Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F686C42259011F0BF742ECDDAE4EC9C.roa
File: 5F686C42259011F0BF742ECDDAE4EC9C.roa (raw, json)
Hash identifier: 2bi7uRW1iinMPk0sJnrWqpYAj2B7NJDAX4lZKmKAark=
Subject key identifier: 5C:77:60:1C:0E:C6:33:F2:14:D0:8E:73:A6:EC:CB:53:9F:5F:2E:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F686C42259011F0BF742ECDDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 06:57:26 +0000
ROA not before: Wed 30 Apr 2025 06:57:21 +0000
ROA not after: Fri 16 May 2025 06:57:21 +0000
asID: 9465
IP address blocks: 154.212.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 16 May 2025 06:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97544 (0x17d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 06:57:21 2025 GMT
Not After : May 16 06:57:21 2025 GMT
Subject: CN=6811c9d6-8172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:48:c4:6a:3a:a0:09:34:f4:e2:0d:38:8a:
63:3a:52:7a:06:12:88:f5:fe:bb:e1:bf:5d:75:4e:
34:0e:a6:de:16:aa:cd:42:4b:61:c0:92:44:53:db:
cc:36:bc:e2:18:0c:1c:95:00:56:ba:07:0f:07:d3:
ff:de:ab:2b:63:3c:6d:31:a3:e8:8a:ad:91:d2:2d:
01:d5:80:66:90:e9:d2:e9:0a:32:6f:50:47:5d:4b:
d7:d7:40:aa:23:ba:76:2e:6f:52:ae:2a:d0:c3:07:
4d:49:3d:3b:d9:06:43:51:9c:13:42:3c:1c:16:4e:
bf:01:46:79:0f:e9:55:aa:e4:80:4c:bf:22:58:f3:
d2:4c:65:6a:2e:0c:9c:41:24:7f:f2:26:ab:0b:5b:
80:d1:f7:ac:3a:3b:84:72:ec:9d:67:90:8a:2e:b2:
01:58:97:36:aa:c6:3c:94:fa:65:e7:9a:dc:3f:c9:
6b:96:00:45:d0:28:60:6c:41:4d:3e:34:e6:0f:7b:
0e:10:3e:36:9c:8f:80:7f:06:99:64:d8:2a:6f:8d:
e8:6e:02:24:50:b0:3e:64:5b:f2:9b:8a:06:26:4c:
a2:d0:ed:d6:3b:9e:60:94:62:49:d4:5f:0a:06:1d:
53:ec:92:fd:dc:5b:9a:96:23:d4:66:b8:14:82:d2:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:77:60:1C:0E:C6:33:F2:14:D0:8E:73:A6:EC:CB:53:9F:5F:2E:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F686C42259011F0BF742ECDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:98:9c:50:f0:ac:1f:69:a6:2b:e7:0c:16:f9:b6:57:10:2b:
a8:98:aa:94:f9:37:75:04:db:33:80:84:50:51:62:66:9e:94:
d3:2c:f5:5b:a8:3b:83:24:50:48:d8:f7:15:e9:75:52:03:99:
57:21:20:a2:74:05:7c:0d:43:3b:b8:c4:bc:0d:65:b5:88:b1:
e8:14:35:ab:a2:39:10:3c:18:4a:0c:81:24:11:e9:44:b6:63:
ed:e7:bb:6d:f3:31:61:6a:40:d6:f0:79:3b:d2:4e:de:87:15:
78:8e:a5:74:b8:96:27:27:a2:c5:5c:a7:1f:0a:0c:ff:68:64:
d8:01:f1:de:fb:8a:d1:6e:5c:50:3d:94:82:41:09:ef:dc:f3:
37:27:44:bf:8f:84:0f:19:4b:bd:51:cd:79:bc:fa:75:c9:0d:
72:43:92:2c:8f:b0:24:59:35:54:dd:c8:be:4f:64:61:89:93:
34:79:7f:54:e2:29:84:a5:00:70:0d:d4:ec:92:c9:b2:ff:9d:
e8:b3:bb:35:a6:ec:c2:18:ba:7a:23:c5:3f:68:c3:7d:fb:25:
e1:bf:f5:10:8e:ee:23:b9:17:1d:f8:64:20:f0:7a:71:d6:94:
35:c1:6d:70:43:b9:96:d4:41:a3:a1:e6:d3:05:7b:ac:ef:62:
ab:67:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:07 2025 by rpki-client