Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7189937A296311F09AF9CEDDDAE4EC9C.roa
File: 7189937A296311F09AF9CEDDDAE4EC9C.roa (raw, json)
Hash identifier: qhovoNp1qyHqViIss0ORrLOufnfiGyotAaR4kS06I6k=
Subject key identifier: 26:03:19:88:EC:9C:9A:16:0B:87:E0:31:E6:5C:D7:74:4A:FA:70:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017ED5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7189937A296311F09AF9CEDDDAE4EC9C.roa
Signing time: Mon 05 May 2025 03:45:54 +0000
ROA not before: Mon 05 May 2025 03:45:48 +0000
ROA not after: Sun 25 May 2025 03:45:48 +0000
asID: 57043
IP address blocks: 154.222.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98005 (0x17ed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 03:45:48 2025 GMT
Not After : May 25 03:45:48 2025 GMT
Subject: CN=68183471-7364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:a4:40:44:3e:5c:f5:6e:65:e2:90:42:60:
03:73:56:ae:a1:8e:e1:24:74:53:76:1c:ca:37:d8:
90:f5:eb:68:d0:a8:3c:4a:07:16:3b:c0:df:cd:ce:
48:c8:20:20:7b:db:74:ed:ff:63:d8:41:cb:fd:0a:
2d:60:3e:15:83:ff:b7:f5:8d:0b:51:83:c1:ac:be:
83:7f:a4:ad:b7:04:2d:a6:28:a4:e2:b4:c1:e2:95:
65:fd:32:fe:86:f6:15:29:e4:8a:13:c5:4b:f5:5d:
81:a0:69:c6:95:bf:3a:12:0a:3e:63:e3:52:98:a7:
5f:58:cc:65:6f:dd:11:9f:d6:a8:7d:da:24:69:b4:
da:9b:63:fb:f0:b7:46:c3:b3:1c:2a:1e:9c:b0:ce:
54:c0:a2:e4:4a:4f:8e:dd:fa:43:e5:94:fd:3f:99:
ef:98:59:7d:b6:69:10:8b:1c:93:ac:3d:09:d5:c7:
01:4f:0b:10:85:11:da:d5:22:92:62:ce:1f:9e:1f:
e4:dc:52:a6:23:05:cd:fc:7f:0e:9d:8d:9c:47:cf:
83:2d:c3:a8:31:28:14:56:25:c2:78:a9:ff:92:68:
92:95:43:cc:fb:a6:84:9c:28:5f:35:d5:e8:4a:db:
5e:23:96:36:49:27:85:a8:30:e5:b7:db:09:a6:88:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:03:19:88:EC:9C:9A:16:0B:87:E0:31:E6:5C:D7:74:4A:FA:70:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7189937A296311F09AF9CEDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.138.0/23
Signature Algorithm: sha256WithRSAEncryption
69:57:37:49:16:c5:f9:78:4f:71:7b:ff:19:44:c9:4e:76:7e:
15:8d:b5:fd:e8:2d:f2:db:fa:83:4b:88:40:80:26:eb:5e:31:
8d:1b:11:0f:24:09:2c:7d:a7:11:ab:0b:3c:7a:f8:3b:ae:a9:
39:1d:cd:c5:65:28:8c:da:e2:87:a0:b0:f3:ee:9a:0c:72:0c:
06:1e:9a:a4:5f:eb:b1:7e:05:9a:c7:6d:86:f7:c2:21:f6:8d:
48:26:5a:78:60:b0:de:7b:5f:47:fc:6c:48:68:f6:b7:be:16:
d9:72:ef:e9:05:b9:49:01:4c:d8:a1:a8:8e:49:82:22:4a:cc:
d2:d1:e0:b9:07:d4:5d:ff:a7:a1:7c:c8:d4:33:fb:11:bb:23:
65:bb:b3:d3:f9:42:10:b5:ef:7c:6e:6c:54:aa:eb:9d:22:16:
c9:fd:1c:7e:00:b9:ea:32:f0:84:f7:26:c7:bc:bf:85:bc:3c:
6f:6f:6b:7c:d5:4b:d2:09:ac:ac:29:ff:11:fc:67:da:55:ca:
e1:4b:74:38:5e:2d:81:a4:a4:c3:0d:80:5d:87:12:fe:80:41:
5d:c5:0d:f8:8c:2d:7b:51:c2:4d:63:17:23:f6:99:9f:f4:53:
80:4b:58:cb:7a:d0:8b:ae:e2:b6:5f:c3:7f:07:b5:ba:2d:f8:
a2:e2:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:45:19 2025 by rpki-client