Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E382CB42B1611F0ABEF8EBFDAE4EC9C.roa
File: 5E382CB42B1611F0ABEF8EBFDAE4EC9C.roa (raw, json)
Hash identifier: CVp24UrMOfTfc8CzYz6Cw7V2wioltST6VlVbgxqAdRc=
Subject key identifier: 40:63:67:CB:C1:D0:1E:B2:6B:D2:04:53:40:7C:C6:9F:45:5B:57:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E382CB42B1611F0ABEF8EBFDAE4EC9C.roa
Signing time: Wed 07 May 2025 07:39:12 +0000
ROA not before: Wed 07 May 2025 07:39:08 +0000
ROA not after: Wed 11 Jun 2025 07:39:08 +0000
asID: 401664
IP address blocks: 154.81.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98108 (0x17f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 07:39:08 2025 GMT
Not After : Jun 11 07:39:08 2025 GMT
Subject: CN=681b0e20-5c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:76:dd:b7:a6:5d:6a:43:88:9c:c7:7f:9c:
b2:aa:dc:d8:13:13:41:37:2e:ba:5f:64:69:05:8a:
ee:d8:61:22:40:5e:11:ec:6f:61:3d:11:14:de:5b:
b3:e4:26:81:d9:c4:55:e5:fb:5e:b0:4b:eb:c9:2e:
52:b2:03:04:22:bf:f2:52:e0:72:1d:d8:e2:03:02:
23:45:15:f6:25:e2:e4:25:aa:65:0c:bd:67:97:f1:
73:51:98:a7:5a:e0:d9:7f:82:ef:fd:4a:5b:b4:56:
ff:bd:f8:e3:f7:15:fa:7b:4a:a0:a7:d4:c9:1b:5f:
09:bc:91:92:c6:90:eb:e4:6d:57:7c:15:ad:b9:17:
8d:ab:11:96:2b:aa:6d:e7:eb:39:8f:61:c0:53:cc:
66:55:dc:a7:34:de:47:d7:7d:34:e2:42:a2:27:ba:
73:ca:b0:a5:e2:53:23:08:dd:3b:57:f3:9e:6d:63:
5f:b1:12:ef:07:75:de:7b:4c:47:7f:12:d7:64:bb:
b8:b0:e5:ae:98:41:6e:16:a9:36:70:c3:fc:6b:fc:
68:2c:92:4d:35:c9:33:7b:3c:4c:f2:f2:03:00:04:
4e:fe:7f:c0:06:60:42:45:65:8e:03:ed:8c:41:d3:
39:7f:14:d7:c5:0e:e2:8a:ed:99:11:61:05:5e:65:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:63:67:CB:C1:D0:1E:B2:6B:D2:04:53:40:7C:C6:9F:45:5B:57:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E382CB42B1611F0ABEF8EBFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:11:7c:eb:4e:4b:50:08:87:47:5c:5e:15:92:e4:3e:fd:c9:
9e:f7:d2:b3:05:20:12:7f:40:64:ff:af:e3:cf:40:fc:69:47:
90:58:11:40:47:dc:15:0f:2d:63:70:41:68:11:c2:1e:f6:15:
69:84:c8:ab:00:16:db:cf:dd:f4:f6:fd:ae:99:f1:dd:bf:05:
b8:1c:19:7f:a3:7c:07:c6:26:ba:48:94:12:5a:b7:a8:a0:45:
88:13:07:e7:d7:35:c6:5d:45:7c:8b:fa:22:99:b5:91:be:eb:
9b:d2:93:cc:9f:b9:1a:3d:66:1d:82:c8:11:97:9f:66:44:a9:
de:eb:90:4a:5d:35:83:28:bc:48:57:8f:b7:43:b7:50:45:8a:
47:3d:cc:bc:e5:62:a1:dd:2b:b1:e9:06:c8:78:f7:42:27:a6:
68:83:69:85:8c:af:8c:5b:f6:5e:36:f7:35:d1:11:d8:a0:04:
ea:3a:84:d9:84:ee:69:56:c8:5f:d2:6c:87:31:15:f5:81:5c:
28:0c:2a:e3:94:4a:e3:9d:3e:4c:e9:25:3b:24:c2:8f:26:c4:
bd:22:c3:1b:a7:7d:c4:11:9b:04:6a:b8:2b:29:52:a4:e7:d1:
2b:ab:5a:43:33:78:96:83:1c:d7:fb:fb:c1:85:2f:cc:c2:22:
e2:e9:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:56 2025 by rpki-client