Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A016A4246B11F09824D697DAE4EC9C.roa
File: C8A016A4246B11F09824D697DAE4EC9C.roa (raw, json)
Hash identifier: 7miuVNOuoYr6G2aNaDLKc7JoCFL/DceypCPRJ15yPyY=
Subject key identifier: 5B:5C:D3:49:68:04:A7:6E:A2:04:A6:06:5F:6A:D7:0E:C9:DF:14:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C71
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A016A4246B11F09824D697DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 20:03:00 +0000
ROA not before: Mon 28 Apr 2025 20:02:55 +0000
ROA not after: Mon 09 Jun 2025 20:02:55 +0000
asID: 205125
IP address blocks: 154.203.192.0/24 maxlen: 24
154.203.193.0/24 maxlen: 24
154.203.194.0/24 maxlen: 24
154.203.195.0/24 maxlen: 24
154.210.237.0/24 maxlen: 24
154.210.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97393 (0x17c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 20:02:55 2025 GMT
Not After : Jun 9 20:02:55 2025 GMT
Subject: CN=680fdef4-80f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d9:97:5e:a0:ba:a3:b4:e6:66:78:07:00:fb:
90:d8:34:4b:8d:37:3b:7c:a2:9f:66:f3:8b:4e:d7:
64:f3:54:63:6e:f9:a4:7b:65:90:d7:99:c1:96:fa:
14:a0:14:f4:60:59:28:14:46:78:a2:c2:90:ad:dd:
9a:fe:ea:a3:96:a9:39:f6:07:d0:06:d9:2c:59:29:
2b:f4:72:4c:a6:ed:2a:2a:06:fe:e4:32:bc:f8:ee:
12:6a:df:0f:e3:7c:44:eb:6c:2d:99:46:4d:b2:d0:
e4:18:74:07:c6:6b:0a:59:de:a2:64:f9:6d:42:a5:
ee:9a:07:65:ff:d3:1c:12:ad:24:69:6f:41:70:15:
d0:30:a4:0e:68:fd:af:66:c6:a8:a9:30:6d:86:0a:
ec:9f:b4:69:72:41:71:ab:8d:04:2a:13:0c:d0:a0:
4f:aa:6d:ef:af:d7:e3:ae:c9:9d:81:28:e4:ee:2d:
40:34:07:4e:18:f9:01:9a:16:e2:09:31:f5:a8:43:
98:8d:3c:19:65:26:63:1a:f8:e6:94:42:de:05:cd:
0a:83:c4:25:db:a6:0c:d0:5f:24:ea:28:e9:c1:1a:
16:b9:70:7c:56:c7:55:96:fd:52:ce:85:ce:76:d9:
d9:70:2d:b3:b9:11:f1:34:02:a7:8d:e4:6e:be:8e:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5C:D3:49:68:04:A7:6E:A2:04:A6:06:5F:6A:D7:0E:C9:DF:14:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8A016A4246B11F09824D697DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.192.0/22
154.210.237.0-154.210.238.255
Signature Algorithm: sha256WithRSAEncryption
79:1a:36:7f:1a:0f:76:96:99:01:bf:b6:5c:19:92:1b:a6:70:
23:50:9e:67:13:46:43:1a:88:a2:0c:4c:a8:55:6b:7e:6c:3f:
9c:48:95:e7:6f:0d:43:c3:2e:be:88:0d:ba:f5:c5:84:e0:7b:
cc:0b:43:cd:c6:f2:2d:14:b8:4e:2b:f2:80:a9:13:99:a8:ea:
4d:30:e1:f5:2b:cd:5f:a2:5e:be:60:74:37:4f:e7:68:29:7b:
2d:9c:0f:61:70:14:92:1c:ff:86:c9:b2:b9:82:5a:a3:66:2a:
3c:a4:c9:82:c6:19:60:94:9e:03:14:b2:15:92:e1:2b:b3:33:
d3:55:de:ee:cb:4c:ec:2d:d4:06:cd:56:c3:51:86:cc:d8:e2:
f1:4c:57:8a:c9:b9:87:8f:cb:18:fe:78:81:b5:ff:1a:74:81:
6c:83:95:e5:9b:09:03:93:a7:ec:18:c4:8a:c3:43:7e:36:b2:
9f:44:96:05:74:c4:1c:5f:09:3c:1c:e1:d3:7d:21:a7:5e:37:
c7:d2:1c:d8:2f:6f:8d:6c:02:9b:ff:a2:76:d9:6f:fd:89:f2:
f2:bc:11:2c:71:cd:55:2a:26:ba:15:46:c7:89:05:d2:29:08:
66:0a:4a:ee:78:02:fa:ad:51:16:fa:cd:06:7d:44:2c:f2:29:
82:d8:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:59:15 2025 by rpki-client