Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5DFE5824E511F08B5DE4CEDAE4EC9C.roa
File: 1D5DFE5824E511F08B5DE4CEDAE4EC9C.roa (raw, json)
Hash identifier: rbU31hlk6gsx2+YLX4YX/JORbCTG+xLW+TZ7fhjrSRE=
Subject key identifier: DB:72:20:0E:0C:5E:F9:AE:FC:FB:F6:26:5A:BB:A9:A1:A8:79:47:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5DFE5824E511F08B5DE4CEDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 10:31:31 +0000
ROA not before: Tue 29 Apr 2025 10:31:26 +0000
ROA not after: Fri 04 Jul 2025 10:31:26 +0000
asID: 140666
IP address blocks: 154.93.87.0/24 maxlen: 24
154.93.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97495 (0x17cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:31:26 2025 GMT
Not After : Jul 4 10:31:26 2025 GMT
Subject: CN=6810aa83-6ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:3c:c0:16:85:4a:e6:65:f6:7c:06:df:14:
07:b3:63:39:d0:6b:11:07:be:40:63:63:48:1e:ce:
03:00:38:45:ae:22:fb:c6:be:73:64:c8:a8:02:00:
13:ae:87:64:f1:28:08:10:c0:77:14:9c:cd:b3:ef:
3d:ab:14:86:e3:c5:fe:13:41:db:54:ce:31:77:dd:
d8:92:0c:04:82:98:c5:4b:41:6e:4f:c6:19:f1:1b:
eb:0c:94:13:b2:05:d5:5b:51:55:91:08:28:d8:4b:
08:14:67:f5:41:7b:f9:b2:72:3d:dc:55:fd:9c:8d:
75:f3:55:7a:c4:dd:44:75:7a:3d:9e:a7:42:73:44:
71:91:52:31:51:a4:a2:92:e3:72:50:dd:c2:bf:9e:
d3:02:16:07:d0:7c:20:32:9e:24:01:cc:83:75:7d:
31:15:fd:50:73:2f:f6:f5:c9:c3:88:a9:94:6d:8b:
d9:23:33:f0:8b:19:67:cc:28:dd:0a:31:1e:a9:28:
11:2b:b8:21:e1:ca:2c:d9:5e:38:ef:d9:97:f7:6d:
0b:f4:64:c4:62:9b:72:fa:29:57:8f:bf:a0:69:d1:
dd:ea:48:f1:3c:80:cf:6d:8a:b1:3a:90:b5:8c:a7:
e3:1d:23:74:ee:21:44:58:09:7d:a9:05:6e:9c:1f:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:20:0E:0C:5E:F9:AE:FC:FB:F6:26:5A:BB:A9:A1:A8:79:47:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5DFE5824E511F08B5DE4CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.87.0-154.93.91.255
Signature Algorithm: sha256WithRSAEncryption
0b:5e:09:63:0d:c3:b3:ab:21:96:0f:00:5a:ac:db:dd:28:d0:
0b:0c:b4:db:e5:16:26:86:53:84:4a:04:a6:3f:aa:2b:0b:a1:
0e:d7:e5:39:a9:19:47:1b:d5:5b:22:9b:21:57:9c:79:c2:59:
92:d3:e9:73:0a:79:a9:c3:a3:8d:d5:30:c7:d1:97:2a:53:58:
32:bd:4e:1d:c0:70:27:c1:0e:7d:aa:c8:8b:21:67:dc:53:27:
5f:f4:a6:ae:0e:dd:a4:e3:a9:db:17:c3:a0:68:7b:c9:8e:2a:
99:b4:c0:e1:e7:b0:af:a4:76:f7:97:c6:11:f1:43:05:37:76:
4b:36:ac:bb:16:9f:b8:c2:9f:ed:9b:fd:94:00:bc:dc:39:1a:
58:f6:d2:11:bc:38:5f:c1:64:32:e8:7c:71:2d:f2:ff:e8:0c:
94:1e:09:15:f1:1f:f6:d5:d3:03:ba:fd:f1:9a:36:b9:04:d9:
a2:9f:7f:f6:c3:1d:7a:d4:24:19:aa:4c:86:31:ca:22:81:09:
37:db:0b:99:22:37:bb:e3:dc:8f:f7:00:84:f0:13:df:38:2f:
e2:fa:38:af:99:36:80:50:bc:7e:d5:46:de:b8:46:7c:8d:24:
89:eb:c7:cb:8e:2d:de:82:6d:f5:54:79:a4:af:bb:f6:29:95:
0c:17:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:01:21 2025 by rpki-client