Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/089EC0742A3011F0B78D22BADAE4EC9C.roa
File: 089EC0742A3011F0B78D22BADAE4EC9C.roa (raw, json)
Hash identifier: 7qq9iASRlyqII5qU+FPr6c0VHicd2s7HGjzvFrxwWTY=
Subject key identifier: 1E:D8:1F:E4:3B:3F:F0:5F:F7:F3:A9:5F:72:C6:1C:5D:24:E4:DA:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/089EC0742A3011F0B78D22BADAE4EC9C.roa
Signing time: Tue 06 May 2025 04:10:24 +0000
ROA not before: Tue 06 May 2025 04:10:20 +0000
ROA not after: Fri 06 Jun 2025 04:10:20 +0000
asID: 395886
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 01:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98063 (0x17f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 04:10:20 2025 GMT
Not After : Jun 6 04:10:20 2025 GMT
Subject: CN=68198bb0-abdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:3c:d4:32:f8:9d:82:e6:c2:50:dc:36:3e:
ed:c2:45:79:1b:25:eb:c0:27:6d:7f:3a:fe:a4:07:
0c:49:1b:29:66:14:e4:c8:24:a4:73:bc:dd:0b:af:
dc:83:f2:1a:d6:98:4d:73:bd:a7:e2:12:ac:ec:f9:
a5:44:7b:9b:9d:f3:b7:1f:9d:45:a9:86:ab:5e:42:
e4:c0:45:de:9d:fc:91:9d:88:59:47:12:8c:b2:63:
8a:0a:1f:9f:a6:60:5e:ab:d6:18:c2:c6:58:43:a7:
bc:66:29:05:0f:24:56:01:fb:da:33:ae:b6:83:43:
70:1e:7e:20:82:ce:d6:f0:05:6b:65:21:f1:76:7d:
0f:12:4d:64:57:39:44:e4:a0:d1:f3:2a:52:1b:83:
ac:e0:ea:94:4e:5a:9a:be:f4:49:5f:1c:d7:cf:23:
15:cc:a7:12:3e:e3:25:8d:8a:db:ab:13:b4:64:a0:
2d:d1:8d:fe:7e:af:03:20:ca:24:25:10:6d:34:b8:
dd:f4:91:64:ec:4f:00:90:5a:18:d0:8a:b2:e6:17:
52:f3:79:c3:7e:17:1d:be:b1:71:9f:40:54:65:24:
69:27:af:6f:9b:ab:9d:ca:46:d0:5b:2d:8e:7d:94:
ca:6c:a0:39:49:2f:05:8b:84:a2:22:68:a9:5a:ca:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:1F:E4:3B:3F:F0:5F:F7:F3:A9:5F:72:C6:1C:5D:24:E4:DA:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/089EC0742A3011F0B78D22BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a3:74:fe:22:bb:a0:d4:50:19:06:be:1c:24:1d:50:68:25:cf:
50:27:59:82:27:85:47:de:88:9b:ee:c8:1a:7b:79:5f:e3:82:
a8:e5:4f:8b:e0:dd:23:25:3e:f2:8e:a4:0b:9b:67:38:ec:59:
79:85:9b:a1:c8:b1:69:91:a4:ca:af:9b:48:1a:29:7f:74:81:
af:17:1a:b0:6f:a6:ba:e9:fd:34:a3:f0:61:4d:70:2a:7a:7b:
20:f8:61:b5:e5:4b:4b:f0:b4:af:33:b9:ee:05:3b:e2:0a:14:
37:d2:47:ab:97:d4:48:88:71:b3:d9:ee:04:d5:1f:c9:5e:6c:
2f:87:14:7e:26:5d:24:71:41:26:eb:aa:ca:8e:92:a4:50:57:
7e:8a:9a:bd:ec:9f:ae:a4:9a:08:e4:87:4d:b9:7b:ef:e4:a6:
24:a1:aa:a2:4f:d7:60:de:57:72:98:51:bc:ef:4c:89:c6:73:
ee:2a:65:46:f7:bd:0f:29:dd:e0:62:ff:29:ad:2c:8d:78:31:
93:cd:8d:cd:aa:7c:b0:cb:4e:c5:3e:b4:f0:ea:73:18:8d:53:
ec:c3:19:fd:c9:6a:a3:91:05:8e:cb:c2:25:1a:65:89:d8:a2:
2d:be:96:a2:29:1a:ef:4e:73:f1:5c:b0:d7:4c:2d:59:6a:93:
2f:01:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:55:04 2025 by rpki-client