Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AF200E242C11F0A31E73F0DAE4EC9C.roa
File: 08AF200E242C11F0A31E73F0DAE4EC9C.roa (raw, json)
Hash identifier: lBohzjOxMV/7rFgg9xIBEfqqsYyK66mdZ6Qk1VHHnb0=
Subject key identifier: 6B:29:E9:50:05:59:EC:21:0A:35:32:F0:2F:CB:89:67:36:13:EC:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AF200E242C11F0A31E73F0DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:26:39 +0000
ROA not before: Mon 28 Apr 2025 12:26:35 +0000
ROA not after: Sat 21 Mar 2026 12:26:35 +0000
asID: 984
IP address blocks: 154.89.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 08:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97186 (0x17ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:26:35 2025 GMT
Not After : Mar 21 12:26:35 2026 GMT
Subject: CN=680f73ff-1850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:bb:68:46:06:76:70:ee:d3:62:1c:99:b2:
86:ea:40:89:22:04:a9:a5:24:8f:48:4b:54:ac:ad:
6d:fe:3c:80:57:c8:ae:d4:99:41:9e:1f:fa:5a:ec:
15:67:7d:5d:9b:17:b8:3f:9c:bd:44:cc:93:b3:f2:
7e:2b:d2:42:cd:f8:24:9c:6a:fc:9e:9b:80:e1:e5:
8a:f7:99:21:27:12:2c:52:0b:4e:fa:5e:dd:70:ef:
60:65:11:c5:1b:e7:e5:bf:a6:9d:2e:7c:4a:6a:2c:
bc:69:25:7e:4e:cd:d0:2d:16:8c:a6:5b:be:09:a6:
92:4d:66:89:c0:2e:dc:12:3f:6c:12:ee:cc:cc:05:
d1:60:32:32:75:10:24:37:56:99:dd:5d:df:00:c1:
54:f3:e6:b6:10:ef:69:07:f9:8e:ed:6b:e4:84:88:
5d:67:bc:67:00:39:83:06:23:00:6b:72:df:73:8c:
3b:91:c6:5a:3d:35:6c:5d:6b:a0:f6:3e:0d:c7:83:
d4:4a:30:52:45:3a:5c:c2:7f:96:8a:f2:e7:ff:d4:
f0:67:7c:19:1c:50:0a:ea:8a:58:c6:3d:5b:c2:c9:
43:36:a2:a2:22:d1:ab:62:4d:b7:eb:fa:d7:d7:fb:
08:f1:ad:b4:a7:f9:8f:68:fe:e4:1f:ae:c1:98:25:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:E9:50:05:59:EC:21:0A:35:32:F0:2F:CB:89:67:36:13:EC:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08AF200E242C11F0A31E73F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.8.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f4:60:ce:4b:ae:b6:5c:8a:bc:ec:2e:b6:01:d7:47:22:6e:
c1:a3:5f:ff:de:8c:e3:51:39:58:a3:00:8c:11:85:88:e3:c6:
2c:cf:be:33:fb:eb:98:6d:21:1d:95:65:b7:ef:5b:aa:6e:9f:
14:1c:dc:d4:76:8e:32:68:a9:90:81:45:a3:af:53:04:60:37:
8c:bc:70:95:e3:1b:1d:2b:24:dd:3b:6c:ae:29:ba:51:a5:70:
8b:d1:64:9d:a6:92:17:6d:90:2a:93:68:ac:c9:78:78:f1:07:
cf:ff:38:d8:8c:8c:3a:28:f5:78:ca:13:94:d9:9e:af:d2:8d:
a3:4c:3b:62:7d:39:b8:d3:a5:b4:27:8c:97:f1:ec:f2:96:71:
31:1b:a9:01:35:2d:49:63:a5:2d:2d:ac:08:69:71:2e:df:8d:
2d:aa:f2:1f:5d:b5:d9:e5:f6:45:63:04:cb:7e:f2:b6:dc:af:
3e:0a:18:f9:dc:6a:56:1c:40:ba:47:11:49:31:49:ba:8c:0f:
34:b3:57:68:02:1c:3d:01:4e:86:ed:41:31:ef:53:51:63:49:
6f:fd:b2:70:a4:d5:4b:e6:3a:d5:c0:01:1f:4b:2f:63:e4:10:
cd:fb:83:1a:2d:d1:6a:f7:4d:26:83:91:52:90:97:f5:ea:2d:
3e:a0:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:41:53 2025 by rpki-client