Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A3EEEA24E411F0A72757CADAE4EC9C.roa
File: 55A3EEEA24E411F0A72757CADAE4EC9C.roa (raw, json)
Hash identifier: 876X74anG/WsuJLAk6TEoTbOfGBV1/KLlPQ5tiEGR0Y=
Subject key identifier: 0A:AA:7D:2B:19:B6:4A:B1:B4:59:97:59:81:3D:32:01:A6:05:3A:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A3EEEA24E411F0A72757CADAE4EC9C.roa
Signing time: Tue 29 Apr 2025 10:25:56 +0000
ROA not before: Tue 29 Apr 2025 10:25:51 +0000
ROA not after: Mon 08 Jun 2026 10:25:51 +0000
asID: 137263
IP address blocks: 154.81.10.0/24 maxlen: 24
154.86.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 00:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97493 (0x17cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:25:51 2025 GMT
Not After : Jun 8 10:25:51 2026 GMT
Subject: CN=6810a934-0d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:6c:c7:2a:b5:77:30:30:33:aa:c0:f3:77:
6d:ff:7f:7e:0f:41:6e:8c:5e:04:07:f5:af:1f:5b:
2e:23:2e:39:cb:bb:2a:78:62:cd:3c:43:a2:ac:a9:
12:e1:d3:f0:4a:ae:46:35:77:fc:ee:d9:f8:f7:c7:
7c:06:58:bf:33:1a:2b:4d:d2:41:db:94:7a:19:a1:
5b:99:2b:de:82:2e:95:ac:0f:fb:a7:46:50:e3:7b:
24:9a:f9:f0:e8:9f:b6:0e:d1:08:56:fe:36:3c:24:
c0:ac:29:0e:ce:bc:81:00:aa:de:05:9f:44:6a:12:
bb:57:c6:81:ee:5f:e8:4d:19:f6:34:18:b1:2c:ee:
6f:47:77:0c:78:34:7d:11:3e:26:07:1c:ff:18:88:
fe:35:82:7d:eb:fb:ea:e5:f4:bb:7f:4f:14:61:fb:
50:d5:70:72:95:df:58:90:12:ce:3f:d0:3a:96:76:
66:3e:3e:94:d1:bd:e5:7c:c3:89:6c:d1:78:4a:a4:
3a:72:1b:97:6c:50:1b:00:01:15:8c:b9:fd:b2:06:
77:34:9a:85:0b:14:cc:32:f6:fb:70:c9:f1:b1:84:
4d:24:a3:88:b0:8b:64:f8:69:04:94:92:87:5a:6d:
0a:fd:8f:fa:f0:88:01:71:4f:9f:52:e7:7e:a6:4d:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:7D:2B:19:B6:4A:B1:B4:59:97:59:81:3D:32:01:A6:05:3A:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55A3EEEA24E411F0A72757CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.10.0/24
154.86.4.0/23
Signature Algorithm: sha256WithRSAEncryption
70:a5:7d:f3:d0:39:26:e7:09:f1:0a:0b:e1:be:43:a0:11:1b:
29:71:ad:ab:57:cc:27:83:0e:ea:17:42:ce:23:db:aa:70:b0:
bb:56:56:d5:6b:98:48:d3:18:d7:25:48:ef:9f:45:88:d0:80:
c8:11:4b:c3:a6:d4:21:9a:22:4c:9b:b6:ff:02:5f:ec:6d:2d:
65:c8:6b:4d:b2:38:94:54:d5:44:bc:71:e5:55:45:34:6a:a1:
6f:1f:d6:be:28:73:ab:70:98:a8:a9:76:c6:d8:7d:fe:13:dc:
e6:d2:42:a9:15:42:a6:92:94:f0:56:1d:e1:ca:af:3e:e2:fe:
19:04:e4:0e:52:ba:e0:a7:63:4a:26:c1:8b:59:85:1c:83:a8:
2d:b7:a2:b2:06:34:49:fe:ae:32:ef:ca:de:76:df:fd:7f:8e:
40:8c:45:2a:4c:8d:bf:ce:67:1c:e3:37:42:d0:8e:fa:79:bc:
2d:4e:6b:09:ae:d1:e3:3a:e0:c3:0f:d6:26:19:c0:d8:b9:41:
ba:18:9e:a3:c9:fc:3c:41:a6:fa:df:49:7d:65:a9:5f:65:3e:
3d:b0:a1:af:90:11:de:5b:b4:e5:81:4e:89:ca:4b:12:de:e5:
ef:b2:24:d9:ca:37:91:c8:3d:64:76:f6:f9:fe:f6:a0:dd:19:
a7:9b:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:22:53 2025 by rpki-client