Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D00803A241311F08B01EBCEDAE4EC9C.roa
File: 5D00803A241311F08B01EBCEDAE4EC9C.roa (raw, json)
Hash identifier: qz/AOso03fQKKdqqAbt18eF9lwCp1lgVoS17lVzAacc=
Subject key identifier: 89:4A:30:90:9C:AE:14:11:9A:87:2F:34:25:53:3D:FE:58:6C:32:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D00803A241311F08B01EBCEDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 09:30:03 +0000
ROA not before: Mon 28 Apr 2025 09:29:58 +0000
ROA not after: Fri 30 May 2025 09:29:58 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97108 (0x17b54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 09:29:58 2025 GMT
Not After : May 30 09:29:58 2025 GMT
Subject: CN=680f4a9b-4548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:92:98:09:46:cc:af:b5:2b:b4:c1:fe:bd:
c1:17:38:b4:6f:a4:2f:cc:47:79:69:83:19:fa:98:
07:29:ea:e6:ce:14:c2:3a:be:a1:de:89:bd:62:5a:
ba:54:28:72:2b:a3:ab:52:46:1c:28:37:47:cc:b6:
1e:89:3d:37:4b:ec:ae:13:80:a5:43:9d:b9:ea:b2:
9a:5a:f7:d7:d3:14:64:5b:d2:c0:57:62:5d:57:13:
ff:11:d9:84:de:ff:fe:d7:9b:c0:e6:5b:3e:d3:e3:
83:3d:55:a7:dc:17:e3:9a:81:97:50:a9:88:2c:7f:
c3:e8:9b:c3:1f:fb:a7:cc:01:7f:8e:ff:e3:1e:c4:
2a:89:5a:da:e5:85:ce:1e:b1:54:6e:5f:14:99:cc:
bf:c3:1e:4a:42:e6:92:58:fc:a2:77:78:5c:18:fe:
74:3b:13:fe:28:2b:22:26:03:1a:11:23:97:92:99:
a2:ab:df:3c:23:87:ab:4c:b1:d6:5f:99:5d:01:2a:
75:0a:12:2b:a8:20:df:12:eb:16:8f:59:ac:7c:c2:
58:20:23:d7:f2:11:4c:3c:38:bc:4f:25:d6:91:d9:
bd:f8:82:d1:b9:85:01:88:fc:36:60:4d:5d:e9:13:
64:f5:23:fb:1f:1b:c5:6e:24:24:e5:fa:cc:35:aa:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:30:90:9C:AE:14:11:9A:87:2F:34:25:53:3D:FE:58:6C:32:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D00803A241311F08B01EBCEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
87:10:ec:3c:3b:9a:3f:4a:b8:de:82:08:43:10:b3:64:c5:6f:
7c:f5:08:44:83:d4:64:19:cb:45:d6:dc:c8:9f:ab:62:57:40:
3d:4b:b8:4c:9d:79:66:89:a6:31:bc:ca:f2:ec:3e:6f:61:36:
1a:54:f2:1e:52:fe:1b:15:7d:6b:1c:d3:fd:57:d3:97:9f:86:
11:e6:63:3b:c8:64:e9:70:b0:9f:59:5d:2d:ff:37:93:f2:a2:
f2:d7:e4:02:6f:9d:89:ae:d5:c7:fd:62:46:70:5c:92:d8:60:
7d:5a:13:1b:61:66:82:b1:f0:d1:cb:8f:10:94:86:37:47:c8:
1b:d5:fe:72:97:0e:ea:53:c1:ed:d0:38:1e:db:41:d4:cf:8a:
40:d6:b8:33:50:07:62:37:7c:1b:dc:46:20:ca:16:fc:3a:6f:
62:e9:ee:50:e3:1d:44:b3:c9:40:5b:10:af:6e:3b:d5:11:34:
57:44:28:2f:65:15:80:f9:a8:26:c8:cd:aa:49:ef:03:b0:b4:
fa:4b:70:e2:fa:f4:47:7f:cf:4d:d8:d4:cf:89:70:52:43:d9:
7e:70:2d:46:64:15:56:95:c2:d4:d7:4e:77:50:64:4f:f0:96:
16:35:ad:85:e4:fb:3a:d8:48:2a:d0:0d:4d:73:2f:a8:78:99:
18:58:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:02 2025 by rpki-client