Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42C1B27C248411F0A3F3DFB8DAE4EC9C.roa
File: 42C1B27C248411F0A3F3DFB8DAE4EC9C.roa (raw, json)
Hash identifier: UAhTzOAJiSiyhgE8oadvRM0/6eoYBmolAAlFZsnkuZk=
Subject key identifier: FD:F0:8C:36:5D:A6:17:12:07:D4:EF:4E:66:61:BE:AE:63:70:33:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42C1B27C248411F0A3F3DFB8DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 22:58:14 +0000
ROA not before: Mon 28 Apr 2025 22:58:08 +0000
ROA not after: Sun 15 Jun 2025 22:58:08 +0000
asID: 63139
IP address blocks: 154.203.178.0/24 maxlen: 24
154.203.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97427 (0x17c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 22:58:08 2025 GMT
Not After : Jun 15 22:58:08 2025 GMT
Subject: CN=68100806-e4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:dd:28:fc:48:e6:fa:5c:a4:d9:b8:cf:b1:
b4:02:b8:fd:03:22:4a:03:e8:1c:5a:39:95:0d:7f:
fd:9c:85:dd:9f:ef:9d:2d:39:65:4a:1c:60:df:49:
8f:7b:06:f9:5d:63:38:cf:a5:1e:d0:10:21:2e:86:
4c:09:4b:50:95:21:95:6e:27:06:2e:c5:5d:10:fa:
95:81:9b:fb:1f:ba:01:9d:79:57:2d:31:00:d1:dd:
ad:aa:51:f6:dd:26:5b:4b:e0:50:b4:1b:37:09:d7:
47:a9:3e:b1:81:e7:6c:9b:af:aa:1a:0c:27:e8:0b:
05:0d:8d:50:30:1b:84:1b:80:80:b7:a9:64:bb:53:
1e:ed:f9:c0:f5:82:a0:42:45:0b:e8:3c:2e:90:cc:
a7:a9:40:84:09:82:65:ea:2e:82:3b:c4:7c:29:34:
9b:38:5f:ac:04:a5:bc:a4:0d:22:4d:d1:93:cd:cf:
a6:db:fe:2f:f6:13:90:8d:9d:c6:38:7c:14:f5:fb:
3b:0e:a4:10:fd:e1:08:c3:52:85:5b:61:5b:6b:13:
f2:60:92:31:06:1f:02:ae:af:07:6f:cd:bd:37:f7:
a5:3d:36:98:f7:37:ca:a1:67:a3:70:05:ba:bd:7a:
4a:e9:97:ef:17:99:b5:1d:7d:2b:c0:10:42:b5:c6:
c0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:8C:36:5D:A6:17:12:07:D4:EF:4E:66:61:BE:AE:63:70:33:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42C1B27C248411F0A3F3DFB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.178.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:34:0e:06:4f:13:10:fc:3d:62:cc:53:b8:9d:c9:16:91:4c:
bb:92:f7:a4:69:ba:a5:e3:4c:f7:b6:d3:f9:0c:1b:8d:02:88:
c9:06:a3:0e:f3:38:ec:c1:d2:af:29:d3:0e:67:e3:f4:e4:b4:
08:18:e4:06:74:29:53:dd:30:4c:06:e6:ac:63:1b:fb:9f:66:
3d:69:b3:6b:50:a6:f3:84:eb:ea:ec:c3:4b:95:b5:83:3d:19:
e2:50:b1:30:62:f9:0f:51:45:06:a6:e8:eb:20:b9:d0:6d:0c:
30:5e:09:43:4e:74:de:18:27:ce:ba:f8:7d:0e:50:14:4f:e7:
d6:2f:d8:5a:60:fa:15:36:ad:12:70:9e:a2:bb:18:4c:c2:91:
3c:10:5b:14:5d:bc:cd:46:70:1e:0c:09:12:8a:62:7b:2e:d6:
db:61:6c:89:42:7d:8e:ee:61:60:c6:27:12:63:80:eb:1d:c0:
55:4f:f2:46:fa:c9:91:c7:1c:d8:fe:f7:a9:f9:a5:c2:7a:81:
2d:0b:c1:c7:4a:7a:78:89:08:50:10:65:96:9c:87:aa:48:6d:
d3:db:6c:e7:9e:e3:1d:c5:78:6e:b2:b2:c4:2a:b1:de:51:f5:
f9:6d:c2:e8:b9:df:9c:a3:6d:3b:67:ab:32:1e:ad:1c:50:be:
1c:08:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:54:45 2025 by rpki-client