Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA74DCE317D11F0A8F7F393DAE4EC9C.roa
File: 3CA74DCE317D11F0A8F7F393DAE4EC9C.roa (raw, json)
Hash identifier: MNaVvZSR/ul41pIkYl980v2QHi8wsBnOqvGadFb5Wn4=
Subject key identifier: 82:7E:83:F6:40:52:52:5B:C2:43:FD:EC:CD:B7:BA:DA:F4:C6:4A:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA74DCE317D11F0A8F7F393DAE4EC9C.roa
Signing time: Thu 15 May 2025 11:10:41 +0000
ROA not before: Thu 15 May 2025 11:10:37 +0000
ROA not after: Sat 05 Jul 2025 11:10:37 +0000
asID: 398823
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98526 (0x180de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 11:10:37 2025 GMT
Not After : Jul 5 11:10:37 2025 GMT
Subject: CN=6825cbb1-2958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:a7:92:f9:9a:25:5e:db:ef:63:a0:92:fa:
ec:32:0e:ce:fe:0c:84:49:f6:a7:c8:20:70:3f:c4:
9a:23:27:26:46:82:8d:fb:16:0f:ae:de:19:b1:c8:
da:d8:1b:c5:44:89:7d:0e:c9:dd:8c:1d:9e:ca:b3:
6b:e8:0f:db:f2:e3:a7:be:9a:c6:c6:e4:a4:dd:1e:
e3:0d:b3:14:7d:4d:de:46:9e:b4:f0:a6:7f:5d:85:
3d:5f:70:d2:ec:a0:59:c9:6a:0e:f1:7f:bc:d9:76:
45:36:fb:20:11:c0:ae:0e:8e:7e:11:d9:a1:7d:06:
1e:2c:12:b0:f1:8a:e3:51:c1:eb:18:bc:e4:1e:02:
b0:48:ae:4a:bd:91:d9:61:a4:c4:57:1f:fa:9e:96:
27:b7:bc:3a:4e:ec:01:36:da:21:9f:e0:fc:21:c4:
85:1e:cf:56:7b:94:c1:ee:f7:bd:d5:27:5b:25:94:
a5:01:d0:56:8d:4b:d7:95:61:c6:f1:80:34:5e:b1:
c0:8b:57:18:6d:42:8f:4b:c7:88:e5:f2:cd:0a:ba:
4c:e1:6a:e8:62:08:33:73:59:27:86:ef:d6:65:bc:
6e:60:8e:b2:06:27:f5:cb:16:44:e0:9c:d4:07:64:
12:16:ef:bb:14:4d:1c:3e:5c:e0:d3:c1:b9:b8:f1:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7E:83:F6:40:52:52:5B:C2:43:FD:EC:CD:B7:BA:DA:F4:C6:4A:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA74DCE317D11F0A8F7F393DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
51:4e:96:b5:f1:af:62:ac:27:22:42:0d:4f:2e:34:df:b2:01:
a8:cc:4f:0f:05:22:10:2d:e7:91:fa:5f:3d:68:ad:0e:20:18:
90:5a:59:c7:b6:82:2c:7d:72:dd:fa:ed:92:fa:47:05:e8:f5:
03:27:e6:95:c7:06:52:85:e2:80:d1:81:78:b5:5e:3b:01:f5:
83:a9:9b:56:ac:1d:9a:27:d5:be:4b:73:46:3f:e3:96:1f:f2:
80:8c:e6:45:05:ff:b4:35:f7:50:b3:bd:c2:a9:b7:ae:4c:5f:
da:b7:10:9e:f4:ca:cd:a1:ca:07:7b:be:e5:09:77:a1:8d:ce:
ce:a7:46:ef:8c:43:14:06:46:69:50:e2:74:d9:59:f7:2b:7f:
ce:31:e5:b6:20:b2:82:bb:82:cf:ce:8f:b0:d9:18:00:4a:68:
59:e7:b6:bf:9b:ab:94:ce:b4:02:81:51:21:d8:71:fb:08:bd:
2b:ee:e4:b5:68:2d:45:5f:d2:b5:b5:7d:79:96:dc:f3:3f:d7:
67:cf:de:b8:c0:5e:b1:35:f3:1f:e2:7e:4a:8a:83:bd:b6:9b:
8d:82:2b:dc:b3:a7:8f:05:a2:d8:29:e6:24:c7:26:ba:ee:d8:
a0:27:2e:84:00:09:09:bb:76:dc:5a:4f:bd:40:d5:72:e7:b3:
0d:e2:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:44:57 2025 by rpki-client