09:23:a3:5c:18:
e6:f5:d9:68:dd:24:36:0f:19:43:01:6d:c7:63:df:
e6:06:10:10:c9:73:bb:29:1b:06:b8:10:31:f9:64:
1d:d1:80:f3:4d:ab:0b:54:20:64:47:30:14:3e:b1:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:58:2D:F0:5C:0E:3A:16:E4:31:56:5D:6B:05:E7:16:76:9A:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44A8A48A3E2C11F084784899DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
37:22:88:1b:f7:c4:38:9f:4c:74:fd:6a:c3:c6:ab:d9:b4:c8:
34:4e:de:68:94:42:fc:c0:a3:49:16:e8:9d:22:01:fe:1f:fa:
00:c8:2b:03:b9:15:a1:db:0c:8c:4f:94:8a:ac:45:7f:4c:47:
b6:ed:56:2a:c7:41:f7:f5:d8:e5:63:d7:54:eb:eb:85:b4:e4:
11:04:fe:26:f9:6e:88:b3:ba:d6:39:99:c9:69:7a:b0:e7:1b:
fd:1d:c8:b0:05:ed:17:a8:08:16:54:ba:92:ba:73:ca:63:11:
40:7b:7a:16:58:70:42:2f:76:a0:42:df:45:50:48:b0:22:db:
ac:ce:8b:19:4d:5f:29:ed:73:87:fe:f1:c7:64:ac:ae:4d:36:
4b:02:31:fb:c6:0a:33:b5:10:29:21:cb:5c:60:09:72:67:10:
4c:4f:ab:88:be:44:99:9d:50:ae:0e:ec:80:ff:57:1b:60:43:
73:f0:c8:c5:3f:8e:3e:d5:52:bf:d0:58:35:b7:bc:16:68:43:
0d:68:50:b1:c1:b3:78:a7:c5:5d:39:ab:79:9d:1d:eb:47:8c:
b6:49:d5:a3:b8:63:61:50:45:ad:9f:0e:cb:1d:03:f1:9d:72:
7e:42:b9:fe:56:9f:77:0b:2e:0f:1c:29:5f:6c:1f:5e:f6:e6:
7c:24:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:50:32 2025 by rpki-client