Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2571CE58298B11F0806455EBDAE4EC9C.roa
File: 2571CE58298B11F0806455EBDAE4EC9C.roa (raw, json)
Hash identifier: RognmYNMCyNtooEhzOlczW+feGsZc+xls2UYwc7UuTA=
Subject key identifier: FA:DD:7E:A4:86:56:4C:F3:A2:0A:E4:EE:C5:F9:C3:AD:38:4E:EA:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2571CE58298B11F0806455EBDAE4EC9C.roa
Signing time: Mon 05 May 2025 08:30:06 +0000
ROA not before: Mon 05 May 2025 08:30:01 +0000
ROA not after: Fri 13 Jun 2025 08:30:01 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98029 (0x17eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 08:30:01 2025 GMT
Not After : Jun 13 08:30:01 2025 GMT
Subject: CN=6818770e-b3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:4e:5e:5b:d2:ac:79:50:3b:9f:aa:0b:93:
61:a2:48:1f:e1:df:2c:ac:10:5d:65:30:3c:4b:76:
de:37:10:46:44:7b:13:60:d9:bd:08:4a:ed:14:22:
68:01:3b:da:14:d2:9f:ab:d1:3f:e4:64:89:cf:ae:
35:9b:de:68:4f:dc:7f:37:6f:38:88:36:13:bc:70:
a7:c7:f1:ea:da:25:9a:d5:04:5d:98:ad:b6:3c:6c:
70:b7:b6:f2:52:60:fe:86:7c:ff:6b:9b:b6:00:84:
79:ca:83:8b:c7:62:4c:06:19:c2:80:1a:9e:e2:ea:
d9:a5:cd:e8:33:4a:fa:fb:74:b2:ac:62:4b:31:e6:
3a:30:cf:1b:65:34:ad:1f:9a:47:94:79:fe:c9:fa:
4f:6d:fd:89:00:cb:2a:ed:67:4f:9e:b3:d8:ea:28:
0b:91:ea:e2:3b:97:08:04:ee:43:10:d9:3b:18:15:
47:7f:f4:54:ee:36:61:90:3c:ed:5b:76:9b:f1:ff:
0b:98:a6:a4:99:72:c7:9e:16:48:3c:5b:7b:f8:6b:
a8:3f:21:bb:3e:7c:d5:6f:52:d0:1f:f7:72:ad:4e:
da:82:27:5e:16:ca:dc:bb:d1:2c:77:a2:d0:09:3a:
9f:80:02:39:e9:27:b4:be:80:83:3c:32:36:5f:0b:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:7E:A4:86:56:4C:F3:A2:0A:E4:EE:C5:F9:C3:AD:38:4E:EA:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2571CE58298B11F0806455EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
98:30:a3:49:39:ea:df:c0:54:6d:56:25:60:35:3e:02:35:67:
b3:dc:96:4b:6d:dc:80:29:18:d3:cd:eb:dc:3a:55:a7:83:8b:
ad:cf:ca:94:1d:00:78:3c:92:f9:fb:f9:68:56:8b:c6:90:12:
51:20:ae:6c:7d:69:c5:1d:18:8a:87:b5:1d:04:8e:51:ce:09:
99:40:62:dd:ee:c3:93:18:f7:5e:1c:bb:35:35:90:9a:ba:0b:
a9:dd:42:08:de:dc:83:3a:88:7f:e7:8f:b9:1e:6b:4b:d6:ef:
5b:0c:ee:e8:bf:28:59:51:af:96:d1:c0:b2:38:45:bb:2d:d7:
65:ec:03:00:77:3f:81:bf:0c:7c:ee:db:a8:97:fa:30:31:e9:
20:57:23:ad:6a:b1:42:6e:f0:52:a2:55:95:48:22:f6:2e:64:
1d:28:10:f9:80:5f:80:fc:e7:3c:c6:9d:db:ec:2f:87:87:c2:
7c:bb:0d:36:21:43:e7:d8:a9:f9:42:49:c6:aa:e6:70:3d:15:
c2:79:53:56:6b:29:b9:10:df:96:ab:92:6c:8c:75:7e:e8:27:
a2:4a:94:91:0c:85:5d:b9:f8:bd:ca:b9:d3:e6:d7:4b:fb:59:
1e:c6:b7:dd:07:61:aa:b7:5e:50:0a:fc:20:2c:5e:aa:d7:f3:
e4:16:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:54:10 2025 by rpki-client