Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE0400A2A5711F0B62264C1DAE4EC9C.roa
File: 2FE0400A2A5711F0B62264C1DAE4EC9C.roa (raw, json)
Hash identifier: waVEdVZ94MlhLTYZH6BsN8EaECqUr+HnIo9zzYjozTA=
Subject key identifier: 2D:5D:86:67:C1:2C:00:DF:39:D0:C6:87:61:21:CC:E3:6B:D9:84:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE0400A2A5711F0B62264C1DAE4EC9C.roa
Signing time: Tue 06 May 2025 08:50:41 +0000
ROA not before: Tue 06 May 2025 08:50:36 +0000
ROA not after: Thu 12 Jun 2025 08:50:36 +0000
asID: 57043
IP address blocks: 154.199.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98073 (0x17f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 08:50:36 2025 GMT
Not After : Jun 12 08:50:36 2025 GMT
Subject: CN=6819cd60-1870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:0a:01:7d:9b:9a:94:16:03:89:28:71:6a:
36:c1:14:68:80:ff:db:ca:07:64:81:4f:a8:a9:ac:
55:a1:87:94:6b:8c:d6:09:02:6b:af:2d:e8:37:27:
32:f5:c4:1c:0b:50:43:13:c9:0b:ba:0c:24:f2:fa:
d8:90:a4:1d:d3:f0:17:25:7f:fa:f5:9e:fc:d3:89:
d7:c5:bf:77:b4:22:0a:73:e3:95:5e:5f:6f:80:9d:
b9:b7:45:3a:e0:d6:d8:92:81:4c:09:d5:ed:01:2a:
30:c9:78:ac:cd:fa:43:14:77:32:3f:41:35:8b:59:
8e:13:b8:a5:38:5a:c7:6b:fe:59:ba:5d:04:85:0b:
a9:19:31:3f:97:67:b5:17:cf:8c:0e:31:b3:ac:c1:
6c:40:7b:d1:16:70:9c:e7:f9:f0:7e:d0:51:8e:b5:
d0:ad:37:26:4e:1f:94:77:3d:5e:a3:73:d6:ab:c7:
3b:5a:f7:13:69:e4:20:71:4e:3c:52:87:a6:d1:d2:
58:74:c9:3a:52:f9:a4:f0:db:b5:25:7a:2a:bb:06:
ad:a9:cc:28:a4:e6:31:a6:70:cd:4f:1b:67:a6:42:
94:a8:0b:aa:61:54:23:2a:2f:f1:9e:29:1a:98:00:
82:27:ed:19:88:7b:94:fb:7d:81:18:dc:57:6a:b6:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5D:86:67:C1:2C:00:DF:39:D0:C6:87:61:21:CC:E3:6B:D9:84:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FE0400A2A5711F0B62264C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.57.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3d:d7:c3:0a:07:38:de:f0:be:74:68:e8:46:90:2e:66:ad:
8d:d0:a0:ed:de:e5:8b:6a:9e:22:81:14:5c:c8:e2:84:51:b0:
7f:fe:0a:ea:93:8e:3c:c2:05:ec:01:63:f6:d1:2a:40:e0:d9:
92:9b:fc:a4:90:ee:26:02:d8:32:b7:be:3c:e2:2f:ed:31:2e:
63:40:5e:88:0d:a3:0b:76:52:ab:b6:37:cb:d9:ce:5b:a4:00:
86:85:a0:ab:f2:37:10:17:ed:11:11:d5:6d:96:2a:af:5a:90:
24:a9:1d:43:94:0a:96:1b:c4:a4:8d:e2:c8:f4:40:7f:5e:f7:
8f:8b:19:22:0a:d1:93:d0:0e:aa:9d:0a:b0:42:c8:29:c2:60:
47:83:7c:8b:8c:5e:fc:26:e6:a7:fb:31:03:c3:f0:0d:e6:0e:
24:c4:fa:0c:c9:b6:48:7b:b2:ca:3b:93:0e:e8:cb:f3:3b:b0:
7b:29:eb:6b:6f:22:ee:dc:9d:bf:85:58:6d:63:14:c4:46:62:
53:67:87:0a:5e:6d:33:87:09:22:c8:51:10:0e:ae:9e:e4:31:
98:ff:4b:70:16:ed:22:fc:ff:fd:9f:c8:50:ff:96:4f:01:b0:
b3:8b:5a:12:6d:f4:5f:e3:1b:ab:08:20:40:cb:56:9d:3f:89:
a9:7d:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:53:39 2025 by rpki-client