Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F45F48024DD11F08E8CB699DAE4EC9C.roa
File: 1F45F48024DD11F08E8CB699DAE4EC9C.roa (raw, json)
Hash identifier: mYRFJ5zpiqNLmBrCdPqxIKbEeSbjFeBgANQ1kxzOSQ0=
Subject key identifier: 5F:9E:2B:62:7A:C9:02:4F:0C:48:A7:27:37:E2:33:63:5C:55:9F:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F45F48024DD11F08E8CB699DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 09:34:18 +0000
ROA not before: Tue 29 Apr 2025 09:34:13 +0000
ROA not after: Fri 04 Jul 2025 09:34:13 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 18:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97489 (0x17cd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 09:34:13 2025 GMT
Not After : Jul 4 09:34:13 2025 GMT
Subject: CN=68109d1a-a563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:60:2e:14:b8:48:68:eb:00:22:1d:57:0e:
93:8f:74:93:f0:b6:36:7c:0c:1d:66:1c:69:f4:9c:
1b:22:45:39:30:8a:79:5d:87:56:81:5a:8b:3b:5d:
c6:89:8d:b8:18:d1:af:7e:6e:70:60:bb:00:f8:6e:
2e:76:8e:48:73:26:cd:db:3c:1b:a3:ba:55:ca:8e:
22:2a:e1:9f:a7:15:9a:56:27:b2:a6:11:7e:f5:6a:
c0:2d:20:57:07:66:b2:a8:4c:ed:f9:cc:1d:bd:ea:
0f:ac:18:82:64:56:b6:8b:0b:05:53:96:51:b3:ee:
7a:a2:1d:99:1d:65:7c:6c:a4:f8:04:04:51:06:5d:
9b:77:a9:52:04:c7:49:84:78:1a:89:f2:89:c0:d2:
12:6b:c6:ef:b9:e3:b7:be:9d:39:6d:4c:ae:c5:c1:
fe:9b:b9:e3:50:cc:73:ee:21:10:8f:50:f3:57:83:
57:f9:17:46:a7:ac:2c:4d:1f:be:43:6b:00:f6:f2:
92:6d:a9:89:ac:b1:8c:c7:ae:3d:7f:e9:28:24:e0:
ed:0c:12:07:fa:ee:18:b3:ef:ba:e8:1e:8a:f3:6c:
cc:07:a0:29:9d:ad:f8:87:fc:14:3b:65:ef:1f:87:
94:5a:ef:0e:4c:22:3e:17:67:68:19:e4:ee:25:88:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:2B:62:7A:C9:02:4F:0C:48:A7:27:37:E2:33:63:5C:55:9F:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F45F48024DD11F08E8CB699DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
154.94.86.0/23
154.94.116.0/24
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b0:97:cc:28:4f:41:ab:48:77:b3:52:bb:ef:50:95:d7:52:
3c:df:c5:b5:f3:fa:b8:84:c5:4b:a4:12:20:e8:6f:98:9c:05:
2a:3b:86:d7:22:01:25:58:fe:54:20:04:a9:21:2d:e9:de:3d:
bd:f2:84:c5:d0:95:68:41:11:19:e5:8e:fb:9b:b5:0e:a3:21:
a3:7e:cf:59:97:30:4a:35:0e:a6:f2:7a:28:6b:15:d3:c2:e3:
08:89:2f:ad:27:5d:72:19:6e:8c:fe:9a:ff:65:f9:e2:1c:fa:
90:a7:3c:e9:69:ce:e0:e1:90:af:8b:b9:c2:23:02:19:13:bc:
61:eb:14:be:de:b2:2d:56:81:86:a3:d6:b6:53:16:9d:d9:0c:
35:c7:43:85:21:03:c7:77:17:c3:a8:9a:31:b7:35:81:dc:f8:
f3:a2:ca:d4:5b:2b:ef:6c:6c:d1:a7:b7:cd:82:a1:19:ed:91:
7f:57:4b:93:6a:64:16:26:82:70:02:0e:2c:61:a1:15:52:35:
03:11:12:a8:11:c0:b2:69:ae:62:73:ab:35:0b:8b:1f:ac:63:
8e:d2:2a:31:ae:83:01:71:1d:1c:d1:84:41:21:22:6c:32:e6:
6c:8b:ec:b9:06:2f:26:f9:3f:62:d4:c6:e8:90:fe:47:8c:25:
bc:a5:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:38:15 2025 by rpki-client