Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086E1F7E28BD11F08D7A758BDAE4EC9C.roa
File: 086E1F7E28BD11F08D7A758BDAE4EC9C.roa (raw, json)
Hash identifier: 6LhyL7I93QcrRzz8xNNj2W1Num9dsbqtUeV1CPa9ro4=
Subject key identifier: 3D:86:06:BC:80:68:DC:BF:88:14:AA:CE:08:60:E3:D6:99:1E:F1:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086E1F7E28BD11F08D7A758BDAE4EC9C.roa
Signing time: Sun 04 May 2025 07:54:41 +0000
ROA not before: Sun 04 May 2025 07:54:36 +0000
ROA not after: Tue 10 Jun 2025 07:54:36 +0000
asID: 8796
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97980 (0x17ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 07:54:36 2025 GMT
Not After : Jun 10 07:54:36 2025 GMT
Subject: CN=68171d41-3ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:19:2e:ab:5d:f1:02:25:1c:ba:94:fe:5d:
a5:f8:a4:a8:a0:35:a2:7b:ff:cb:1f:bb:57:54:c7:
03:7d:92:fb:20:59:61:3c:69:8c:5b:fb:9a:bb:cf:
f8:aa:5d:5e:5e:3f:cf:2a:b6:75:b2:1b:7a:2e:12:
95:c5:6f:94:fe:24:fc:c5:1a:59:ff:28:61:ea:93:
69:fe:0e:1d:b5:17:fd:20:df:0d:a6:9e:ac:3f:f5:
2e:ae:b5:24:aa:47:35:29:e9:89:01:12:e0:32:b9:
4d:15:c8:cb:b5:ae:15:45:05:7b:54:87:7f:d9:46:
52:f3:4e:81:78:1a:cc:a9:0d:d1:6c:bf:ef:03:8a:
ff:df:c3:34:0a:59:a1:a3:08:fe:59:4a:6e:fd:4e:
8a:d2:c6:b6:b3:88:64:db:07:00:26:0b:65:f9:90:
c3:47:76:ff:58:09:42:56:1d:9f:64:eb:75:fd:61:
ad:68:d1:ef:dd:40:df:f7:6e:63:d3:8b:60:18:11:
e7:34:b9:14:98:af:f7:dc:eb:a3:21:70:ae:c7:35:
0d:ba:2f:03:3d:07:54:8a:f7:ab:a8:68:10:d8:5c:
33:43:43:58:d0:0f:fc:ab:0c:97:35:79:9c:66:15:
88:2c:f2:f6:53:47:55:c8:ae:2d:be:74:9b:6c:16:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:86:06:BC:80:68:DC:BF:88:14:AA:CE:08:60:E3:D6:99:1E:F1:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086E1F7E28BD11F08D7A758BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
41:ad:a7:6a:8e:67:38:83:78:36:8d:f5:8c:e4:41:97:a4:d6:
cc:38:5b:02:cd:c9:17:cd:6a:ff:11:28:b5:5a:89:00:25:2d:
8c:36:e1:0e:f6:11:c0:98:ed:b7:70:48:fe:c0:ee:39:6b:16:
fb:25:e1:44:99:7d:0f:60:51:3a:b9:f2:5a:77:0f:1f:01:2c:
78:ab:5c:c9:11:45:94:d3:6f:bc:65:58:22:39:b7:f4:99:9e:
c5:0a:e3:65:a6:be:13:bd:02:16:67:84:e7:73:61:c7:f0:49:
25:bd:9f:7c:6c:d9:37:ce:46:b8:7a:0e:20:7d:3e:ee:c7:06:
33:c0:c0:f7:e2:6a:c7:69:53:2a:2b:79:7d:af:20:43:9d:2a:
11:19:35:a6:c8:29:35:7c:4e:45:d7:a4:49:2b:dd:78:f1:63:
c0:69:2a:bf:6d:78:0a:e2:62:df:97:7a:22:7f:23:4f:b9:a3:
72:23:df:60:94:7c:2a:f5:17:ce:41:79:14:2f:2f:71:e9:ee:
8c:39:67:cd:a2:b3:b0:60:e3:68:5b:37:37:4f:61:b6:ab:6f:
94:47:d7:a9:51:8d:7e:31:47:83:ba:22:c5:ee:57:ef:03:93:
69:d5:5b:cb:0f:12:e8:57:a5:8d:f0:85:e6:7c:c5:6a:df:23:
be:77:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:04 2025 by rpki-client