Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CAD53F8242E11F099AECF7FDAE4EC9C.roa
File: 1CAD53F8242E11F099AECF7FDAE4EC9C.roa (raw, json)
Hash identifier: VfoigPHVY6//T3t27KYLJ/vYLAk+aUx5dfBrVlGjrng=
Subject key identifier: B1:06:63:32:22:D9:61:4D:5D:99:24:C6:2B:8B:1D:D8:02:71:AC:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CAD53F8242E11F099AECF7FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:41:32 +0000
ROA not before: Mon 28 Apr 2025 12:41:27 +0000
ROA not after: Mon 23 Mar 2026 12:41:27 +0000
asID: 984
IP address blocks: 154.90.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97204 (0x17bb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:41:27 2025 GMT
Not After : Mar 23 12:41:27 2026 GMT
Subject: CN=680f777c-a5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:70:85:db:04:68:60:54:50:39:1d:a9:3c:
63:aa:5d:4c:b3:c0:33:0b:14:ea:37:34:7f:4b:d8:
0d:d5:27:d3:ce:7f:cb:2b:f3:7a:cd:eb:33:a3:52:
68:60:65:23:4d:cf:cb:02:01:78:05:20:89:c6:5b:
d6:41:22:f6:2b:55:93:ee:dd:a8:6e:92:99:c4:2d:
66:c7:2e:7e:b5:f5:8b:9e:c2:f4:64:f7:14:be:02:
19:27:d2:1b:85:d1:df:26:9a:7c:2b:b0:66:1f:a0:
51:34:1c:a1:bb:bf:74:fb:2c:c6:ea:65:c2:ef:9e:
44:e0:5f:70:58:04:c4:4f:7a:a3:ec:eb:6a:1e:b5:
98:e8:28:fc:95:cd:0d:e2:66:5d:54:a9:6c:63:48:
04:80:66:bf:3f:30:e5:b0:8f:d0:66:6c:a2:9e:19:
b8:0b:f7:10:7c:2e:c3:fc:cb:0a:25:cd:48:27:5b:
c9:2d:36:ef:e2:79:76:b6:5e:71:8f:c4:5a:53:93:
b5:16:bf:21:5b:c1:dc:40:f9:e1:e7:7a:b0:b7:e4:
df:fe:9d:9d:a8:47:5f:3d:f9:09:9b:7d:bf:a0:75:
fa:07:ef:4a:70:b0:b2:04:34:82:07:72:97:73:8f:
17:1f:ae:ad:fd:92:7a:e3:5b:54:99:87:16:08:47:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:63:32:22:D9:61:4D:5D:99:24:C6:2B:8B:1D:D8:02:71:AC:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CAD53F8242E11F099AECF7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.18.0/24
Signature Algorithm: sha256WithRSAEncryption
27:33:ee:5d:b0:67:cb:26:86:9d:3a:b2:aa:54:f0:a0:9b:50:
1d:f1:0e:62:a5:90:6a:a4:63:95:c5:19:00:bb:e0:dc:b2:3a:
9f:18:88:26:98:ae:5c:f3:28:c7:ca:c3:e2:6c:07:02:e2:87:
cd:8e:56:5f:0c:7f:a4:28:4d:cd:9b:d9:9c:ad:50:9a:8a:86:
71:b4:fb:07:f8:8d:f6:d4:6e:83:3d:6a:aa:47:25:5b:2c:d6:
f3:f2:0a:83:1b:95:0a:6b:23:1a:4d:ae:ac:7c:8c:c1:db:27:
fe:7f:e9:79:70:76:0a:50:ab:d1:e6:2f:00:fb:8f:19:0e:52:
c0:e7:60:31:6d:85:93:6c:1e:b9:c2:14:a1:22:57:41:ca:d1:
69:cd:68:31:e9:b5:fa:2a:3a:69:f6:2d:df:a4:f2:41:6b:7a:
b3:a9:23:8c:65:45:03:81:0a:2a:25:9a:41:66:57:8d:b1:4f:
70:f0:7d:ee:b2:22:eb:69:5b:e6:9b:5f:32:8b:7c:80:9d:6b:
88:dc:d0:d0:f7:5e:fe:36:fe:02:80:a2:f7:c5:6c:05:85:8a:
45:f0:22:7b:fb:23:41:e6:2f:ca:24:13:1d:ef:73:3f:06:22:
11:b5:80:3a:d3:d4:5c:a6:83:11:7b:8c:8c:b4:6e:45:f3:c5:
9d:a9:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:02:55 2025 by rpki-client