Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0449E8242411F0889065BEDAE4EC9C.roa
File: 3A0449E8242411F0889065BEDAE4EC9C.roa (raw, json)
Hash identifier: 9FeOHxcQdZrKEZcLlq2rt6Dgjptr5ExMoZZ8AYOCAeM=
Subject key identifier: DE:D6:A1:FD:5D:26:6A:6F:68:72:EE:E9:D1:47:B9:93:1F:24:0A:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0449E8242411F0889065BEDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:30:46 +0000
ROA not before: Mon 28 Apr 2025 11:30:41 +0000
ROA not after: Wed 15 Mar 2028 11:30:41 +0000
asID: 17561
IP address blocks: 154.94.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97159 (0x17b87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 11:30:41 2025 GMT
Not After : Mar 15 11:30:41 2028 GMT
Subject: CN=680f66e6-75b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:7c:1d:e9:37:fb:2a:23:7e:3d:8b:3f:9a:
52:1c:3c:ec:25:b3:48:09:07:7f:4d:b1:5c:23:46:
2a:9b:2e:3b:5a:d2:02:5b:62:f8:09:2f:82:0b:86:
ab:60:16:a6:2b:55:5d:57:4c:8d:2d:6a:1d:c4:d9:
13:9c:58:b1:f5:f1:b1:81:a4:6b:38:91:ed:d6:38:
21:14:14:f0:2c:f4:66:3a:fb:4a:f1:a9:03:0a:b2:
b8:39:f2:75:da:34:79:2f:8f:e3:aa:ad:68:03:18:
65:e1:d0:d8:bd:81:1e:01:62:32:05:e1:47:3b:9e:
c0:42:47:5b:06:f3:62:f0:a2:1e:aa:7d:47:39:63:
c8:19:f8:c4:3c:48:a1:95:ca:b2:99:92:ed:c7:1a:
82:1a:ba:c7:48:8e:37:fd:3b:62:97:ff:44:f8:11:
b1:68:26:0a:f3:81:3c:e6:c3:68:b6:73:90:10:4e:
23:85:f7:d8:9c:a2:3b:51:08:dd:70:87:47:52:05:
ad:26:e4:c0:f3:88:8a:09:fa:20:dc:40:0e:12:ce:
a9:62:51:03:bc:95:11:21:ac:28:8c:59:2e:f8:61:
0e:81:63:ef:af:22:d5:a6:89:44:a6:a3:d2:5b:90:
f3:eb:a0:b5:7f:e2:03:3a:0c:e9:71:15:93:75:12:
4a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:A1:FD:5D:26:6A:6F:68:72:EE:E9:D1:47:B9:93:1F:24:0A:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0449E8242411F0889065BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.30.0/24
Signature Algorithm: sha256WithRSAEncryption
38:96:7d:1b:ee:1d:6c:da:39:56:6f:31:dd:c0:db:10:fe:b6:
61:df:33:7b:65:37:05:c1:69:bd:5e:4f:f0:70:35:82:06:94:
46:73:ed:fa:e2:1d:89:c9:47:7a:6e:88:c5:ab:9a:82:35:46:
1f:e6:ab:3b:2c:f2:c1:48:df:eb:eb:43:5e:a3:74:af:38:6b:
cf:e1:f4:24:42:7f:f7:58:ad:1b:5d:59:49:23:42:fc:60:4a:
8b:dc:e9:b5:72:30:b4:04:9f:6d:7b:8d:e3:30:45:52:5c:37:
dc:a0:20:5e:09:09:c4:94:66:50:c9:98:ef:75:9c:35:6c:df:
8f:24:1a:e8:96:d3:4e:59:25:cc:30:b1:05:dc:31:29:3c:43:
0c:20:e3:90:31:7f:52:2c:ea:a0:75:6f:02:d2:e9:5d:8d:6c:
f0:26:a1:92:da:e0:d5:13:e5:f8:52:d7:69:0f:e0:2c:95:7d:
78:85:8a:06:0b:c4:e4:46:30:0d:a0:e1:7b:1f:2f:2e:e2:04:
95:30:ec:78:23:69:81:cd:02:dd:7d:03:80:8e:74:7a:2b:6f:
9c:af:30:41:57:0e:5c:e5:51:f5:47:42:55:bf:da:06:02:db:
82:d6:5c:f4:2b:91:b4:c9:7c:84:6f:b3:7a:69:5a:32:4f:6e:
63:87:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:29:12 2025 by rpki-client