Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5C8FF1025C111F0BB52FE91DAE4EC9C.roa
File: D5C8FF1025C111F0BB52FE91DAE4EC9C.roa (raw, json)
Hash identifier: RJkXyDGtLamuykh0n7YSFx+MLV+L5j15cvF5DptJChw=
Subject key identifier: 14:16:85:D5:8B:58:7E:4D:50:B4:E8:26:F5:A2:9A:29:3C:5C:ED:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5C8FF1025C111F0BB52FE91DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 12:51:30 +0000
ROA not before: Wed 30 Apr 2025 12:51:25 +0000
ROA not after: Sun 26 Apr 2026 12:51:25 +0000
asID: 984
IP address blocks: 154.84.187.0/24 maxlen: 24
154.84.191.0/24 maxlen: 24
154.85.120.0/24 maxlen: 24
154.85.123.0/24 maxlen: 24
154.86.111.0/24 maxlen: 24
154.90.2.0/24 maxlen: 24
154.90.3.0/24 maxlen: 24
154.90.4.0/24 maxlen: 24
154.90.5.0/24 maxlen: 24
154.90.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97646 (0x17d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 12:51:25 2025 GMT
Not After : Apr 26 12:51:25 2026 GMT
Subject: CN=68121cd2-85e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:f1:bf:75:14:98:49:b7:ba:20:98:fe:44:
2d:22:f4:58:38:93:25:8f:8f:9a:03:69:74:26:66:
e0:99:2d:0c:d5:41:a6:20:c0:03:01:11:65:bf:ef:
51:83:ce:4a:00:b7:77:a3:3a:66:34:54:d6:64:39:
8c:82:49:49:58:40:d4:d8:56:61:ea:5c:83:52:39:
7c:ab:2d:6d:49:e8:cd:79:31:03:8f:f9:f4:03:72:
67:ec:1d:6d:49:09:ba:34:1f:e5:11:6c:17:70:f4:
c6:31:fd:d8:91:94:46:75:83:be:89:97:9d:66:c6:
ce:62:dc:8a:90:17:33:8b:8e:84:7f:69:3e:36:e7:
6f:68:d3:1a:ca:38:b1:f7:9c:da:fa:91:27:e1:ce:
3f:c6:7b:ab:eb:40:0b:5e:d0:f7:15:7a:cc:9e:0b:
4c:38:cc:37:4c:00:85:63:b8:a4:59:e5:d7:73:35:
1e:11:dc:a6:86:17:26:09:96:fe:d3:68:2b:14:32:
d9:1f:29:5f:5f:42:d6:8e:25:86:19:c9:10:a9:0f:
b5:d7:40:02:19:23:b9:0e:e4:ef:7f:ef:44:70:3b:
97:fa:ef:98:9e:1b:32:c5:84:ff:21:06:67:08:c1:
3a:9e:d8:f1:ca:7e:96:fe:d8:18:f1:e4:ad:d1:47:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:85:D5:8B:58:7E:4D:50:B4:E8:26:F5:A2:9A:29:3C:5C:ED:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5C8FF1025C111F0BB52FE91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.187.0/24
154.84.191.0/24
154.85.120.0/24
154.85.123.0/24
154.86.111.0/24
154.90.2.0-154.90.6.255
Signature Algorithm: sha256WithRSAEncryption
24:dd:a3:ff:af:82:ad:d0:9a:23:58:d9:09:64:5a:b6:4a:79:
e6:0b:71:21:3d:db:a2:3f:65:42:d6:1e:90:85:91:28:73:06:
2d:0d:04:e4:5d:84:7a:fe:53:d1:58:03:34:bc:56:da:d1:64:
8e:37:78:f3:bd:81:fb:cb:93:cc:13:37:86:d4:cc:2c:1f:22:
36:28:f4:2e:97:46:3e:e8:5c:98:9d:3e:e1:d8:e6:b2:32:d2:
b6:43:3a:2d:8f:c9:7e:85:d2:f8:59:86:f0:2a:b4:8c:a9:dd:
88:38:48:c2:6a:5c:31:a4:3d:0b:0c:cc:33:6d:f4:6b:43:5a:
85:c7:92:4b:3d:3e:c2:77:5c:d8:f5:42:76:60:79:ae:44:13:
50:b5:85:f2:9d:fd:ad:07:38:20:29:1d:6a:ee:58:bf:ee:b1:
ea:84:84:23:a5:1d:a9:77:19:be:ec:75:8a:53:25:d2:20:41:
68:0c:b0:c0:8b:24:91:d2:73:96:ab:54:73:da:cf:0d:77:19:
85:69:52:df:5b:a4:b0:b8:48:be:31:07:90:49:13:2a:48:d0:
92:ed:3e:65:b1:6a:3d:17:92:87:f7:2a:d8:fd:8f:aa:3b:df:
b9:30:3f:5b:51:e3:66:f1:08:87:cd:17:cc:48:db:ab:2f:f9:
19:eb:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:42:45 2025 by rpki-client