Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2706802830B211F0A2DD7AC4DAE4EC9C.roa
File: 2706802830B211F0A2DD7AC4DAE4EC9C.roa (raw, json)
Hash identifier: q6hONkGE6R2ZozZZUrF5VQrcBPw21+KOkklrwkoCscw=
Subject key identifier: 8E:C9:AC:9A:61:F7:9C:50:45:F7:49:92:42:28:8D:6C:67:E4:53:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01809B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2706802830B211F0A2DD7AC4DAE4EC9C.roa
Signing time: Wed 14 May 2025 10:56:57 +0000
ROA not before: Wed 14 May 2025 10:56:52 +0000
ROA not after: Fri 15 Aug 2025 10:56:52 +0000
asID: 9294
IP address blocks: 154.196.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98459 (0x1809b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 10:56:52 2025 GMT
Not After : Aug 15 10:56:52 2025 GMT
Subject: CN=682476f9-10c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:57:c0:01:e7:61:8d:9f:9f:66:e8:4a:79:
88:ab:9c:b9:9e:2e:12:ce:f8:73:fb:7e:ba:fc:13:
e2:b9:19:1d:1c:dd:0b:6d:3e:ac:8a:1c:6e:5d:98:
0b:e5:7b:da:1f:58:31:0b:b4:d8:8e:b7:80:ef:af:
f5:5b:91:41:72:1b:8c:45:b7:42:28:fa:8a:a3:c8:
f0:9c:7a:d4:d1:85:40:5b:96:a6:f1:43:77:d5:e0:
95:02:15:f0:fb:fd:5a:b8:a2:0d:df:5c:85:8f:31:
4f:cf:6b:44:01:20:52:6d:21:a5:7b:e3:38:0e:91:
1f:71:7b:89:26:10:ba:06:83:b5:57:1c:ba:84:6d:
c0:56:55:0c:af:47:df:30:85:75:85:a6:2d:ec:f5:
11:d2:c9:26:d6:8c:11:6b:b6:1e:e1:17:db:7c:e9:
e2:39:88:6d:0b:f2:46:ca:9c:2c:ef:07:93:ca:6a:
02:5a:d1:ab:83:e7:0f:87:a3:9b:54:1e:8d:e5:8e:
f9:be:dd:53:26:55:5e:95:cf:c6:40:b0:d2:38:f4:
ee:9c:2c:b8:b2:e5:5a:c9:83:5a:60:ec:88:9d:eb:
7e:69:55:d8:3d:66:48:fa:21:08:2f:68:10:3d:1a:
74:83:99:5c:50:fa:7d:c3:55:0e:9f:9e:a6:88:38:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:AC:9A:61:F7:9C:50:45:F7:49:92:42:28:8D:6C:67:E4:53:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2706802830B211F0A2DD7AC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.96.0/19
Signature Algorithm: sha256WithRSAEncryption
25:ef:c6:ed:8c:6b:57:7d:c8:9b:a9:ed:27:4c:cd:56:48:8b:
1f:c1:83:f4:97:02:dd:33:17:46:1c:f9:88:6c:2d:03:30:64:
99:a8:94:a4:e9:35:ac:97:d2:76:50:16:a2:59:39:dd:c2:e9:
3e:06:a5:37:d8:59:b3:1d:13:d4:26:bf:89:16:be:e9:5b:66:
0c:ff:39:36:a7:15:e2:09:99:4d:ba:46:1c:2a:0e:92:b9:f4:
c6:04:e9:48:a5:38:64:e3:e6:f8:5f:19:a6:aa:8f:96:c5:98:
34:f7:03:cc:64:63:02:b3:cf:ca:8c:39:f5:cf:3d:2d:de:71:
e0:2e:34:99:42:75:46:14:a6:fa:76:4d:e6:f6:ba:1c:d9:ee:
25:f9:c5:1a:02:3f:82:97:92:bd:3c:7e:a7:c0:ff:83:02:e9:
31:16:01:08:3d:46:76:b5:23:cd:d8:16:19:13:c8:78:72:8b:
93:a0:38:d4:77:79:6b:0f:80:32:98:07:7a:82:ff:af:ee:bb:
b6:64:9f:cb:97:b6:72:5b:e1:91:01:5f:a8:87:51:03:48:aa:
d5:df:67:37:a9:34:98:6c:95:01:21:5f:bd:f6:53:2d:49:8f:
87:a9:f7:98:41:cb:0f:a7:08:4e:23:d8:83:df:8d:e6:db:5c:
f6:65:6d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:52:36 2025 by rpki-client