Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/594EE57427F311F0A5E4FCC4DAE4EC9C.roa
File: 594EE57427F311F0A5E4FCC4DAE4EC9C.roa (raw, json)
Hash identifier: jmpgo4vzMaad31A2aiVHqpTigk5aKpANxK/3f0p3cN0=
Subject key identifier: 41:D9:E3:2D:FF:7E:EF:64:37:8C:5F:F5:C2:46:B2:1B:86:36:31:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/594EE57427F311F0A5E4FCC4DAE4EC9C.roa
Signing time: Sat 03 May 2025 07:50:58 +0000
ROA not before: Sat 03 May 2025 07:50:53 +0000
ROA not after: Mon 09 Jun 2025 07:50:53 +0000
asID: 397423
IP address blocks: 154.93.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97934 (0x17e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 3 07:50:53 2025 GMT
Not After : Jun 9 07:50:53 2025 GMT
Subject: CN=6815cae2-8a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:22:f5:c8:f8:8f:5b:39:a2:3a:de:0c:8a:
38:31:ca:2f:ae:88:26:ea:86:b4:85:38:75:51:12:
3d:1d:d1:86:92:c6:d0:cd:4d:6f:45:2c:f3:42:80:
59:76:d2:f6:ec:4c:80:3d:7a:8d:b1:42:67:ea:64:
36:e1:eb:83:4d:01:e9:d7:48:c5:d5:f3:94:16:d7:
82:10:40:d4:33:a9:24:f6:2e:a2:54:b1:71:9a:f0:
ab:85:4f:e1:f0:2e:ee:e6:1a:a7:3d:6a:01:42:72:
aa:e9:7d:56:2b:d3:e3:3a:83:22:18:36:4b:7a:92:
5a:3f:d4:a6:ba:7e:a9:59:7a:79:83:0a:e6:6c:08:
44:69:e7:03:5c:46:e1:0a:4b:38:0b:c7:52:63:28:
df:fd:bc:53:8f:1d:4c:11:0e:4c:e4:39:12:27:45:
65:c2:8b:e3:f6:fb:2f:e3:db:f0:16:8e:6b:32:5c:
19:66:14:9a:09:b5:a0:d7:a5:15:75:29:77:7d:fa:
3e:4e:44:60:4c:ce:60:1b:0a:2d:f5:d3:68:53:f1:
2e:86:38:42:ea:f9:58:13:6f:ac:f9:34:7e:e1:b8:
65:03:e2:68:86:e8:16:23:d8:68:09:43:25:1f:cf:
78:b8:3a:48:eb:a0:56:6c:16:27:95:de:29:ee:0d:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D9:E3:2D:FF:7E:EF:64:37:8C:5F:F5:C2:46:B2:1B:86:36:31:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/594EE57427F311F0A5E4FCC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f1:dd:db:62:40:d6:d8:a0:a8:c4:e0:55:0b:8d:99:62:69:
04:6e:5e:26:38:02:6a:11:f3:dc:91:9d:c6:c4:c8:4d:95:eb:
8d:42:99:00:aa:5e:be:e5:1c:d5:07:11:c2:06:5a:16:75:a7:
8c:08:a3:92:5e:f9:b8:f0:38:49:0b:b0:06:27:82:b8:d0:5d:
ae:93:4a:d8:fd:2b:b3:77:91:53:b4:65:11:e8:cf:ef:d8:41:
22:00:4c:04:68:d2:b8:64:f0:df:e0:ef:a8:0e:4d:ad:5b:ea:
98:43:dc:12:ab:10:a4:d3:1d:0e:4a:42:5a:24:4e:b5:7b:29:
90:6d:a8:ff:05:66:bc:47:ef:18:73:b3:04:4f:9e:95:b1:7b:
e1:7a:32:ac:99:46:1a:7b:0f:26:87:db:33:37:ed:75:b3:79:
8b:d9:cd:09:6a:92:31:c0:e2:34:95:b3:8f:f1:03:bc:47:1f:
4b:04:d4:15:28:e0:3f:e4:cc:c2:e8:da:f4:8d:99:eb:75:f2:
2a:e4:a3:9a:a5:39:1c:cb:e9:7a:69:44:82:4c:6a:0a:78:3d:
f9:e9:11:5d:b0:69:89:35:f1:3e:47:a5:08:de:40:c2:53:3a:
9f:f4:67:5b:9f:79:fc:b9:33:26:e7:0e:88:4d:c7:0a:34:e6:
9d:f4:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:00:53 2025 by rpki-client