Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FDFCC4E2AFC11F09F0EED92DAE4EC9C.roa
File: 5FDFCC4E2AFC11F09F0EED92DAE4EC9C.roa (raw, json)
Hash identifier: +2N38OXobw9hl/j2xT0VCKwOa4h3lyMEoVHAYgL2LuA=
Subject key identifier: 63:9C:E3:0E:26:AD:9C:64:7B:18:D4:FC:FE:45:21:ED:4A:83:9F:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FDFCC4E2AFC11F09F0EED92DAE4EC9C.roa
Signing time: Wed 07 May 2025 04:33:08 +0000
ROA not before: Wed 07 May 2025 04:33:03 +0000
ROA not after: Tue 27 May 2025 04:33:03 +0000
asID: 8796
IP address blocks: 154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98098 (0x17f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 04:33:03 2025 GMT
Not After : May 27 04:33:03 2025 GMT
Subject: CN=681ae284-5929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a0:a8:59:e9:1a:d8:ce:03:58:24:89:e4:98:
ef:8d:b5:00:52:1e:1e:d6:78:ea:af:22:18:45:57:
66:30:4f:e7:cc:35:60:69:e9:34:ec:c7:0f:46:8a:
68:fd:08:19:1a:11:77:fd:51:45:03:6e:b9:9d:f1:
46:19:7d:ca:c7:11:0a:19:eb:82:e0:26:de:12:28:
02:7b:96:14:05:54:cd:9c:6c:02:ea:f7:43:fa:eb:
51:63:e0:e7:e1:46:15:3b:bf:ba:8d:5d:2b:80:39:
9e:9a:a0:07:c3:47:70:11:cf:ec:f2:c8:b4:13:e5:
b0:6b:59:6c:e8:e6:1f:4e:91:e9:4b:6d:dc:82:c6:
8e:3c:dc:a1:80:b5:8a:9d:50:bd:d0:90:dd:a1:74:
57:ea:5d:44:78:42:dd:ed:6b:6d:8d:d9:c0:17:45:
53:e4:09:86:a0:e8:86:e7:02:c4:c0:41:c3:09:92:
16:b4:1e:ce:1f:5e:42:40:a3:7e:09:c6:49:bc:0a:
9f:b3:bd:9f:8c:46:76:61:f5:91:73:90:9e:41:8a:
00:80:99:78:bb:7a:14:3e:0c:6c:94:bf:82:ad:81:
20:b9:a3:5c:90:7f:ea:ee:9e:d6:b5:4a:9c:d8:37:
1d:db:6e:37:b3:f3:56:71:bc:62:6e:6f:6a:aa:b3:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9C:E3:0E:26:AD:9C:64:7B:18:D4:FC:FE:45:21:ED:4A:83:9F:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FDFCC4E2AFC11F09F0EED92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
08:cc:23:e9:d8:e8:82:20:8a:75:c6:40:90:f5:a6:cf:67:ef:
c3:ec:6f:27:e9:f4:73:b7:ee:33:d6:cc:91:9c:33:90:20:74:
0d:54:ad:b1:14:34:c1:95:8d:71:e9:4f:53:1c:8f:5e:fc:10:
6a:b1:c5:87:e5:71:3d:ae:be:3e:04:14:07:14:73:1a:e7:6a:
ba:7b:f0:e4:70:d8:aa:dc:08:28:84:e9:21:a6:dd:89:a7:83:
f0:b0:db:81:95:69:bb:98:e9:24:ef:7d:3b:33:d0:75:ee:8c:
e6:b1:40:6a:0e:91:91:e0:d6:ac:f1:f0:21:db:01:9e:ca:03:
8d:79:6d:62:a1:40:e1:69:9e:70:72:89:64:61:f9:ec:23:94:
74:d2:e7:13:00:76:92:01:1a:2e:73:09:fe:51:be:ba:28:97:
c3:e1:a9:00:8b:24:6c:86:33:ea:1c:53:05:7e:db:d3:a9:69:
4b:17:b5:71:6a:ac:6b:f2:1a:83:35:8f:d5:b9:ad:9a:f6:85:
36:98:7e:90:56:e6:ec:ef:ea:6f:48:b6:9d:58:45:65:58:80:
6c:37:30:18:ad:c5:16:5d:c0:44:82:e9:f0:1c:d7:44:4b:92:
ea:9d:5d:7e:30:f7:b3:70:1f:24:92:6e:6d:62:1f:d0:95:a2:
9d:7c:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:46:00 2025 by rpki-client