Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/535C381E2FFB11F08B76BC7ADAE4EC9C.roa
File: 535C381E2FFB11F08B76BC7ADAE4EC9C.roa (raw, json)
Hash identifier: uGiUjAT7rgiLKJQI1LnDXTdoDhBqZCmVA6P7eTLmPlg=
Subject key identifier: 2C:03:CA:4F:D1:8D:C3:C1:F7:D1:42:21:18:58:E5:64:E5:CC:1C:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018070
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/535C381E2FFB11F08B76BC7ADAE4EC9C.roa
Signing time: Tue 13 May 2025 13:08:13 +0000
ROA not before: Tue 13 May 2025 13:08:01 +0000
ROA not after: Sat 23 Aug 2025 13:08:01 +0000
asID: 132825
IP address blocks: 154.93.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98416 (0x18070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 13:08:01 2025 GMT
Not After : Aug 23 13:08:01 2025 GMT
Subject: CN=6823443d-63e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:38:18:a4:91:55:f8:12:3c:97:4b:d1:f6:
5d:38:35:89:b5:fa:15:88:7d:3d:46:a4:af:a9:78:
c0:bb:18:c5:ed:e5:56:16:3e:d1:f8:f3:5f:ad:51:
e8:b9:83:1b:60:13:32:a2:d7:91:5e:44:e3:ed:89:
2e:f0:9c:27:4f:e5:63:5e:dd:4e:cc:b7:dc:07:89:
e0:13:74:92:94:f1:35:b5:ee:26:d9:61:1d:44:31:
46:42:72:6d:af:c6:4e:fb:91:b9:27:d3:52:a7:d2:
5c:a3:57:12:f3:3d:95:a5:59:83:09:ce:ae:91:57:
e2:9e:0a:e7:12:d9:39:0f:35:de:a4:6c:b6:cf:91:
23:c6:8f:73:5c:c7:c0:df:c6:a0:9b:fb:49:8e:2d:
e9:7e:7b:18:2c:b9:a9:1c:d5:81:8f:da:2c:df:9f:
c9:ad:d9:94:92:78:34:24:7b:ea:b9:f9:db:db:69:
57:aa:ee:ae:59:c2:af:66:5e:a9:0a:07:c5:f9:d7:
50:f4:92:75:20:9d:ba:4f:35:ba:27:1d:7d:97:cb:
71:b3:7d:0a:0c:df:28:91:f2:e2:9e:57:12:55:09:
a2:e5:d0:10:6e:02:84:7e:43:15:ae:37:32:4f:eb:
ef:bc:f8:7e:d7:d5:22:08:21:88:70:9f:89:ec:b3:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:CA:4F:D1:8D:C3:C1:F7:D1:42:21:18:58:E5:64:E5:CC:1C:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/535C381E2FFB11F08B76BC7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.24.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:12:67:d5:17:99:bf:1f:a1:5a:06:22:3f:44:4a:0f:ab:eb:
53:bf:31:f3:fe:eb:32:67:ba:fa:8c:75:b3:cd:41:79:67:28:
c2:11:27:20:3f:9e:55:f4:24:7f:42:98:d1:37:5f:84:5e:51:
3f:fd:05:32:7a:12:af:44:ed:87:6d:2e:ab:ba:4e:e1:e0:3f:
63:3d:69:fa:f8:38:62:4b:19:11:7d:b3:db:10:f1:10:6e:53:
d5:4b:fc:de:37:05:b8:c7:19:ab:eb:79:5e:43:39:73:ce:fc:
dc:03:1e:b7:a4:d4:ff:8d:a3:ac:72:93:e2:b1:f9:da:fa:fe:
a6:f3:5e:82:60:1e:1d:31:32:ef:c0:2e:1c:fc:1f:eb:75:1e:
de:a6:a6:b5:8e:0f:dd:34:e5:eb:9b:7b:1b:a4:c2:25:1e:be:
49:d1:e4:70:26:b6:cf:b0:6c:66:71:2f:ca:ab:21:ec:d2:4b:
4c:95:72:a1:64:f2:82:08:3d:95:a2:46:40:0f:bc:bf:2d:ef:
9d:6c:79:fa:51:2b:c2:ea:13:92:b1:71:0c:33:e3:e5:da:f5:
f2:d2:44:52:ec:ef:7c:3b:13:27:06:88:5c:9f:ff:71:8a:91:
86:a7:82:f9:d9:3e:01:c5:4d:df:bd:eb:f3:6c:fc:81:cf:08:
66:9f:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:43:55 2025 by rpki-client