Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28202EB62FB111F0A8668C8DDAE4EC9C.roa
File: 28202EB62FB111F0A8668C8DDAE4EC9C.roa (raw, json)
Hash identifier: t2KEu+vYiFlBLWLb/Nc+u1dDWHGLgdQnqKBGXwAIf2w=
Subject key identifier: 35:F5:82:3E:11:B4:5A:58:4D:2C:D7:42:5D:DC:29:53:AB:50:33:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018046
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28202EB62FB111F0A8668C8DDAE4EC9C.roa
Signing time: Tue 13 May 2025 04:17:18 +0000
ROA not before: Tue 13 May 2025 04:17:13 +0000
ROA not after: Mon 02 Jun 2025 04:17:13 +0000
asID: 214432
IP address blocks: 154.193.208.0/24 maxlen: 24
154.193.209.0/24 maxlen: 24
154.193.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98374 (0x18046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 04:17:13 2025 GMT
Not After : Jun 2 04:17:13 2025 GMT
Subject: CN=6822c7ce-6f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:2c:4a:25:a5:6a:25:7d:c4:38:02:e8:5a:
ef:8d:b9:56:87:aa:c0:7c:a0:e0:a1:dc:b1:c2:e8:
e7:8a:37:64:93:d3:fa:c2:2d:df:1c:70:d8:0c:e4:
bd:b7:71:ca:99:c2:6e:57:b3:97:d2:23:f6:73:54:
2e:8a:0a:4c:00:3c:ed:cb:8a:2b:ae:4f:0d:d4:83:
73:b6:32:b1:6b:6f:b7:4d:f6:5b:78:8d:89:20:6d:
ea:54:7c:46:04:9a:ff:09:ff:3e:02:61:42:f2:a7:
fa:c9:ee:52:a3:df:41:7a:70:9e:8b:d0:cd:a0:fb:
2c:57:00:f1:32:13:d7:54:c8:27:21:d5:ab:7f:de:
1d:f5:43:f2:90:39:bd:3e:22:98:4f:77:19:b7:3a:
53:23:09:bd:93:50:f0:47:c3:ae:37:91:3e:a2:70:
53:77:b2:55:97:cc:19:a5:1c:e3:4d:46:5a:42:55:
bc:c2:a6:03:a8:b9:a9:fc:cd:cf:ca:9f:fe:90:bd:
db:c5:58:b0:94:30:08:26:68:83:3c:33:d8:09:28:
03:b9:b4:c9:d4:42:02:8b:a4:36:49:c3:9b:92:03:
29:49:fc:e3:ee:7e:35:d7:ea:a6:24:64:65:7a:bb:
82:64:ca:2e:51:24:2d:9d:62:e3:8a:bd:7b:cf:5b:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:82:3E:11:B4:5A:58:4D:2C:D7:42:5D:DC:29:53:AB:50:33:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28202EB62FB111F0A8668C8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.208.0-154.193.210.255
Signature Algorithm: sha256WithRSAEncryption
cb:64:a2:4f:59:66:f9:c5:d5:f0:41:4c:df:bf:23:56:c6:7c:
1e:3a:2c:c8:78:78:cb:da:4f:da:22:d0:30:3d:60:7a:9a:87:
da:a7:1e:bf:2e:0e:58:05:95:3b:26:d2:90:6a:cf:1f:99:7b:
36:6e:86:a7:75:9e:76:fa:ac:62:f2:17:15:07:c0:a1:6d:e9:
1f:2c:a0:f8:bd:4e:20:82:8a:9f:60:7e:90:a9:06:d4:16:37:
c8:74:ea:28:56:b7:ea:04:39:df:80:dd:35:60:0a:1f:67:ac:
a0:46:1f:ce:2a:b6:9d:0e:4d:f2:84:2d:5a:ee:be:76:0d:a2:
8d:8e:86:d0:00:de:ad:a2:24:60:d3:c5:b5:8b:2b:ea:2b:05:
d8:8a:a8:d9:8c:4f:2f:67:df:2e:9b:50:60:3f:4a:c5:45:ad:
48:d5:2b:bc:1a:9d:bb:b5:5a:c6:7f:8b:e5:b6:c7:37:d8:4b:
2b:4a:1f:42:94:8c:62:28:a9:31:46:02:bb:9a:e3:f6:f2:5b:
a7:ac:f0:9e:44:c4:45:8c:e4:4b:23:aa:6d:87:27:f3:52:c9:
3f:72:98:97:79:8d:83:05:bd:f0:90:b3:58:93:53:3e:1f:bf:
db:10:3f:db:c1:0e:a2:db:9b:66:91:2d:7a:01:15:63:ff:ed:
77:73:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:37:16 2025 by rpki-client