Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F08FCE273211F0B4A178B7DAE4EC9C.roa
File: 51F08FCE273211F0B4A178B7DAE4EC9C.roa (raw, json)
Hash identifier: m5DUiHsuVEzjsG6bU9Qw+LnOGvamEdSMdDrFIulwGmw=
Subject key identifier: 14:1A:19:CA:58:0A:39:85:F2:3C:F6:84:03:DC:EE:2D:3A:E1:BD:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F08FCE273211F0B4A178B7DAE4EC9C.roa
Signing time: Fri 02 May 2025 08:49:13 +0000
ROA not before: Fri 02 May 2025 08:49:08 +0000
ROA not after: Sun 12 Apr 2026 08:49:08 +0000
asID: 328608
IP address blocks: 154.83.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97872 (0x17e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 08:49:08 2025 GMT
Not After : Apr 12 08:49:08 2026 GMT
Subject: CN=68148709-da92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:38:97:89:75:97:ec:20:27:fe:57:5d:27:
89:dd:e3:54:29:a6:d4:0a:2e:27:93:5b:58:ad:3f:
b5:fa:45:e6:41:9c:47:44:14:c5:02:77:43:3a:b4:
02:f4:51:c1:84:56:c6:ba:86:1b:63:f6:99:91:9e:
7f:c9:25:06:bc:90:1a:f3:55:d7:38:74:2b:a3:ec:
c8:ec:0d:11:82:89:e1:5a:ca:46:8e:16:64:d6:f3:
dd:36:bd:26:da:49:32:c6:3d:b9:f7:21:ce:57:73:
2e:0a:8f:16:39:56:bd:21:c8:76:bf:7a:b1:84:a1:
10:52:ab:d0:30:b1:6e:12:1e:7d:30:02:72:47:02:
e6:1a:04:b2:c6:6d:3a:f1:47:a5:89:ef:80:b6:78:
ce:12:0a:2d:f1:49:09:42:af:af:f1:fb:db:e6:11:
10:e8:8e:63:7c:57:e2:02:39:a3:58:1e:bd:fb:04:
6a:cb:8d:3b:e0:c1:01:e4:b6:51:8c:5d:31:a5:a8:
75:66:3b:ba:0d:9b:f5:87:77:d0:d7:34:45:02:04:
48:1d:cb:06:fa:71:36:a9:59:d5:f4:62:f3:f9:b3:
fa:15:2b:50:00:97:e3:3e:31:16:d2:cc:52:ed:0b:
9e:8b:6c:71:a3:b8:81:d8:7e:a4:23:a6:5f:70:a8:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1A:19:CA:58:0A:39:85:F2:3C:F6:84:03:DC:EE:2D:3A:E1:BD:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F08FCE273211F0B4A178B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.7.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4f:5b:d6:bd:c5:26:75:65:b7:25:f9:14:5e:17:9b:5e:8e:
78:f1:da:d8:0b:27:c3:02:b3:83:0b:62:fd:35:c5:d7:08:35:
2d:0a:e2:98:c7:81:d3:eb:fe:a7:29:55:63:6f:86:cc:a6:22:
cd:17:ef:1f:d7:8a:70:af:c0:53:c4:3a:63:2d:0a:9a:b0:c8:
6f:91:72:b2:79:65:f0:8d:65:b8:59:df:a5:33:72:ee:ea:4e:
fe:23:81:30:37:0d:9f:29:0c:24:61:68:83:e9:9b:6b:34:4f:
98:6c:77:c9:ba:da:98:c2:5c:11:4c:bb:7c:89:57:b1:f9:94:
8f:2d:05:fd:db:64:67:39:1f:a4:e2:ab:7e:77:af:de:e8:7d:
ef:e6:79:e9:96:fc:56:56:bc:e2:e7:7e:95:85:92:11:aa:30:
20:4b:68:51:b2:56:62:7e:b4:9c:d0:dd:60:e1:85:50:49:d3:
8a:52:6c:ee:04:29:3c:86:3b:5f:bb:7c:43:48:47:aa:b1:3f:
95:1c:77:8e:aa:84:6d:29:57:21:ff:6d:13:54:a3:1f:1e:92:
44:56:30:9e:b8:29:ce:c0:3b:ed:3c:2c:56:2a:72:67:86:42:
69:b3:11:a0:ab:73:cb:68:a8:df:cd:64:dc:c2:a7:92:b5:79:
0d:14:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:01 2025 by rpki-client