Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F7DA242FA411F09A20A5ADDAE4EC9C.roa
File: 52F7DA242FA411F09A20A5ADDAE4EC9C.roa (raw, json)
Hash identifier: nAwbvyDmWuNHMyAb5OANdT7cbF95WPbAWvwfwRYXIVM=
Subject key identifier: C2:2E:B6:36:EA:93:05:96:EF:5A:98:21:1B:61:FA:D6:60:8A:3E:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018044
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F7DA242FA411F09A20A5ADDAE4EC9C.roa
Signing time: Tue 13 May 2025 02:45:27 +0000
ROA not before: Tue 13 May 2025 02:45:22 +0000
ROA not after: Mon 02 Jun 2025 02:45:22 +0000
asID: 57043
IP address blocks: 154.222.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98372 (0x18044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 02:45:22 2025 GMT
Not After : Jun 2 02:45:22 2025 GMT
Subject: CN=6822b246-1d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:16:0b:b3:f8:f6:23:10:e1:0b:a3:76:8a:
31:db:93:fd:e5:ce:6a:cd:e7:af:5d:f1:25:29:0c:
a2:bd:58:1d:93:f2:20:94:18:e3:63:0f:8b:9c:69:
3f:3c:cf:44:9c:3e:63:6a:4c:fb:e0:da:2e:ca:cc:
3c:84:ec:ee:b0:7f:ea:5e:8d:fd:a9:75:8e:19:3f:
17:f2:59:91:6a:e8:0f:f3:27:cc:a8:d6:73:ff:9a:
f4:50:62:9e:3b:99:e0:c5:41:ce:f1:b7:c6:c5:5e:
57:95:36:48:c5:cc:75:c7:94:9c:06:6c:7b:2f:ae:
8c:5f:71:05:4f:f2:56:e3:46:df:13:e8:8d:19:fc:
66:14:f8:02:b0:9a:e7:e6:d6:24:9a:b2:c7:09:80:
95:a2:bd:85:ab:a3:f8:c5:6d:cd:4b:f2:2b:dc:a9:
88:e0:a6:87:26:16:6d:c5:0c:44:b4:b9:52:b1:6c:
b2:0d:f0:e0:b7:f6:d5:57:92:86:f9:a8:df:b8:88:
ff:cd:8d:74:ff:a7:2f:15:44:c9:24:a2:65:47:09:
9c:e5:54:f1:a5:26:97:fe:cb:bb:a0:1d:ee:f3:4a:
78:4e:54:dd:53:28:82:76:aa:7c:7e:84:6d:1a:18:
5b:4c:a8:35:23:d1:2b:9b:d4:c8:ce:b6:bd:d4:c6:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:B6:36:EA:93:05:96:EF:5A:98:21:1B:61:FA:D6:60:8A:3E:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52F7DA242FA411F09A20A5ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.79.0/24
Signature Algorithm: sha256WithRSAEncryption
76:01:f2:1c:b2:b0:92:37:3a:cd:95:b2:8e:a1:92:c6:86:a5:
7a:b0:71:ca:5a:b6:53:1b:0c:53:68:8c:98:f5:69:96:de:ab:
46:e3:36:e6:1d:02:b5:b1:a6:cd:3b:36:3c:09:1b:11:b0:04:
10:45:e7:2f:cf:b5:3f:2f:86:8e:15:df:2b:4f:30:ea:e1:f5:
d9:d9:8d:0f:39:f9:e8:94:f9:2e:79:2d:b4:6f:15:ff:63:b3:
fb:64:91:b6:0b:7e:3b:a8:cb:18:16:40:ff:ad:73:60:d6:87:
89:25:39:7c:17:4c:2a:99:de:94:d4:19:48:21:c4:e3:a7:ee:
66:41:4a:00:cb:5d:88:04:8e:6e:cf:5f:43:7d:9d:cb:54:97:
b5:e6:4c:3d:e4:63:be:46:39:5d:cd:39:90:56:99:26:99:d8:
ed:2c:16:61:ba:c3:c6:cf:76:e6:e4:dc:85:29:9d:1c:d6:4b:
17:6e:f4:84:f4:84:75:71:8b:25:05:b3:c4:94:63:3a:df:2d:
dc:c8:9c:56:84:7c:94:5b:d5:9a:8f:96:05:1e:a6:49:7e:e3:
12:98:8d:8e:2d:d3:34:cf:bd:61:2a:5d:41:ec:d4:6f:7b:75:
bd:34:b5:2a:3d:15:7f:29:75:58:70:e4:e7:d7:9c:c4:07:db:
b2:fe:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:04 2025 by rpki-client