Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F26CF14240211F09CBC52DCDAE4EC9C.roa
File: 1F26CF14240211F09CBC52DCDAE4EC9C.roa (raw, json)
Hash identifier: fxyku/qE618E8SsXWaSpyZbpnmGii/lNjWl8TR1kmVs=
Subject key identifier: F1:90:AE:FD:0D:AF:DC:67:52:8C:5F:55:A8:FF:AF:17:7A:BE:D9:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F26CF14240211F09CBC52DCDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 07:26:38 +0000
ROA not before: Mon 28 Apr 2025 07:26:33 +0000
ROA not after: Wed 04 Jun 2025 07:26:33 +0000
asID: 57043
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97098 (0x17b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 07:26:33 2025 GMT
Not After : Jun 4 07:26:33 2025 GMT
Subject: CN=680f2dae-f813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:76:19:eb:78:68:39:13:8b:88:8d:75:94:
5b:2a:f4:ab:e7:9f:34:39:68:fd:00:05:67:af:56:
67:a4:1c:e9:70:8b:60:89:16:18:7d:53:d9:26:ee:
19:30:8f:5b:a3:06:09:6f:8d:f8:55:7e:55:a7:30:
36:2f:91:69:37:e7:ef:9b:8c:95:4c:d8:dc:ab:f1:
a6:f9:d9:fe:16:1c:97:12:23:37:ba:58:67:b6:ad:
a9:d2:e8:d0:a1:78:34:0d:13:97:77:2e:79:31:96:
e4:46:a9:f3:30:ab:97:96:60:09:4c:42:30:56:71:
91:7f:a5:3b:bd:bd:27:4f:01:db:92:50:ef:e1:29:
0d:69:34:83:34:f6:0f:cc:12:b7:3d:d3:ef:34:58:
5c:f1:e1:be:5f:42:32:09:32:46:49:13:8c:16:ba:
a0:62:61:83:ac:6b:fe:d7:ed:d8:b6:32:f9:22:a3:
85:ba:dc:87:9a:23:19:5e:bd:8a:87:0d:a3:3b:e9:
7c:32:16:cc:c6:6e:cc:6a:d2:a3:b6:a3:b8:2a:36:
bd:3b:18:d2:8c:fe:1e:36:a4:c6:c5:7d:e0:85:2f:
e4:36:4a:60:95:0a:93:d0:f4:af:74:c5:09:c1:1a:
e4:40:95:93:45:13:fb:98:64:a6:53:4e:c3:66:0f:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:90:AE:FD:0D:AF:DC:67:52:8C:5F:55:A8:FF:AF:17:7A:BE:D9:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F26CF14240211F09CBC52DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f5:36:07:37:92:d2:81:28:30:43:fe:70:7b:03:77:2b:84:
db:c6:8a:85:2b:8b:98:15:5d:4e:5c:51:de:69:58:8e:b5:75:
3b:e0:31:d8:58:99:f8:ae:c7:31:87:b0:b4:1b:c8:87:ad:65:
39:f6:86:c8:98:74:95:73:dd:72:d3:ec:c4:76:64:69:3b:7a:
55:56:0f:a4:37:af:58:dd:85:99:4d:2b:7d:b6:8a:f2:ca:b9:
ec:b6:75:2d:50:d3:2e:f9:be:30:72:0d:1c:46:4b:23:a5:3e:
6b:2b:c0:aa:5e:22:c2:65:02:fc:f6:a4:79:5e:63:00:49:17:
89:3c:f6:f0:b4:03:71:e5:10:b9:10:04:5f:7b:9d:7f:fc:cf:
19:a0:64:57:4c:6d:7a:21:5b:75:0f:83:cb:c3:12:44:3b:7a:
bd:44:65:1c:d1:c2:4d:b5:ae:2d:6b:27:8b:9b:22:4e:a9:92:
ce:21:ac:0c:e0:d1:ee:c8:e3:48:1e:a7:f5:ea:4a:35:88:35:
9b:4b:1e:16:fe:28:d9:44:43:7d:83:38:22:45:7e:9e:f8:84:
70:8c:44:24:70:5b:d5:73:91:77:27:e9:9a:ca:c0:f0:c4:c3:
b9:d5:2e:d1:4d:df:48:f4:fd:b4:58:84:6a:84:65:c1:0e:1c:
f1:b4:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:28:55 2025 by rpki-client