Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E67EF6C437FB11F0BA6F56CEDAE4EC9C.roa
File: E67EF6C437FB11F0BA6F56CEDAE4EC9C.roa (raw, json)
Hash identifier: 7GZ1GjVquTzTZ068Jd06h3yuMA15MV6JE/brdhChGpA=
Subject key identifier: 8A:8A:FE:D2:48:B7:54:B4:CE:44:B0:49:8A:3A:3B:E2:DA:16:A9:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018241
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E67EF6C437FB11F0BA6F56CEDAE4EC9C.roa
Signing time: Fri 23 May 2025 17:32:29 +0000
ROA not before: Fri 23 May 2025 17:32:24 +0000
ROA not after: Tue 01 Jul 2025 17:32:24 +0000
asID: 44559
IP address blocks: 154.203.225.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98881 (0x18241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 17:32:24 2025 GMT
Not After : Jul 1 17:32:24 2025 GMT
Subject: CN=6830b12d-dc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:dc:24:80:13:fc:cb:30:0f:fe:b8:cd:eb:
19:e6:3d:0e:ab:23:04:bd:fb:57:ba:d0:41:4f:fc:
31:1c:fe:44:d9:a8:26:61:b4:7b:64:f7:7c:10:33:
aa:cd:53:3b:43:58:ac:7a:00:85:65:ee:bb:30:9e:
c0:58:49:e0:fb:6a:14:84:66:fc:e9:42:96:d1:59:
19:6f:21:60:95:3a:db:25:af:00:2b:f1:6a:96:70:
a8:83:57:74:96:e8:2a:54:d6:ef:e1:52:53:96:63:
10:df:df:89:cd:a5:20:cb:a2:87:76:3e:d7:c6:9f:
77:66:50:5b:92:14:05:da:88:78:cb:75:d9:83:a2:
4e:7a:63:79:00:07:4f:6f:c9:6b:f2:4c:a7:12:d7:
02:19:aa:86:b7:32:36:3c:52:36:e3:54:88:9c:1f:
89:91:5f:36:d0:2b:5a:aa:de:ab:5c:ce:06:00:22:
1d:d9:b5:77:de:f6:79:aa:17:a7:35:2b:3c:f6:23:
4c:2a:23:d4:93:85:f7:45:e9:1e:26:b4:c4:c7:bb:
e7:ef:9a:6f:fc:0d:f5:8f:bc:ce:90:e7:24:01:2c:
dc:6f:25:c8:78:f8:73:ca:87:80:1f:92:fe:e7:6a:
b4:af:78:8d:81:bc:f3:40:54:23:2d:d1:38:95:27:
3a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8A:FE:D2:48:B7:54:B4:CE:44:B0:49:8A:3A:3B:E2:DA:16:A9:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E67EF6C437FB11F0BA6F56CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.225.0/24
154.205.224.0-154.205.232.255
Signature Algorithm: sha256WithRSAEncryption
5c:1a:ea:ca:c6:87:6e:23:26:a7:fc:15:59:bb:7c:e1:8e:bd:
3b:aa:2f:ac:d7:79:b2:33:b9:b7:21:af:43:e8:4b:2f:6f:7f:
c1:34:6c:b0:8d:a2:84:ad:99:c6:2b:a9:7f:77:6a:da:06:c6:
63:06:3e:64:56:9f:e0:21:29:d4:6e:19:43:be:d7:09:d8:f1:
cb:11:44:ef:eb:db:70:49:6b:81:50:ce:fc:66:dc:bc:85:7c:
15:b7:5c:04:8d:74:64:ce:6c:74:aa:d7:f3:04:14:26:a1:5d:
b7:8d:41:16:ee:b5:e4:05:f0:4b:40:02:90:dc:36:29:f0:68:
40:91:13:73:ff:db:ea:00:56:7f:da:23:88:d1:17:ff:11:7c:
b3:e1:50:a1:65:3b:e9:13:0a:77:3a:8d:54:e4:01:26:f6:6e:
6c:7f:7b:3d:88:c1:7f:3a:66:61:db:54:a8:86:3a:df:66:28:
c2:61:02:cf:0b:25:3b:b5:f8:4a:88:77:5f:46:5c:d6:c7:50:
a2:9a:72:00:7f:3b:31:dc:9e:12:40:b9:4c:6d:9f:dc:35:c7:
6c:6f:57:ac:7a:3e:2b:ce:b8:b2:9a:20:3e:f1:69:32:03:28:
2d:ab:83:c0:d8:2d:09:71:4b:93:42:5a:e9:66:0d:6d:ba:f1:
a4:0c:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:24:22 2025 by rpki-client