Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19751E5E30AF11F0B75961B0DAE4EC9C.roa
File: 19751E5E30AF11F0B75961B0DAE4EC9C.roa (raw, json)
Hash identifier: lko0u21lOzKsFFw2Vd15QHtG3A3rSf5cjDEh3uW2c4s=
Subject key identifier: 8E:FC:F3:3B:3A:59:E5:D5:2C:44:E0:AE:8B:57:23:18:E9:30:A5:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018095
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19751E5E30AF11F0B75961B0DAE4EC9C.roa
Signing time: Wed 14 May 2025 10:35:06 +0000
ROA not before: Wed 14 May 2025 10:35:01 +0000
ROA not after: Wed 25 Jun 2025 10:35:01 +0000
asID: 61112
IP address blocks: 154.85.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98453 (0x18095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 10:35:01 2025 GMT
Not After : Jun 25 10:35:01 2025 GMT
Subject: CN=682471da-6d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:5a:2f:ef:0f:b2:b0:c1:26:ee:1f:bd:3d:
41:5e:ca:ff:13:cc:b1:b3:26:18:a0:0a:2d:3f:c8:
21:63:ab:46:59:11:05:0b:0a:38:a4:e1:20:90:e7:
30:c6:31:22:3c:3a:39:40:1e:0f:9b:ab:d9:98:76:
c4:f5:84:07:34:4f:7f:08:1a:b3:30:c4:5e:67:17:
64:0c:03:55:fd:8a:cb:7e:37:3f:99:03:fc:38:64:
99:74:3c:1e:fb:44:a6:b7:1c:0a:0f:a4:4c:6c:3d:
23:8c:89:ca:9f:a2:fe:ca:12:74:60:88:3f:7b:35:
e6:f1:d7:f6:cb:0f:e4:48:d1:e9:f4:79:63:3a:c0:
39:ff:43:6e:6e:0c:41:67:cf:b7:a4:8f:0e:25:a5:
27:70:36:dd:ae:d5:1f:d4:f0:c0:ca:c8:38:02:b0:
ed:ba:4b:9d:5f:92:79:fb:33:da:23:96:e2:60:9d:
26:0b:fe:d2:55:9e:81:2c:52:80:57:d3:ae:74:b0:
14:06:d0:f3:b8:6c:7d:9a:ab:9f:19:fc:31:78:2b:
d5:81:3f:bd:f8:dc:3f:71:7d:27:ab:01:ee:2c:46:
40:15:90:7d:4e:b2:0f:b8:ba:c3:1c:83:88:1d:5f:
ce:af:1d:80:46:2d:2f:98:c6:1f:63:2c:71:c2:b3:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:F3:3B:3A:59:E5:D5:2C:44:E0:AE:8B:57:23:18:E9:30:A5:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19751E5E30AF11F0B75961B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.18.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:7d:5c:65:f9:47:82:58:5e:60:7e:0d:82:7a:ab:42:10:38:
52:c9:1a:7e:e5:5e:b2:2f:30:ac:5f:b2:00:a4:09:8f:61:55:
8f:ed:24:c1:1f:37:11:a7:c6:04:4b:23:c9:3a:08:70:27:cc:
36:72:cf:61:6b:54:81:5e:8e:0f:03:21:fb:73:2b:10:e9:76:
4b:b4:a5:85:30:5d:f8:60:88:c7:28:6b:91:f9:f0:bc:a7:85:
ac:1e:25:40:ad:c6:8d:4c:81:99:1f:3b:53:b4:f3:b9:fd:d8:
35:c3:34:2f:c1:d4:9a:9e:67:01:84:e1:3c:16:3c:35:38:73:
3a:27:04:74:c8:af:22:0e:b6:7c:a1:ff:a1:16:93:0a:6e:ec:
88:88:75:8a:a7:0b:a2:78:7b:cf:b1:67:03:bd:14:66:62:47:
04:2e:cf:17:f8:82:e1:a6:df:55:5e:b3:38:e7:ba:c9:bf:3d:
b2:58:bd:3d:13:65:0b:10:90:ca:0f:82:39:0d:f8:e0:3a:3f:
96:90:a1:d6:f6:2e:14:a9:d4:18:0f:18:7f:05:d5:c3:0e:ef:
da:b8:61:74:7f:26:8b:29:59:5a:bc:3f:aa:c0:44:6c:18:70:
6a:9b:2b:f6:1c:73:08:f4:97:46:5c:f8:51:81:d6:9d:f8:a3:
3f:a1:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:06 2025 by rpki-client