Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B8817442B1B11F0B44BCFE1DAE4EC9C.roa
File: 6B8817442B1B11F0B44BCFE1DAE4EC9C.roa (raw, json)
Hash identifier: gO6WftE0cAJry4HulI0uxd1IRQ9rjz0/4QNKsbGX6Ak=
Subject key identifier: F5:68:39:45:72:10:8E:23:B4:43:78:77:DF:0B:2D:96:31:20:B1:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F45
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B8817442B1B11F0B44BCFE1DAE4EC9C.roa
Signing time: Wed 07 May 2025 08:15:22 +0000
ROA not before: Wed 07 May 2025 08:15:17 +0000
ROA not after: Wed 11 Jun 2025 08:15:17 +0000
asID: 211590
IP address blocks: 154.83.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98117 (0x17f45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 08:15:17 2025 GMT
Not After : Jun 11 08:15:17 2025 GMT
Subject: CN=681b169a-c718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:95:f9:23:d8:60:05:62:1c:ee:eb:ea:99:
67:25:94:2b:c3:35:7c:5d:b1:38:c1:63:d2:8d:b9:
f0:e2:e6:d0:24:3d:1e:55:03:7a:aa:f3:2b:9a:09:
84:26:31:c9:75:54:1e:f2:8c:4f:7c:4a:f9:23:5b:
30:36:f7:6c:46:be:4d:ab:8a:ee:ce:a1:12:73:48:
d9:2b:59:73:bd:54:5b:7a:56:2d:8c:98:3c:b5:62:
13:ed:f6:4c:03:b7:ce:73:5c:3e:b5:41:05:b5:9d:
48:e5:fb:12:7c:ec:eb:8f:cd:0d:96:1f:07:1f:30:
40:92:3e:9b:7a:44:6b:d8:7e:4f:34:1d:58:42:9f:
33:d7:aa:7e:df:bf:67:59:41:5e:39:f6:e0:12:9a:
c1:52:9d:e8:6c:75:86:f2:f3:d2:be:ec:c0:51:d1:
02:32:38:4a:dc:e0:6d:d1:5d:1f:c2:57:37:66:97:
6a:56:fe:b4:7b:d6:c8:ae:21:bf:b7:2d:0a:b8:c7:
7c:7b:9d:94:91:2f:f6:f2:82:14:3a:ae:46:01:6b:
39:d9:64:93:ce:e3:a7:1c:29:d1:6a:f8:56:db:a0:
4a:02:93:03:25:1f:24:bc:07:46:ba:d3:99:ff:41:
1b:a7:82:dd:4e:b6:0b:63:c6:78:50:26:fc:3d:9c:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:68:39:45:72:10:8E:23:B4:43:78:77:DF:0B:2D:96:31:20:B1:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B8817442B1B11F0B44BCFE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.103.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:95:5d:9e:6f:18:bc:fa:83:c5:9b:8a:f8:c5:8b:07:e9:58:
06:b2:b3:c4:39:17:21:97:17:fb:40:36:7d:c7:49:95:75:9e:
a5:08:bc:66:28:34:1a:40:64:66:e1:d5:0b:17:e8:0c:64:c7:
27:d4:f5:ab:41:f0:9b:80:c1:9c:20:ec:9c:96:1a:e5:8d:4d:
6d:3c:47:ac:14:b8:86:32:13:c2:84:c7:4a:7f:85:55:88:a4:
f3:ae:86:9f:ea:51:50:bd:08:04:c1:59:90:d3:1f:52:c4:95:
63:a9:be:00:c3:36:11:b9:3b:2f:77:40:c8:e2:76:f8:25:94:
31:c3:87:07:59:87:28:64:4b:74:62:01:8d:14:87:ea:07:c1:
55:02:83:cd:7b:f0:a1:db:ce:6e:66:d9:74:84:90:e3:2e:28:
6b:ae:2a:a7:27:8a:be:10:17:3d:6e:cf:e1:dd:48:67:31:13:
6e:aa:b0:ee:c0:eb:d9:58:64:9b:5d:71:e4:72:fa:d5:ef:40:
78:62:bc:3c:b8:9e:f4:cb:a0:d9:9d:0f:93:69:49:26:b7:5e:
a2:e5:f4:a6:24:c3:be:1d:3a:fb:5f:c2:2a:76:51:64:39:49:
26:6f:61:8b:08:cc:76:d4:0a:43:38:81:4a:46:17:97:61:e2:
d6:4a:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:59:37 2025 by rpki-client