Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7636DC942F4811F0B53D67C9DAE4EC9C.roa
File: 7636DC942F4811F0B53D67C9DAE4EC9C.roa (raw, json)
Hash identifier: 9qI7O44GbfNBUo3qFbQerSdbO/gbIz006KO/sZNA6L4=
Subject key identifier: 22:0D:C5:C6:77:86:99:51:27:20:55:18:C4:BB:AB:1C:CF:1F:18:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018039
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7636DC942F4811F0B53D67C9DAE4EC9C.roa
Signing time: Mon 12 May 2025 15:47:52 +0000
ROA not before: Mon 12 May 2025 15:47:47 +0000
ROA not after: Sat 02 Aug 2025 15:47:47 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
154.91.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98361 (0x18039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 15:47:47 2025 GMT
Not After : Aug 2 15:47:47 2025 GMT
Subject: CN=68221828-d77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:0a:02:22:71:d9:01:3c:42:4c:a0:fe:5b:
4d:89:00:a4:c5:25:8f:5d:0b:d9:cb:8b:13:34:04:
43:f2:b4:ac:2f:a9:9c:f2:1b:80:34:de:81:c2:56:
08:76:fd:7e:16:42:35:05:db:97:03:39:cb:72:a7:
87:b4:f9:b4:30:35:96:eb:9d:91:88:6f:11:95:df:
83:bc:16:b5:ba:01:0e:72:3d:1c:17:0c:37:5a:e7:
b0:3d:02:62:89:a3:35:cf:64:80:28:42:3c:5a:6e:
60:18:6a:0d:b8:17:b8:36:a7:d7:6a:3b:95:ec:44:
9e:da:12:8a:e1:16:4b:d0:5f:9e:b4:b9:34:74:60:
5c:75:1f:01:2a:ed:5a:4b:c1:65:33:62:26:eb:b5:
34:ca:3e:43:25:52:25:60:f1:d3:f0:52:90:57:63:
f8:94:a7:6d:00:10:f1:c0:a9:aa:81:5c:ac:d3:f0:
4e:5c:39:f1:fe:83:6e:d2:66:25:3f:97:c3:e0:71:
99:5d:18:4b:f0:a2:a7:18:c1:e7:5d:1b:79:e6:0d:
84:75:8d:44:68:52:c5:41:b5:7b:a8:ca:16:44:ed:
b2:70:83:35:a9:a2:72:8f:9e:61:50:28:3d:92:5f:
9e:8e:6a:e0:95:01:5a:6e:ca:d5:3b:e9:de:5e:c1:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:C5:C6:77:86:99:51:27:20:55:18:C4:BB:AB:1C:CF:1F:18:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7636DC942F4811F0B53D67C9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
154.91.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2f:02:1f:93:91:12:a7:59:dc:9d:b9:6c:cd:d8:89:84:48:
42:7d:f5:e4:8f:c2:90:42:f4:5c:6c:92:d1:e4:54:42:c5:e1:
ed:93:15:01:6e:ed:7c:f7:b5:61:f7:21:f5:30:fa:28:96:a8:
0c:ae:d0:74:e1:05:70:42:65:d0:d1:c5:95:b6:3d:04:c8:c5:
d0:23:d4:88:89:29:e8:5a:19:90:21:09:6c:57:9a:d3:8b:05:
0a:b3:8c:05:c2:1a:86:82:3a:12:78:b2:b1:5a:c7:af:e1:b5:
2f:7e:31:8a:52:a6:86:64:27:c5:d6:8b:9d:1c:3c:54:fe:61:
6b:08:61:cd:0c:58:3e:18:2e:56:e5:1b:4d:ea:f6:b5:ba:fb:
66:7a:dc:3d:6d:53:4f:38:7e:37:ba:79:d5:10:fd:1f:8c:d3:
2d:f0:59:21:22:4f:03:93:cc:b6:72:39:4b:08:46:e9:fa:47:
83:c6:ce:2f:f6:b5:9c:f9:84:77:6c:49:3b:73:99:bb:55:f9:
fd:17:5e:1a:69:97:e9:f5:aa:06:b6:55:c6:36:45:6f:9e:ae:
4c:d2:79:04:19:96:59:c5:4b:e2:c1:12:27:e6:62:de:df:9b:
5a:21:af:6b:e4:0e:56:b2:40:c7:77:54:72:8a:3c:a5:c3:a3:
3c:a9:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:50:20 2025 by rpki-client