Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF47A0A316A11F085A0E996DAE4EC9C.roa
File: 3FF47A0A316A11F085A0E996DAE4EC9C.roa (raw, json)
Hash identifier: L/f4hkBv41anNSE3dAVNwhM2RrdKx3epIrB3uecnthU=
Subject key identifier: 10:97:2C:2C:5B:13:86:23:1D:71:34:8C:F5:3A:EF:93:B0:F5:CA:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF47A0A316A11F085A0E996DAE4EC9C.roa
Signing time: Thu 15 May 2025 08:54:46 +0000
ROA not before: Thu 15 May 2025 08:54:41 +0000
ROA not after: Tue 24 Jun 2025 08:54:41 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98490 (0x180ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 08:54:41 2025 GMT
Not After : Jun 24 08:54:41 2025 GMT
Subject: CN=6825abd6-8308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:38:17:4e:62:90:6c:c7:72:2d:a2:a1:ca:
de:c5:02:97:dc:d6:03:be:ba:56:74:92:ec:2f:6e:
8e:05:97:e8:0d:81:a2:40:c0:53:c4:0f:bc:c0:73:
d9:f0:9a:97:d5:1c:af:8c:79:8e:90:18:20:72:25:
66:6e:78:3c:27:59:16:ef:f7:da:41:b2:1a:41:99:
6f:53:54:89:1a:7b:57:9a:e0:59:ca:d3:61:7e:b9:
a9:ff:b7:42:68:f2:5c:b9:c6:91:24:25:bc:92:85:
f3:31:69:2c:51:73:41:53:da:06:e5:c7:b0:27:c9:
72:66:52:48:4c:b8:e9:4b:7a:47:4e:ef:84:4e:c9:
59:a0:1d:a0:33:67:93:37:4b:e0:66:36:a5:2c:f7:
f0:a8:f2:41:56:a9:f9:6a:6e:30:c3:aa:40:18:a1:
2f:26:8a:22:d4:25:d9:67:c0:c5:29:78:7c:38:49:
5d:41:a5:21:9d:10:72:df:51:e0:40:a9:bb:62:81:
04:00:f7:60:19:01:94:a4:34:3d:71:af:59:87:be:
9c:22:6c:19:4c:4d:12:8e:2b:71:e1:3b:04:7a:a1:
55:14:88:9d:d7:1d:f7:ed:fe:8c:1f:63:07:96:0c:
3d:8b:45:03:a7:44:46:33:c4:f4:0c:25:f4:ec:a6:
83:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:2C:2C:5B:13:86:23:1D:71:34:8C:F5:3A:EF:93:B0:F5:CA:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FF47A0A316A11F085A0E996DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:06:a4:cb:8d:ba:12:9b:7e:00:a1:07:e0:01:aa:5a:02:0b:
df:04:71:bf:5a:cd:2e:f0:c2:e0:e6:d3:3f:bb:a1:b9:c6:3e:
08:6d:c7:f6:7e:aa:37:7d:17:2e:1b:1a:16:3a:ac:bb:75:87:
fd:3b:21:e1:98:18:e2:dd:f6:98:be:ba:4e:58:bb:85:c8:fe:
6b:65:da:f5:58:cc:72:f2:ec:97:2c:d4:64:40:11:9b:66:99:
d1:9c:c5:6a:99:41:c3:41:4a:c7:fe:5f:13:df:f2:60:22:b1:
15:b2:43:70:4f:71:54:7a:c6:7e:2e:fe:62:69:98:0f:25:45:
70:c5:85:58:03:47:b7:8d:96:57:ff:63:9f:1f:56:f5:b7:3b:
de:ca:12:1e:22:ee:ae:0d:d0:12:45:5e:60:3a:da:83:6e:c4:
48:f0:8a:5e:b2:ee:06:ee:1b:56:77:f1:c7:b6:e1:01:a2:d5:
36:d5:39:92:60:54:22:65:fc:93:d5:95:0a:34:bc:a4:2c:c0:
20:73:89:07:10:da:ab:7d:4d:f7:43:69:4d:fb:38:36:4b:be:
1c:4c:42:94:cd:85:23:62:81:e6:97:55:1b:23:4e:f5:c4:03:
4c:9c:1e:34:15:77:1a:bf:d8:23:fb:e2:ab:ee:e9:c9:45:36:
cc:77:8a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:15 2025 by rpki-client