Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C4960322FDC11F09AE63DAFDAE4EC9C.roa
File: 6C4960322FDC11F09AE63DAFDAE4EC9C.roa (raw, json)
Hash identifier: XtcEobJ/BXio8gPS5Zsz3a/WJxHASzd0+wwzq7BDb/c=
Subject key identifier: DC:F4:10:6D:7A:E1:5C:C2:BA:1E:C1:6E:9C:76:80:26:CF:45:4A:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018052
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C4960322FDC11F09AE63DAFDAE4EC9C.roa
Signing time: Tue 13 May 2025 09:27:01 +0000
ROA not before: Tue 13 May 2025 09:26:55 +0000
ROA not after: Tue 20 May 2025 09:26:55 +0000
asID: 399077
IP address blocks: 154.211.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98386 (0x18052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 09:26:55 2025 GMT
Not After : May 20 09:26:55 2025 GMT
Subject: CN=68231065-1bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:21:7b:6e:50:43:9a:68:f4:51:ec:16:1f:80:
2a:23:3b:1a:18:c4:cf:4f:51:0c:40:45:6d:c3:ed:
f7:bc:c9:66:fc:31:36:18:82:7d:b9:84:af:e9:93:
ae:99:68:f2:51:cf:56:af:d0:ed:74:0c:28:53:76:
a3:47:46:82:98:1a:82:0e:05:64:8e:a7:73:bd:6c:
1b:0d:56:b8:28:04:45:f4:c3:17:e7:0a:bb:d8:a8:
45:bb:83:f0:34:f7:32:e4:81:33:cd:ba:e3:6d:bb:
b1:8c:45:8e:dd:3c:70:43:9a:aa:81:7e:14:d6:1c:
ba:b7:62:bb:a1:24:6b:50:7c:36:f5:dc:d7:59:99:
f5:6c:ae:b2:d8:cd:40:a9:10:d0:d9:d8:b8:aa:c5:
68:dd:a8:48:31:db:04:38:06:49:41:59:3f:d8:0c:
50:15:7c:c3:6c:27:09:ab:71:d7:57:af:8e:68:67:
7d:72:e1:14:db:92:e0:74:82:1f:e5:55:2a:59:d6:
c6:3d:f6:c3:2a:e8:ed:65:6a:50:5d:bb:45:f1:79:
95:ce:1c:0f:12:c6:b0:db:1f:8e:14:b1:b0:f1:72:
38:6b:ed:f0:51:69:af:98:37:55:4c:ba:d6:95:c4:
dd:c6:54:93:2d:17:77:c4:92:97:84:0d:d6:d1:f8:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:10:6D:7A:E1:5C:C2:BA:1E:C1:6E:9C:76:80:26:CF:45:4A:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C4960322FDC11F09AE63DAFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.64.0/18
Signature Algorithm: sha256WithRSAEncryption
d0:35:1c:1e:a1:67:4c:6c:0e:16:76:44:53:e9:44:83:5c:88:
ec:0e:3d:d5:fe:be:1c:29:e4:1c:91:cd:f6:32:cf:03:24:f2:
1a:01:7c:c4:44:ed:33:32:2e:80:44:2d:76:ab:be:bd:74:1c:
83:e1:86:c0:e9:bc:14:05:7e:8b:8e:e1:22:9a:2b:e4:be:91:
1d:cb:8a:36:72:64:24:17:da:97:36:bd:ea:e8:55:65:f0:ba:
0e:77:b1:b2:14:2b:eb:a7:e4:6c:b0:2d:e5:2e:c3:7e:98:3b:
cb:ac:66:af:22:81:34:23:34:f5:6c:9d:41:7c:69:2d:51:e2:
dd:55:e4:5b:e0:b6:75:ab:17:a6:d9:0c:33:d7:b5:66:0a:d6:
b9:61:a3:1d:f8:b7:05:89:03:fd:be:f8:50:94:de:07:0b:00:
68:d6:6e:d2:ff:ae:99:12:32:b9:3f:ed:52:1b:0c:eb:dc:5a:
b5:cf:10:f5:b8:14:68:ab:b9:cf:2e:67:d4:e3:fe:e5:a0:29:
54:53:45:41:01:15:14:cd:64:48:97:50:bc:be:b4:f5:38:20:
dd:f3:97:85:59:29:6a:e5:26:f6:0f:51:fb:af:cd:fb:66:0e:
90:b7:a1:3b:4a:f0:f3:ed:62:2e:14:42:94:5d:38:2a:68:d4:
6a:85:57:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:53 2025 by rpki-client