Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4A43202C0F11F08DA743BDDAE4EC9C.roa
File: 3E4A43202C0F11F08DA743BDDAE4EC9C.roa (raw, json)
Hash identifier: Wyo5LPTsD23u6rz2fFQ74w9mzG71PtbOZIL4pUXec9U=
Subject key identifier: DF:3F:51:EE:35:A5:9D:95:B2:A7:30:F0:85:37:30:41:D6:FE:71:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4A43202C0F11F08DA743BDDAE4EC9C.roa
Signing time: Thu 08 May 2025 13:20:43 +0000
ROA not before: Thu 08 May 2025 13:20:39 +0000
ROA not after: Sun 25 May 2025 13:20:39 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98204 (0x17f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 13:20:39 2025 GMT
Not After : May 25 13:20:39 2025 GMT
Subject: CN=681cafab-ec9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:83:e4:3e:72:19:4f:c2:55:44:33:98:1c:
4b:b9:b2:45:14:38:82:91:98:c6:b9:91:d9:a2:cf:
bd:fb:77:91:5d:69:00:5e:0a:5d:a3:56:9b:9c:9b:
be:a5:2a:bd:c6:ee:0c:2c:10:e7:cd:4a:f9:c6:49:
47:2e:6c:cf:43:8a:5b:bf:37:c9:9f:cb:c0:5c:fd:
cb:d0:03:7f:96:0a:1e:00:d8:c6:ef:ac:2d:91:06:
22:4c:ca:20:05:9a:28:53:7b:8b:68:c2:65:5f:b4:
94:2b:f0:56:b8:17:63:62:da:56:fa:87:99:a9:21:
71:c1:f5:3c:90:89:8c:60:a5:66:88:37:e8:71:1b:
8b:37:98:5a:57:e1:5e:6d:d4:b7:75:15:d1:0d:49:
de:6b:a5:47:d7:36:c1:a2:bd:77:a4:d5:db:1c:10:
5c:27:4c:60:1e:45:16:12:ab:93:e2:f5:73:f0:7e:
13:f6:33:d7:3a:d5:3e:84:a0:2b:2d:86:ed:50:c8:
c7:81:89:c6:69:89:c3:fd:17:8a:c0:c6:b4:fc:77:
2b:55:0b:0b:ed:7f:f1:b8:77:72:ad:20:9f:55:7e:
7c:10:82:19:67:57:7a:a4:56:81:7b:0e:dd:94:ec:
19:ed:8f:d4:85:66:8a:1a:d6:18:8d:e5:67:8e:3e:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:51:EE:35:A5:9D:95:B2:A7:30:F0:85:37:30:41:D6:FE:71:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E4A43202C0F11F08DA743BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:88:5c:80:0b:2b:28:32:ce:f0:d4:e7:40:b0:4b:11:3e:77:
16:a1:cc:e8:82:58:2f:e4:12:6d:29:68:bb:dd:68:f4:8d:74:
d7:bf:87:f1:8e:6d:4c:09:01:80:7a:7c:f6:df:d9:88:36:35:
00:04:29:b0:47:cb:b4:f0:e2:a2:29:2a:ba:fb:69:77:7d:91:
5f:20:7e:5f:67:d6:8d:44:4f:8a:33:f1:4a:e8:e2:90:fc:ca:
4f:0b:28:68:6f:eb:0c:b5:7c:32:95:43:84:4d:30:e5:7a:6f:
60:cc:34:6d:d3:e9:70:4a:3c:eb:3b:36:47:c5:5a:d0:ca:67:
ba:1f:55:e8:d7:ad:6c:83:35:8f:5f:a6:f1:16:48:77:b2:9e:
00:50:f6:90:0e:fd:bc:9d:a2:42:db:d2:51:a6:f2:63:fd:c1:
6f:2d:60:4d:c2:77:2c:d6:6e:28:d6:89:45:0c:46:4d:a6:89:
04:31:db:1f:ca:10:d7:d8:17:cc:68:b1:c8:be:f3:33:6e:73:
38:74:66:d5:02:65:08:2f:00:a6:fb:e5:38:20:c4:2d:cb:70:
01:4d:c2:de:91:ab:80:83:21:14:2f:35:84:be:8a:15:2a:c3:
e4:65:9d:b7:2a:fd:00:25:e1:d6:7c:3a:fc:21:66:86:63:e8:
70:d8:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:42:41 2025 by rpki-client