Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AF9B7B6242A11F0A676A0E4DAE4EC9C.roa
File: 2AF9B7B6242A11F0A676A0E4DAE4EC9C.roa (raw, json)
Hash identifier: brk5QOiZAJBtCVHoz3b574+QfwlCGPP0esh4hnpUubw=
Subject key identifier: 5C:B0:59:62:78:FC:CA:5C:B7:7D:34:5A:93:8E:D9:0A:64:95:9B:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AF9B7B6242A11F0A676A0E4DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:13:18 +0000
ROA not before: Mon 28 Apr 2025 12:13:13 +0000
ROA not after: Mon 20 Mar 2028 12:13:13 +0000
asID: 17561
IP address blocks: 154.193.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97180 (0x17b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:13:13 2025 GMT
Not After : Mar 20 12:13:13 2028 GMT
Subject: CN=680f70de-10cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:2c:a3:fd:20:e8:8e:7f:28:10:13:7d:ae:
4a:6c:d6:63:a5:59:ed:37:e7:f4:09:10:78:31:e8:
ad:9f:10:0d:a8:7b:a1:75:bd:22:14:8e:f7:3d:66:
5b:5b:e3:70:e3:a5:09:b0:a4:3c:3f:9b:00:cf:80:
c2:a7:82:90:4f:b7:1f:c9:ab:53:ea:31:1f:6b:9a:
ac:59:bc:1e:b1:de:e1:72:16:69:bd:19:e2:55:95:
a1:6f:45:2c:72:dd:2d:3a:bf:14:0e:e4:cd:d2:fa:
78:35:dc:c8:ba:bd:da:d2:c1:9a:6a:b7:31:8a:fd:
05:e9:e7:22:6e:fe:a9:6b:f6:77:87:15:f1:39:85:
a5:cf:01:6d:dd:02:85:0d:ac:3a:4a:ba:36:6f:65:
e0:d4:ab:1c:dc:c0:64:0e:48:78:75:64:1a:7b:45:
b4:42:16:25:98:e6:40:c0:55:45:71:8f:c6:b4:db:
3a:96:e6:03:06:10:a1:0b:bc:ff:87:96:89:0a:b3:
a9:e7:ae:a4:ef:c7:8e:a7:87:27:f8:d4:16:8b:a8:
66:68:97:de:e6:37:b3:f3:c7:99:f9:a7:49:07:cc:
04:8c:c5:06:15:d9:b6:b8:1a:9c:ab:cc:fe:3c:da:
a3:21:c6:ff:14:14:06:71:2d:72:d8:d9:6e:51:1c:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B0:59:62:78:FC:CA:5C:B7:7D:34:5A:93:8E:D9:0A:64:95:9B:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2AF9B7B6242A11F0A676A0E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.40.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8a:ea:3e:fc:ab:09:8b:76:50:d4:59:94:a5:8c:a3:93:32:
e9:28:43:20:0f:5e:b6:12:59:3e:e1:f3:a7:3a:a0:aa:f8:18:
f9:20:c5:86:c0:b8:cd:77:4c:77:72:3c:db:ce:51:67:c6:58:
bc:ba:82:08:05:f7:0d:e9:75:3e:7f:3c:e5:38:72:03:0f:8b:
77:2f:8a:99:86:fb:ac:15:89:0f:b9:44:93:54:ed:c7:ce:4a:
86:41:6b:9c:44:ff:86:9d:81:2b:cd:8e:29:f4:26:4d:18:f0:
8a:b3:9d:dc:ba:b6:fc:48:69:3b:66:9a:1c:ba:16:c3:a0:c2:
db:6f:13:25:58:08:58:ab:6b:7f:28:da:54:e1:5e:ec:52:7a:
1d:16:6c:d6:d7:26:82:80:72:40:3c:c7:d4:ba:0e:84:79:05:
65:89:04:3f:31:f4:c0:cd:4f:63:ea:64:a9:31:77:9e:ac:9f:
4a:bd:f9:1c:4e:46:6d:a0:3e:b0:66:60:7d:11:ec:fa:be:47:
47:c1:68:b2:f4:1a:71:45:a1:02:a0:9c:4b:a0:a6:e0:d4:7a:
b7:14:fd:15:bc:e5:cf:1d:c1:a7:ea:47:32:62:82:9e:f3:9e:
ae:d3:a7:6c:93:9a:8f:fe:01:24:e5:18:1b:04:62:d5:17:50:
d8:1d:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:26:00 2025 by rpki-client