Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4692AF80243611F0AFE1CCB5DAE4EC9C.roa
File: 4692AF80243611F0AFE1CCB5DAE4EC9C.roa (raw, json)
Hash identifier: vFShhC05/875D0gmymOh/QkS2m3TEeAoNgWgIEJN3U8=
Subject key identifier: 66:0A:68:1D:A4:8F:B3:9E:13:C7:DF:B5:55:C5:80:B4:93:81:B6:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4692AF80243611F0AFE1CCB5DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:39:58 +0000
ROA not before: Mon 28 Apr 2025 13:39:53 +0000
ROA not after: Mon 23 Mar 2026 13:39:53 +0000
asID: 984
IP address blocks: 154.207.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 11:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97267 (0x17bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:39:53 2025 GMT
Not After : Mar 23 13:39:53 2026 GMT
Subject: CN=680f852e-cf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:04:06:b6:6e:08:85:05:50:a2:fd:4a:12:
a0:f8:d3:9f:09:9f:5a:dd:9e:b8:0b:13:35:ba:ad:
2d:aa:c2:34:b9:c6:cd:fb:5f:74:cd:fa:67:ed:71:
6d:99:db:0a:d3:3e:ba:76:2d:2d:ef:46:ab:5c:5e:
49:d2:40:6c:43:14:a9:4f:1d:ea:81:c9:9b:ba:b7:
63:0a:b7:87:e4:a7:52:4a:23:58:f9:58:3c:75:63:
ed:f0:59:c0:22:e5:9a:e8:2a:4d:61:0e:7d:0d:d4:
03:e8:44:ed:36:d0:84:6a:8d:1e:91:d7:3a:06:6a:
b0:e8:98:c5:04:04:69:73:00:fd:03:5b:30:a1:e4:
c2:fb:f5:ce:45:81:66:95:6e:aa:a2:b5:4c:b7:62:
66:9e:20:f5:7f:ed:81:42:ba:ee:09:64:3c:df:11:
bd:68:62:bc:78:f3:f3:38:23:dc:0e:54:38:a1:e0:
70:b6:a7:70:f4:51:bf:95:ea:44:87:0f:99:e5:fb:
95:c7:79:b0:81:99:0f:18:40:36:5e:5d:ad:a1:d7:
cc:7b:c4:b5:29:8e:c5:3b:fa:ed:59:45:d4:32:72:
10:0a:f6:59:a0:9f:9c:c8:ad:a0:37:00:20:40:62:
71:c4:07:fa:69:18:7b:57:74:4e:30:95:b9:01:7b:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0A:68:1D:A4:8F:B3:9E:13:C7:DF:B5:55:C5:80:B4:93:81:B6:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4692AF80243611F0AFE1CCB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ce:3d:cb:1e:4e:60:52:74:4b:11:22:a9:76:02:d1:94:6b:
76:5d:b2:c5:f9:34:41:f8:bc:0b:48:55:32:0c:52:c4:22:91:
bd:b7:22:dd:97:34:19:35:80:3f:65:50:79:c6:05:f6:3b:fe:
4d:33:dc:8c:0a:27:07:0f:0f:07:46:f2:40:29:13:dc:72:c2:
85:f5:35:cc:a6:75:5c:1f:b9:b8:88:09:a6:77:10:2c:49:38:
9b:bb:f9:95:d9:db:2f:45:40:25:4b:e4:05:4a:7c:be:00:f8:
f8:49:47:00:04:ca:b1:19:c3:5e:5f:4b:60:d4:f8:b0:c7:92:
3c:29:82:74:b5:d8:cf:13:77:e5:95:5f:8b:c7:7d:bb:33:79:
a8:97:22:49:f2:46:36:1e:5e:36:fe:f2:80:42:dd:d8:fc:15:
7e:36:a5:66:fd:76:a5:18:d1:45:16:fa:89:dd:72:e3:3c:23:
20:ab:7e:fd:2b:cd:5d:c0:4d:51:d6:45:24:90:f8:b3:86:77:
26:3d:3a:bf:d3:56:1e:ed:0d:0c:6f:9b:7c:20:24:d4:32:55:
aa:a9:38:ce:2d:f5:87:f5:bd:57:d1:75:d9:dc:1d:96:cc:df:
07:18:c9:24:70:b6:d5:7d:d6:ab:71:d5:8d:64:6f:41:ea:fa:
e2:7a:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:55:28 2025 by rpki-client