Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0493A6402F1F11F0B928A9B7DAE4EC9C.roa
File: 0493A6402F1F11F0B928A9B7DAE4EC9C.roa (raw, json)
Hash identifier: 4XSWrXJPhflexYLasJqeeVlyd/nNCZpTfUigVt4GS3M=
Subject key identifier: 77:A4:73:60:9C:47:B2:BD:E3:47:D3:64:57:D5:1A:86:A8:6B:88:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0493A6402F1F11F0B928A9B7DAE4EC9C.roa
Signing time: Mon 12 May 2025 10:51:12 +0000
ROA not before: Mon 12 May 2025 10:51:07 +0000
ROA not after: Mon 09 Jun 2025 10:51:07 +0000
asID: 134687
IP address blocks: 154.89.1.0/24 maxlen: 24
154.89.12.0/24 maxlen: 24
154.89.13.0/24 maxlen: 24
154.89.14.0/24 maxlen: 24
154.89.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98267 (0x17fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 10:51:07 2025 GMT
Not After : Jun 9 10:51:07 2025 GMT
Subject: CN=6821d2a0-0a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:a7:a8:d9:08:e3:c2:57:ff:bd:ac:a7:3f:
c8:cb:e4:e3:57:02:71:bd:12:67:6b:ad:7d:7b:8a:
7c:28:ed:65:3e:f9:0e:50:ce:2d:4e:2d:da:08:7f:
f1:04:a7:2b:6c:13:5e:4a:4d:76:63:ec:43:76:8a:
72:ae:4b:4e:16:75:d5:d5:6c:18:23:64:11:cb:4e:
de:df:fb:2b:f7:d4:d3:a1:9b:c4:2f:28:10:56:02:
b7:ad:f3:06:03:d4:e0:30:52:a7:3d:a3:a0:ee:a7:
3e:4a:cf:40:7d:e3:fe:42:4f:eb:9b:6d:dd:3c:ad:
c3:70:1c:f1:d7:3d:e1:b8:01:4a:5c:1f:4f:54:e3:
5b:96:9b:f2:6b:c9:de:6e:09:7f:5f:12:c2:70:ac:
87:fe:f7:fc:3a:f3:36:08:a0:99:14:85:a1:56:ac:
35:ba:be:fd:f7:65:89:31:20:97:6d:b2:be:95:f4:
6f:d9:02:2a:d9:c8:d3:8a:05:9a:97:1a:ff:08:cc:
7e:91:f5:dd:fb:6a:2f:ad:15:1f:88:0d:7b:d0:27:
46:a3:98:62:10:f1:a2:f6:aa:89:af:42:38:6d:e5:
de:06:4e:cd:10:4f:32:99:c7:0d:1f:16:97:a3:61:
6d:3d:df:0a:7e:cf:11:5b:76:3d:a1:bb:44:30:df:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A4:73:60:9C:47:B2:BD:E3:47:D3:64:57:D5:1A:86:A8:6B:88:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0493A6402F1F11F0B928A9B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.1.0/24
154.89.12.0/22
Signature Algorithm: sha256WithRSAEncryption
19:5d:02:96:9e:33:e2:a5:07:92:3f:82:1d:cd:4d:84:94:64:
d5:c2:06:0d:d6:f1:96:e4:1a:44:3d:d8:6f:12:ef:df:93:f3:
d6:81:be:15:46:87:4e:33:8a:7e:15:29:8d:ed:75:47:99:c3:
11:93:b1:81:9d:14:36:8b:df:a8:c9:c5:03:0f:ec:c6:5c:95:
e8:c3:65:7c:a2:e1:36:fc:da:e2:3a:4a:3f:a2:2b:51:9a:89:
46:f7:a8:2e:5e:cd:5d:dd:c2:b8:16:5b:d2:c5:f3:4c:24:e9:
dd:dd:65:04:54:67:47:94:39:c3:03:81:20:c0:f7:33:15:0f:
f5:5f:0e:ec:8a:ea:3e:4a:23:d8:df:ff:fe:4f:bf:9f:ec:af:
e0:38:a4:1d:cd:3b:a4:64:7f:a2:b6:d1:02:36:ae:1d:d6:8a:
77:e1:11:cd:4b:8c:ca:7e:b2:c4:c2:b6:ee:55:4f:98:ed:95:
6f:36:35:de:d0:2b:ef:6e:89:ca:8e:73:18:32:44:47:ae:2e:
78:b8:c5:7a:45:a9:52:62:f6:d5:37:04:91:8a:80:95:94:f4:
30:39:b9:10:76:ea:d9:ab:72:18:59:08:b7:0a:b5:e7:dc:02:
ab:01:01:a3:45:da:1f:a3:50:29:79:11:7c:3d:70:0f:b0:b0:
5e:8f:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:01:14 2025 by rpki-client