Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45F3EF022BEE11F08DFFCFE3DAE4EC9C.roa
File: 45F3EF022BEE11F08DFFCFE3DAE4EC9C.roa (raw, json)
Hash identifier: x5UtD8QfmG/AUELOqpRa9zsSf21KrDLMX3DIn4PUoCg=
Subject key identifier: B6:00:29:02:9D:83:11:7C:4B:EF:34:C7:80:D1:3B:10:B3:46:0A:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45F3EF022BEE11F08DFFCFE3DAE4EC9C.roa
Signing time: Thu 08 May 2025 09:24:43 +0000
ROA not before: Thu 08 May 2025 09:24:38 +0000
ROA not after: Sun 18 May 2025 09:24:38 +0000
asID: 63888
IP address blocks: 154.207.226.0/23 maxlen: 24
154.207.252.0/23 maxlen: 24
154.209.65.0/24 maxlen: 24
154.209.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98182 (0x17f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 09:24:38 2025 GMT
Not After : May 18 09:24:38 2025 GMT
Subject: CN=681c785b-70f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:e1:18:52:e1:77:62:6e:5b:4c:e9:5b:41:
fe:22:96:61:1e:55:5e:72:50:34:56:73:96:2b:09:
e8:02:f6:6f:b1:fc:e5:f2:42:5c:07:b1:f2:83:62:
6b:e9:de:0c:4a:e5:56:18:3e:dc:19:af:1f:2e:82:
2a:b1:63:be:fe:5a:3d:4b:6c:2d:e4:44:ba:7f:55:
b2:c1:04:bd:46:9c:cc:6a:54:16:c8:4a:3d:93:9a:
0f:8b:f3:7b:bd:9e:55:1f:cc:4a:47:ce:bb:fd:48:
e6:a9:0e:9b:ee:08:14:f5:ae:17:f9:5f:2e:47:0e:
ec:8a:45:56:14:ea:12:54:06:fe:2f:33:9b:53:9f:
9e:c5:7d:20:24:d8:22:2a:54:8a:cd:c2:28:50:23:
9b:c9:1f:81:84:02:c7:06:6d:c0:a0:d3:c7:8d:42:
b5:2a:5c:77:b1:22:51:d2:7c:61:3d:83:cb:f5:fb:
f0:86:2e:2d:ae:53:86:d2:20:2e:de:f9:dd:d4:59:
59:71:42:bc:63:5c:8d:7b:2e:ae:c5:dc:47:7a:a5:
0c:a5:e3:b5:81:f5:49:0f:6a:10:85:fd:fb:48:2a:
00:2e:e6:bb:79:4e:14:a9:80:99:1c:4f:f4:7e:c3:
18:9c:45:c4:95:d0:64:8a:eb:18:51:e1:72:30:4c:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:29:02:9D:83:11:7C:4B:EF:34:C7:80:D1:3B:10:B3:46:0A:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45F3EF022BEE11F08DFFCFE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.226.0/23
154.207.252.0/23
154.209.65.0/24
154.209.70.0/24
Signature Algorithm: sha256WithRSAEncryption
40:28:5e:f2:ba:03:b8:3b:2e:da:3d:4f:be:05:e1:1f:74:13:
85:7a:8c:bb:6b:91:68:bd:c4:7f:c7:54:28:5c:8d:d0:f6:c0:
95:7e:6f:0f:14:55:fe:03:1a:1b:90:0d:e4:14:2e:39:bb:36:
dc:d2:c5:64:3b:38:7b:81:71:a2:12:2a:42:d1:42:e8:90:6d:
45:0c:6c:d4:d2:01:d3:98:10:c0:07:49:db:80:c0:67:06:e4:
bb:ae:30:f2:b4:72:8e:4b:17:05:4e:6c:6c:40:cd:7e:ef:08:
2c:29:64:96:80:8b:8e:65:f7:ed:dc:bc:74:fa:a5:34:e2:fe:
c9:de:60:29:86:67:7a:97:8a:3e:bc:44:c7:99:52:17:82:40:
2e:10:73:9e:92:b6:bb:79:32:d1:c4:01:ed:a6:5b:c0:1a:cb:
94:2e:1f:f2:26:66:01:b9:32:8c:19:9e:51:0b:a4:94:28:ce:
ef:77:7c:31:7d:16:77:28:38:f1:a8:2c:0c:ff:c3:0d:b7:70:
88:1b:e4:0f:78:91:19:68:3b:a3:97:c6:3b:b7:0b:c0:cb:15:
40:20:57:6c:8f:bf:c1:80:2b:0d:28:15:44:c1:6f:a1:aa:0f:
f1:d9:ea:d6:0f:52:a2:0e:34:98:64:de:e2:28:39:8a:1d:f8:
0c:12:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:28:56 2025 by rpki-client