Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5686C76C37F711F0B435C9B1DAE4EC9C.roa
File: 5686C76C37F711F0B435C9B1DAE4EC9C.roa (raw, json)
Hash identifier: umjmZLDk9tQmJL9Z/Afq+0qO+465WOcsR3I/XYNx9fY=
Subject key identifier: C9:32:49:EE:9B:A6:D2:AF:45:E9:C1:D8:64:9E:91:C3:DF:56:A3:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018237
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5686C76C37F711F0B435C9B1DAE4EC9C.roa
Signing time: Fri 23 May 2025 16:59:50 +0000
ROA not before: Fri 23 May 2025 16:59:45 +0000
ROA not after: Tue 01 Jul 2025 16:59:45 +0000
asID: 49505
IP address blocks: 154.205.244.0/24 maxlen: 24
154.205.245.0/24 maxlen: 24
154.205.246.0/24 maxlen: 24
154.205.247.0/24 maxlen: 24
154.223.198.0/24 maxlen: 24
154.223.199.0/24 maxlen: 24
154.223.200.0/24 maxlen: 24
154.223.201.0/24 maxlen: 24
154.223.202.0/24 maxlen: 24
154.223.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98871 (0x18237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 16:59:45 2025 GMT
Not After : Jul 1 16:59:45 2025 GMT
Subject: CN=6830a986-089e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:55:6f:d8:8d:89:29:4f:a2:8f:70:68:47:
4d:69:ad:51:ec:ea:d3:95:2e:b2:b3:14:2b:87:2d:
72:09:cd:00:23:3f:fa:48:6d:25:94:d2:46:68:ba:
e3:a6:05:45:8e:34:7b:e2:b2:1c:90:f5:3e:cc:23:
f7:bd:e2:1b:c8:a9:a6:29:f8:b5:e4:de:b3:41:b2:
71:e8:f0:e7:f3:03:bf:5e:b7:b5:0c:16:c1:31:33:
55:1a:80:cd:31:27:2b:6c:fc:04:61:bc:5c:fb:86:
84:84:4d:57:0b:20:1c:2a:35:02:fe:06:45:34:72:
ea:65:e6:03:f1:81:d5:8c:be:c8:fd:90:4f:ac:e1:
10:79:61:aa:48:38:32:3f:1b:32:ef:fa:45:dd:a5:
f7:95:b6:44:64:2c:ad:89:a5:2d:f6:48:af:b3:93:
c7:78:8b:55:fa:2e:14:57:31:78:02:f3:69:c7:3c:
c5:83:5b:62:1b:60:14:69:6b:1d:15:e5:39:fc:f3:
95:06:c7:aa:4f:7a:43:26:09:e9:a2:f2:b7:05:de:
3f:12:7d:a5:b6:09:d7:94:05:21:b2:1f:d4:ef:18:
b4:6c:4b:50:a0:dc:7c:8e:33:3e:ba:da:bd:76:d3:
8f:7a:5c:9e:d9:d8:55:91:d5:c7:ed:80:0d:a9:24:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:49:EE:9B:A6:D2:AF:45:E9:C1:D8:64:9E:91:C3:DF:56:A3:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5686C76C37F711F0B435C9B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.244.0/22
154.223.198.0-154.223.203.255
Signature Algorithm: sha256WithRSAEncryption
8b:cc:8e:74:80:2a:af:a2:1b:4a:ec:85:bb:80:c0:f6:61:fb:
36:38:50:e5:48:19:cf:64:12:03:7c:b4:78:3d:59:d4:f0:4e:
08:a3:ba:39:a6:ac:e8:4c:b4:21:2f:00:5e:3f:f3:39:d1:f7:
85:b2:f7:93:e0:e8:0c:d7:0b:6a:5d:6b:d5:01:39:27:53:f2:
9b:a5:c4:27:ac:b2:e1:f0:ad:88:9f:05:e5:4e:c5:8f:1d:58:
cb:10:77:38:73:a3:79:f7:25:81:fe:02:c8:92:ae:d8:a6:de:
33:da:0a:d2:25:bc:46:90:e0:22:de:77:59:28:57:af:67:7f:
63:f1:53:a7:da:5d:e6:b9:62:9a:e0:02:d2:15:fd:35:37:cb:
0d:d2:03:49:45:a4:35:46:84:db:7b:c5:55:b0:bb:07:fe:3f:
7c:57:fa:64:24:05:19:80:10:3a:c7:a3:81:75:f2:fd:1b:57:
8a:4c:e3:4e:0d:10:dd:dc:3d:08:32:66:a2:d5:71:ef:a8:e8:
0b:5b:1b:74:be:f1:96:ae:5a:c4:f9:9d:09:22:33:5d:4f:61:
5d:36:f7:85:75:ba:f2:67:a7:8b:40:f2:9a:71:45:45:71:74:
d2:b1:93:64:a2:3b:cb:dc:be:6f:0b:6e:6c:b1:08:f9:9c:d0:
70:b9:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:02:58 2025 by rpki-client