Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D4F108273111F0B4F2E3AFDAE4EC9C.roa
File: 41D4F108273111F0B4F2E3AFDAE4EC9C.roa (raw, json)
Hash identifier: 9zmLUudSX+aevpuLHJM3d4R96oVvE1AvRcqqOJSPlXo=
Subject key identifier: 80:0B:B0:F6:2C:DE:0D:70:C8:0C:53:F6:09:4E:EE:86:80:B6:8C:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D4F108273111F0B4F2E3AFDAE4EC9C.roa
Signing time: Fri 02 May 2025 08:41:36 +0000
ROA not before: Fri 02 May 2025 08:41:32 +0000
ROA not after: Thu 02 Apr 2026 08:41:32 +0000
asID: 328608
IP address blocks: 154.85.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97868 (0x17e4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 08:41:32 2025 GMT
Not After : Apr 2 08:41:32 2026 GMT
Subject: CN=68148540-41e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:50:80:b4:ca:af:1d:62:1f:f6:7a:40:06:
6d:31:39:1a:71:2e:81:c4:0a:9c:df:9f:04:10:b5:
e1:72:26:35:98:0d:dd:9b:fa:64:41:b6:5d:92:e8:
b9:7e:85:54:9f:65:cc:98:5d:df:60:c2:da:54:59:
b4:0a:79:e2:0b:d5:db:87:88:3a:37:f4:b3:b3:5a:
67:28:33:34:ac:38:7f:7d:bb:65:83:75:3a:cc:c1:
d7:cd:9f:f9:d0:ad:58:15:c5:ca:aa:0b:dd:ed:27:
45:b9:8a:f4:90:62:3c:ef:49:81:08:8a:75:a0:77:
33:23:d7:bc:76:9e:6c:4b:30:94:22:d4:8d:3a:54:
d1:29:b2:2a:e1:2f:54:e5:ee:04:5c:dd:b1:14:a0:
ac:4e:f5:4b:db:cc:d1:0e:9d:b0:37:1e:d7:75:32:
63:90:b1:b0:77:cb:a8:5d:ab:49:66:33:e2:4f:93:
8c:0e:3a:d1:66:ed:9e:17:59:98:f8:3d:f7:91:f0:
42:40:3e:b5:79:3a:0f:89:ec:46:7a:3b:d2:99:c0:
7a:b3:4a:85:f8:33:27:ff:9d:55:40:06:5c:d4:2c:
4a:89:69:b5:99:38:8a:20:d6:a4:73:66:82:02:05:
99:88:06:21:15:7e:38:02:1a:44:a2:ce:9d:86:94:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0B:B0:F6:2C:DE:0D:70:C8:0C:53:F6:09:4E:EE:86:80:B6:8C:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D4F108273111F0B4F2E3AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.6.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9c:62:5a:97:6c:da:e8:f1:04:b1:a5:94:4b:bb:61:39:8f:
a4:c5:dd:a7:17:06:b4:27:c0:1a:13:81:1a:3f:6d:fd:33:02:
70:ff:46:54:a0:47:34:d7:b5:50:64:b5:21:44:30:09:b5:75:
04:6b:9b:39:15:5c:23:bc:b0:f5:15:e8:98:06:53:e2:b8:bb:
54:96:dc:0b:d7:f2:81:6c:95:e4:df:92:2c:95:cd:af:f3:98:
1a:24:48:2d:23:c6:5d:ea:2a:23:0b:0e:7f:04:bf:5c:8b:ff:
7e:62:77:3c:af:d7:0e:bc:d8:98:fa:c0:f3:92:99:22:f1:13:
fc:84:e7:ba:60:c0:73:1e:34:0b:2d:ee:2a:64:7d:b1:bc:74:
2f:59:b0:cc:08:0a:53:7b:f0:00:19:f9:c1:84:60:aa:79:43:
cf:75:e3:59:7a:76:37:35:09:d8:f3:af:ef:ed:0c:d3:09:24:
67:e1:19:95:69:6c:71:88:d7:01:a6:3a:c8:74:03:82:2a:ed:
c3:98:dd:a4:41:3e:95:0c:c7:f7:5a:53:24:2c:1a:f8:18:b2:
2f:db:65:13:3b:25:fe:e4:ad:63:43:a8:de:4c:0c:cc:33:42:
85:f0:15:32:9b:a2:95:13:07:87:62:40:fe:9a:5c:b7:d3:ee:
96:cc:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:10 2025 by rpki-client