Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49310F8224CE11F0830F4BB9DAE4EC9C.roa
File: 49310F8224CE11F0830F4BB9DAE4EC9C.roa (raw, json)
Hash identifier: MrMmyBn4TY3V2VGF02VQH64rLoxG21BCDD4UlKTaMKI=
Subject key identifier: DF:32:99:B8:FB:EA:D2:06:4A:98:F4:A1:A8:EA:19:C4:84:FC:5F:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49310F8224CE11F0830F4BB9DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 07:48:06 +0000
ROA not before: Tue 29 Apr 2025 07:48:01 +0000
ROA not after: Thu 05 Jun 2025 07:48:01 +0000
asID: 147176
IP address blocks: 154.197.69.0/24 maxlen: 24
154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97467 (0x17cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 07:48:01 2025 GMT
Not After : Jun 5 07:48:01 2025 GMT
Subject: CN=68108436-8c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:94:f9:13:23:a9:79:f5:c8:ae:3b:31:a1:
e0:8f:3d:9b:41:3b:84:9d:08:47:58:d6:79:04:96:
70:1f:4a:ba:53:ba:57:a3:16:d4:74:13:e8:f2:42:
cd:65:36:35:ed:80:42:b2:3d:82:f8:da:d6:23:5e:
5d:d4:3c:f0:ce:9a:bf:e0:c8:58:bb:66:dc:8f:80:
15:0d:a5:11:1c:93:4c:3e:91:03:a4:63:a4:16:4f:
7e:29:5f:f7:a3:18:5d:85:62:72:6e:32:3c:ba:dd:
da:69:a5:69:d1:12:60:e6:68:7c:5e:7c:41:f9:0d:
50:17:8e:4b:50:29:b4:2c:0f:4e:cd:b1:e1:bb:0f:
2c:9c:76:bc:4c:eb:a3:93:16:b9:60:7e:67:bf:05:
e7:ed:d2:d6:6c:6f:f7:f1:18:81:7f:24:0e:d3:90:
24:4a:71:e4:9b:8d:e9:81:a9:6b:e3:c1:32:a3:a9:
e7:34:d4:98:a7:01:4f:c8:c5:d8:b5:b6:02:1e:b9:
b0:99:26:e8:75:9c:24:66:ab:59:cb:19:b4:87:7e:
10:09:e3:c3:be:e2:fd:b7:78:75:17:b0:1c:fd:8f:
1c:91:6a:3c:39:88:8e:ec:ce:ca:a9:d1:70:6b:c6:
08:20:ab:99:12:85:dc:fe:63:42:b4:ae:f1:64:99:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:99:B8:FB:EA:D2:06:4A:98:F4:A1:A8:EA:19:C4:84:FC:5F:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49310F8224CE11F0830F4BB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.69.0/24
154.197.116.0/24
154.197.124.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:67:73:d1:24:d8:9a:b9:12:95:db:b9:bd:fe:49:ef:7c:02:
ef:c9:9c:2c:c8:b0:e0:a6:af:cc:6a:85:a3:83:a8:90:6c:17:
3b:0d:c5:0c:fd:67:f1:f8:ab:4a:96:32:87:72:ad:5f:03:95:
90:3d:ed:d2:9c:02:49:f3:78:a6:84:84:42:51:c0:13:3b:a2:
e3:1c:7b:70:bc:f7:eb:16:dc:ec:43:d8:6e:92:08:bd:30:39:
20:bf:46:fb:1f:c7:29:81:73:11:7f:6e:6d:cd:e3:56:b6:40:
af:01:3c:8d:6f:40:9f:6a:05:3d:e2:99:4a:41:a1:1c:61:b4:
be:d1:dc:4a:01:69:66:8c:e8:ed:cb:79:8d:76:12:06:de:f3:
e4:f1:53:34:84:a1:62:22:48:9c:f8:cb:b2:36:95:31:03:e2:
7b:6a:e2:bd:19:79:70:aa:e5:15:98:b1:f1:43:54:9a:52:5c:
2a:7c:75:6a:32:12:49:4b:a6:3c:89:51:a9:ce:fe:fc:bc:d2:
9f:55:39:58:6b:3c:8a:1e:92:c3:78:29:e3:6f:e1:e7:9b:5b:
1b:72:0e:7a:fc:f7:96:6b:a3:f9:a8:bd:58:eb:ca:92:a6:1c:
01:06:b8:bf:43:46:90:f2:2a:f0:2f:31:5f:df:8b:9e:25:ab:
53:af:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:36:14 2025 by rpki-client