Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/451C67EC300A11F0BCE6BCDBDAE4EC9C.roa
File: 451C67EC300A11F0BCE6BCDBDAE4EC9C.roa (raw, json)
Hash identifier: +/Z78EFR4zi/whxOkVXIkeoCff97k1liAn+Cy8fwpHY=
Subject key identifier: BC:C0:59:26:87:00:20:2B:A0:64:1C:5D:CB:62:D5:70:1F:0C:4B:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01807C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/451C67EC300A11F0BCE6BCDBDAE4EC9C.roa
Signing time: Tue 13 May 2025 14:55:12 +0000
ROA not before: Tue 13 May 2025 14:55:07 +0000
ROA not after: Tue 19 Aug 2025 14:55:07 +0000
asID: 9294
IP address blocks: 154.211.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98428 (0x1807c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 14:55:07 2025 GMT
Not After : Aug 19 14:55:07 2025 GMT
Subject: CN=68235d50-a1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:de:24:3b:92:60:55:9b:26:bb:de:25:75:
aa:07:97:fe:76:30:26:c3:e0:e7:5b:24:2d:53:45:
fb:be:01:52:9a:c8:89:4b:62:bb:41:04:d7:b0:40:
a3:61:d0:3b:fe:d3:eb:d8:15:a4:e4:2f:33:80:01:
50:e1:60:f8:c4:57:5c:3f:0c:d2:62:eb:33:fb:e7:
bd:c9:65:6f:24:0e:00:b7:0a:bf:1f:60:17:36:95:
63:f5:c5:b8:3a:e2:55:d3:6e:1c:6b:e0:27:63:9a:
16:82:82:8d:f4:e7:ff:23:02:f4:b8:a3:1c:05:11:
6f:8f:92:61:0f:7c:84:cf:0c:c0:c4:b4:77:c9:46:
69:b6:b5:25:61:cc:ee:d3:eb:1b:67:10:7a:9d:75:
0c:30:68:6c:46:9a:9d:42:e2:3f:49:f5:52:84:05:
11:e9:29:87:22:de:4d:93:d6:15:3a:54:4b:33:bd:
77:e9:c8:98:20:48:04:0f:7f:d9:1f:50:25:cd:ba:
47:de:f2:a8:71:84:85:78:07:72:58:c3:30:3f:5b:
fd:60:6b:a2:aa:3a:78:df:06:40:71:6d:8f:78:79:
fb:35:34:a7:c7:d8:c4:1a:80:24:14:59:54:94:31:
88:ae:04:89:1c:d2:24:92:86:77:88:83:ab:04:46:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:59:26:87:00:20:2B:A0:64:1C:5D:CB:62:D5:70:1F:0C:4B:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/451C67EC300A11F0BCE6BCDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
46:e0:8a:7e:98:77:f6:69:26:1e:05:bf:94:38:2c:f2:20:d8:
ff:c6:93:9e:9b:1c:b8:09:20:ee:c0:ac:69:db:3b:fd:78:d8:
ec:f8:2d:39:61:c9:f8:2d:3f:6e:af:22:29:66:b1:33:b7:b1:
ba:6f:35:8d:67:69:31:bd:b6:3e:95:31:03:7f:d6:06:ce:d9:
88:54:5a:64:b1:b7:c7:d0:5d:b4:77:7f:33:cd:73:d6:97:ea:
95:51:70:58:68:7a:09:f9:a6:ac:de:23:35:94:1d:4e:8c:42:
ca:70:00:7f:eb:41:73:20:b1:0f:39:64:30:f9:40:28:18:1e:
83:3c:7e:cf:95:bd:84:21:46:32:60:48:6a:9c:57:f6:ab:fb:
c4:0f:61:cc:de:95:ac:23:cd:98:27:34:0a:b1:a6:b2:f8:71:
61:ef:b3:ac:0a:64:f7:c5:a7:ac:5b:2b:dd:e5:82:59:ab:98:
a2:49:09:2e:68:d3:89:2c:81:22:56:95:26:8d:4c:a9:41:df:
87:4e:d1:c2:7a:5c:ae:60:70:eb:33:fe:1d:f4:bd:01:aa:96:
56:d7:ec:1a:1e:a0:90:1e:56:ad:90:dc:e2:3f:c6:2a:d9:9c:
ee:01:3b:82:c3:a2:cb:54:d0:d4:b8:7a:7e:1d:de:f1:9a:5d:
01:7c:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:00 2025 by rpki-client