Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890801FC3BAC11F0B1B481DBDAE4EC9C.roa
File: 890801FC3BAC11F0B1B481DBDAE4EC9C.roa (raw, json)
Hash identifier: RqHpM4B4cLLr6H7aFft6h+038wnjTkruhxktXp4bybk=
Subject key identifier: 70:E6:B7:25:DC:8A:BA:37:4E:C0:D0:95:E7:D5:DD:3A:ED:45:F9:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018342
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890801FC3BAC11F0B1B481DBDAE4EC9C.roa
Signing time: Wed 28 May 2025 10:14:27 +0000
ROA not before: Wed 28 May 2025 10:14:22 +0000
ROA not after: Sat 07 Jun 2025 10:14:22 +0000
asID: 9009
IP address blocks: 154.194.8.0/23 maxlen: 24
154.194.11.0/24 maxlen: 24
154.218.217.0/24 maxlen: 24
154.218.219.0/24 maxlen: 24
154.218.224.0/24 maxlen: 24
154.218.225.0/24 maxlen: 24
154.218.227.0/24 maxlen: 24
154.218.242.0/24 maxlen: 24
154.218.244.0/24 maxlen: 24
154.218.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99138 (0x18342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 10:14:22 2025 GMT
Not After : Jun 7 10:14:22 2025 GMT
Subject: CN=6836e203-5acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:57:1b:dd:20:48:7f:c1:a3:39:b4:74:10:
86:b9:e8:70:2b:03:ca:97:a8:a3:40:53:01:2e:92:
8b:25:41:e7:8b:31:95:68:9c:dd:f8:84:b4:68:d6:
57:20:d4:81:8b:27:44:8c:66:42:f2:f0:02:24:f6:
b9:10:1f:08:62:41:94:f1:dc:fe:2c:20:81:9d:05:
73:b0:cf:94:61:69:6d:3a:01:09:a6:67:93:24:dd:
5d:22:d6:54:ca:6e:3e:34:e6:05:30:ed:13:05:ad:
d4:d9:06:ab:71:88:25:08:6e:3a:c5:49:9a:31:0f:
cf:60:61:c5:20:16:30:c4:cc:28:0c:02:e9:c7:7b:
cd:a5:69:c0:41:77:81:44:19:3e:80:af:77:23:34:
42:06:2e:04:a5:b4:d1:b7:55:66:e7:cc:f4:7a:8b:
bc:cc:96:b2:28:96:db:82:19:ee:d7:c7:94:33:61:
2d:5a:4b:5d:d3:99:2d:b1:c9:5f:30:1e:34:db:74:
1b:b7:65:f3:05:a7:30:7a:a2:57:cd:8e:7b:df:09:
60:bc:c8:50:8b:30:56:3b:6b:c8:3f:2c:1a:e8:3c:
83:87:0e:1a:46:3a:dd:31:73:5a:96:7e:9e:a9:98:
39:29:53:c8:49:5d:75:68:21:07:fc:da:dc:26:f3:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E6:B7:25:DC:8A:BA:37:4E:C0:D0:95:E7:D5:DD:3A:ED:45:F9:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/890801FC3BAC11F0B1B481DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/23
154.194.11.0/24
154.218.217.0/24
154.218.219.0/24
154.218.224.0/23
154.218.227.0/24
154.218.242.0/24
154.218.244.0/24
154.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
72:39:1c:18:81:15:cc:6a:61:51:89:4b:0a:99:05:47:51:7e:
46:9c:37:bf:b0:bd:b4:d2:a8:ef:2f:fe:e3:24:6d:3b:a0:ff:
57:21:33:d0:fe:05:0f:19:fa:61:ff:ca:92:88:17:16:d5:eb:
e9:c8:fd:e2:ee:f1:84:48:b6:34:92:90:f8:a6:b5:d4:84:55:
8b:ba:35:fc:7c:64:b8:7c:f6:96:3b:53:d2:b1:4e:e7:41:12:
3d:cf:14:80:6f:3a:b8:1a:da:b5:1c:80:73:4f:62:76:4a:a6:
9c:fd:74:63:66:0c:e7:fd:5b:95:78:ea:2f:d4:5a:82:67:f8:
29:d4:c8:32:38:c8:2f:35:2d:47:80:6b:60:a9:cd:6c:ec:91:
ce:39:67:37:dc:fd:47:f2:65:7d:a2:57:ab:6e:c3:25:f7:65:
07:24:ad:ea:3b:59:82:f1:c9:e2:1c:97:cc:b8:aa:96:c0:a5:
d6:4c:36:aa:4b:b5:32:e4:d1:4b:48:7c:7e:65:49:2c:ca:25:
2c:48:43:56:13:3d:31:f9:e0:99:46:8e:40:f3:31:b6:a4:0c:
b0:f2:a5:b3:dc:24:f6:12:a2:f2:74:79:8a:30:35:bb:2e:67:
ae:b3:af:96:a9:8f:0b:3b:75:13:01:64:4e:ba:7b:b9:24:5a:
d1:dc:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:22:15 2025 by rpki-client