Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCAAC902F3711F0A4928AD8DAE4EC9C.roa
File: 6DCAAC902F3711F0A4928AD8DAE4EC9C.roa (raw, json)
Hash identifier: 6Qj2fdEF8VckvHTQTvJRatwYQ2ATv+WUXMBxwzeqJWI=
Subject key identifier: 7C:E4:55:1C:5C:2C:5F:DC:2B:30:AF:27:EF:54:0D:4A:C0:66:3D:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018025
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCAAC902F3711F0A4928AD8DAE4EC9C.roa
Signing time: Mon 12 May 2025 13:45:56 +0000
ROA not before: Mon 12 May 2025 13:45:52 +0000
ROA not after: Thu 19 Jun 2025 13:45:52 +0000
asID: 57043
IP address blocks: 154.199.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98341 (0x18025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 13:45:52 2025 GMT
Not After : Jun 19 13:45:52 2025 GMT
Subject: CN=6821fb94-47bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:ef:30:ee:a4:e9:ee:f7:a8:e6:32:26:24:
5b:d3:ac:1e:2d:65:fc:7d:c8:61:82:aa:00:7c:33:
e7:87:fd:9b:f7:36:98:bb:6d:52:04:a4:58:4d:79:
b0:e7:9d:ac:17:85:49:8d:e3:90:3c:83:91:a8:3a:
6f:f8:9d:25:44:14:6a:22:af:42:48:4c:a2:b1:2e:
33:c6:18:8b:0d:30:6d:b2:77:b3:19:15:d8:83:97:
91:08:10:f1:91:3a:a7:8a:a9:be:48:58:02:23:ed:
88:c1:2f:43:a1:09:e8:13:91:e7:d5:59:9e:2b:3f:
ee:2e:a7:e5:60:9f:59:d5:24:57:bc:3b:f3:a1:2d:
96:42:d7:5e:bb:bf:f5:8d:b0:99:b1:7c:9c:15:f6:
0d:03:43:07:78:d0:2b:3d:5b:12:b3:2c:d0:0d:c0:
0b:d0:19:65:3a:df:62:e8:e2:3b:83:42:6a:07:78:
8b:9b:61:7d:11:27:b4:e1:a4:94:44:7e:0c:0a:3e:
2a:65:6e:e6:3c:d0:33:51:a8:88:fd:20:89:30:c6:
88:8f:f9:7f:65:16:43:13:5f:a8:d3:01:9b:75:cd:
1e:53:5c:74:e4:fb:a0:18:92:9f:1e:fb:2d:11:ac:
39:0f:4b:73:1c:a7:d3:19:97:2a:97:d4:81:c4:42:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:55:1C:5C:2C:5F:DC:2B:30:AF:27:EF:54:0D:4A:C0:66:3D:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCAAC902F3711F0A4928AD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.10.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:b1:3c:3d:ce:d2:5d:72:6d:6d:aa:89:86:82:9a:06:5a:ea:
3e:8c:02:69:52:08:03:0a:cd:db:22:9a:62:c8:d5:06:29:5a:
f7:e5:7d:51:91:a2:60:7b:7d:0b:aa:d4:ba:7c:d2:85:4a:58:
9e:a0:df:b5:d8:22:25:78:0d:96:d3:01:67:f3:9a:fd:12:51:
51:9d:02:37:41:ac:d2:cc:ff:5d:c2:2b:b1:6c:53:9d:0d:64:
cb:da:ed:d7:87:82:51:77:2a:57:37:01:ab:f2:24:4e:72:cd:
b6:3d:de:c2:fc:1a:df:5d:fa:b0:bb:b2:d1:05:25:fa:60:38:
8d:16:0b:0c:4f:65:c9:85:1a:27:10:c7:7d:4c:18:d8:bb:a9:
6f:9c:6f:e7:3c:80:3e:a4:10:e2:20:ab:52:fe:f2:bd:43:cd:
8b:73:b5:4b:96:7d:fb:6e:3b:ef:e2:ed:93:81:2f:d9:a0:e0:
99:2d:e0:b1:39:62:08:06:e3:99:e4:d2:1c:31:9b:75:c9:d6:
1d:5b:88:05:ff:11:5b:37:f5:ff:85:b9:4d:56:31:9d:d2:e9:
ae:fd:79:a1:5f:72:76:c0:36:00:da:69:9a:e4:d2:98:a3:ed:
90:b6:f4:e1:1a:91:0a:d8:43:47:e6:4e:29:22:2c:d0:71:f6:
80:93:44:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:16 2025 by rpki-client