Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A8517E42FF311F097B541C2DAE4EC9C.roa
File: 0A8517E42FF311F097B541C2DAE4EC9C.roa (raw, json)
Hash identifier: ubeWS1sHDp9r0TLsnkdrkRkCwC+Oz2ubW5M05rLoM+M=
Subject key identifier: C6:C8:F7:E3:1B:7A:00:01:47:24:5D:F3:2A:44:A2:9E:7F:B5:DA:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018062
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A8517E42FF311F097B541C2DAE4EC9C.roa
Signing time: Tue 13 May 2025 12:08:55 +0000
ROA not before: Tue 13 May 2025 12:08:50 +0000
ROA not after: Tue 17 Jun 2025 12:08:50 +0000
asID: 203020
IP address blocks: 154.204.96.0/19 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98402 (0x18062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 12:08:50 2025 GMT
Not After : Jun 17 12:08:50 2025 GMT
Subject: CN=68233657-47dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:6a:5f:3e:97:3d:a9:99:4b:ee:80:cb:fd:
cf:77:99:2c:63:bf:19:3a:44:19:b3:8e:f9:89:1f:
67:0c:a2:11:9e:63:8b:18:5e:62:6c:01:f1:ca:e3:
23:86:4e:cf:cc:85:49:c2:c1:4c:35:ec:ef:29:90:
ae:d5:e1:93:a7:b9:57:cd:39:02:f1:78:be:4c:38:
78:46:b1:dc:9d:33:76:9a:df:89:e1:8f:1b:32:23:
7b:1f:d8:59:61:b8:4a:9d:de:3e:8b:15:1c:a0:d7:
83:6e:40:38:c2:8a:3d:77:f0:80:05:41:f3:4f:4c:
82:92:15:a5:a6:72:c3:d0:be:8a:d4:a9:24:58:ab:
fd:aa:a3:06:08:7d:85:12:37:17:9d:08:81:91:82:
57:6d:6c:53:2c:2f:26:a6:91:7e:57:cf:98:f9:1b:
03:6e:ab:0e:f9:e9:c4:91:11:06:57:a5:5b:cd:93:
e9:ec:d3:61:4d:b7:fc:cc:7d:ae:b1:bb:0e:71:3c:
1c:c6:55:31:ab:d3:b0:a1:75:3f:d8:a2:6b:d5:0a:
de:39:c0:30:1a:84:aa:4d:b0:ae:1e:b4:49:81:85:
99:f9:fa:70:49:ab:07:2d:39:01:5d:4d:b0:bf:28:
54:33:8f:11:df:79:65:d9:16:60:06:4f:85:eb:58:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C8:F7:E3:1B:7A:00:01:47:24:5D:F3:2A:44:A2:9E:7F:B5:DA:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A8517E42FF311F097B541C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.96.0/19
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
36:33:e2:d8:cb:f2:13:97:b9:94:bf:1e:6b:44:26:87:e4:e3:
4c:6d:07:9f:18:2a:79:44:3a:7a:3a:8c:79:82:97:43:b4:04:
5f:7c:d8:78:f1:95:a6:bf:b9:fb:da:8c:f9:35:46:fd:e3:2a:
5a:df:50:f9:b3:ee:8c:de:35:61:9b:f5:17:33:56:e6:bf:d9:
f9:e9:f1:36:85:16:fc:6c:c4:1b:24:93:ad:10:d5:12:74:26:
b7:e3:9b:b9:6e:47:8f:8d:3d:b7:72:96:61:50:e2:5b:56:a2:
53:43:8d:27:a1:93:45:16:fb:2b:ea:c1:01:ef:f7:6d:a3:f2:
76:10:53:66:c2:97:91:f5:ec:a0:82:aa:20:df:93:da:f5:e1:
5d:d7:cf:d7:f8:59:a1:59:06:76:ab:17:f8:a2:5e:38:e0:44:
56:af:5e:e0:7f:90:b8:72:46:2f:f2:de:b0:8c:6a:bd:cf:f5:
db:eb:85:a5:1f:4a:47:40:cb:00:f1:df:42:b2:1b:f4:1f:d5:
e1:39:dd:02:ed:37:6d:4d:7a:4e:64:b8:0b:d9:35:95:ee:e5:
36:fc:45:5a:39:d2:ca:7d:2d:6c:e5:76:41:f5:19:08:1b:6e:
a9:49:7f:08:ba:17:3f:b6:7a:c6:91:d0:a2:c8:0c:54:6d:50:
eb:e9:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:46:03 2025 by rpki-client