Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3011E89C241E11F0B29F4C96DAE4EC9C.roa
File: 3011E89C241E11F0B29F4C96DAE4EC9C.roa (raw, json)
Hash identifier: kjtygXB7AdQCXiLBoIjth1NIokSML2HpiPmOAYyXCaU=
Subject key identifier: A1:7E:A3:09:1D:9D:C9:42:D0:84:C6:EE:F7:D1:03:B4:4D:23:58:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3011E89C241E11F0B29F4C96DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:47:33 +0000
ROA not before: Mon 28 Apr 2025 10:47:28 +0000
ROA not after: Mon 13 Mar 2028 10:47:28 +0000
asID: 17561
IP address blocks: 154.92.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97130 (0x17b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:47:28 2025 GMT
Not After : Mar 13 10:47:28 2028 GMT
Subject: CN=680f5cc4-9157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:db:16:52:9f:72:a7:d9:7b:9a:9a:c5:76:
58:67:62:b9:83:9e:aa:0e:99:b8:ea:79:7c:1b:a9:
e7:c5:0e:c5:e5:fc:59:5d:90:aa:90:7f:5f:f4:90:
27:56:5b:ec:f9:25:06:ec:32:d7:02:88:95:9b:9f:
90:54:dd:a1:c6:13:aa:e7:c2:c1:b5:ed:89:ae:e2:
5c:67:ed:70:ec:41:1f:88:e5:a4:b2:4f:54:47:4b:
3d:72:b0:14:f2:c8:08:12:5d:78:f0:38:f8:26:0b:
d6:99:97:9a:ae:42:0c:db:aa:cd:1e:44:ae:79:b0:
21:0a:db:65:d6:a3:19:2e:ee:68:5e:f6:67:0f:b3:
7c:79:37:27:99:89:dd:e5:9d:fb:f1:a3:41:d5:2e:
e7:ac:a8:4f:14:00:2c:dc:82:b3:2f:2d:70:4c:84:
bc:05:95:be:bd:e4:f5:ad:1f:cc:a4:65:ef:1d:b8:
d5:79:6e:fe:e8:3a:7a:ee:52:82:29:5a:45:06:23:
2f:8b:6b:73:a6:0e:16:83:c6:22:80:30:cc:7e:5a:
d2:fb:0c:16:ae:ae:4b:50:14:da:ba:e9:d1:45:7e:
30:2b:54:c3:16:b5:e2:ea:ba:c1:bd:94:59:dd:80:
99:5d:7d:88:e2:1b:12:68:b4:f7:ef:21:25:4f:9a:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:A3:09:1D:9D:C9:42:D0:84:C6:EE:F7:D1:03:B4:4D:23:58:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3011E89C241E11F0B29F4C96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e4:f7:a1:0b:af:8e:a2:3a:d2:3c:eb:bd:52:6f:86:01:84:
1f:ba:df:e1:73:b0:d5:4d:6c:c2:d4:3f:a8:2a:a0:84:ad:be:
ca:18:47:b8:d6:6a:bc:20:b5:51:2a:09:e1:90:a5:47:4e:0d:
65:d3:8e:e8:98:f9:de:fe:06:ec:15:89:ab:25:11:f7:e0:78:
59:b4:0c:d7:3a:49:0b:c7:b6:3f:4e:0b:bf:c6:b4:3e:53:67:
86:a0:b4:de:20:92:df:46:14:e7:b9:c3:2f:d2:37:ef:e7:61:
b1:c8:72:94:f0:0d:e6:bd:c4:ef:84:f2:d6:67:96:8c:d2:92:
8b:03:bc:ab:01:88:a1:b1:f6:60:3e:47:20:d7:da:dc:56:00:
8f:00:98:2e:ad:c5:3e:0b:90:48:66:c6:5d:33:a1:b3:cf:6b:
14:1c:9c:ef:b0:e2:9c:19:3a:f9:3b:50:9c:ed:cf:52:32:4b:
74:f1:8c:c5:c5:7b:a1:ff:4b:b1:32:3b:24:51:97:1e:5d:c6:
a5:70:aa:ce:d0:93:78:a8:4c:6b:cd:54:97:f2:36:25:72:00:
64:e5:a7:13:66:1e:96:82:0a:0f:39:45:ff:3b:14:e6:78:d0:
53:07:1a:52:45:36:b8:7a:d5:74:0a:17:8f:24:29:fa:db:75:
0e:c5:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:02:41 2025 by rpki-client