Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788FB6402A3011F08E5964BCDAE4EC9C.roa
File: 788FB6402A3011F08E5964BCDAE4EC9C.roa (raw, json)
Hash identifier: 1FL982qQ2ESDZhuYCwdoj83wdSBQIDIg//iw7KqeOOU=
Subject key identifier: 8A:63:E5:0D:C1:D1:82:E3:3E:97:1A:9F:BB:B2:64:42:EC:20:A0:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788FB6402A3011F08E5964BCDAE4EC9C.roa
Signing time: Tue 06 May 2025 04:13:32 +0000
ROA not before: Tue 06 May 2025 04:13:27 +0000
ROA not after: Fri 06 Jun 2025 04:13:27 +0000
asID: 54600
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98065 (0x17f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 04:13:27 2025 GMT
Not After : Jun 6 04:13:27 2025 GMT
Subject: CN=68198c6c-ae62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:b4:15:5c:1c:9b:e7:8e:be:b6:16:04:6f:
4e:58:b1:25:7f:aa:73:01:3d:01:89:ba:c4:a9:76:
cf:69:9c:36:e8:c7:bf:e7:2c:ec:ae:45:63:46:06:
1e:62:4c:e7:e5:ea:14:c3:67:3d:33:74:5e:bc:0f:
f6:05:71:76:18:7e:4a:7e:51:f8:1d:ce:0d:ae:ed:
ed:26:54:f0:0e:44:29:42:84:9a:53:95:21:72:86:
b1:b0:28:34:b0:c3:5f:c3:cb:bc:3e:f9:63:73:5f:
b4:e4:7b:fc:62:cf:9c:cd:96:77:87:f7:f0:4d:c2:
82:83:08:35:42:58:d2:1a:d8:db:4b:f4:25:47:be:
66:5b:d4:db:8f:05:49:0a:15:ed:9e:10:55:40:76:
d1:2c:ba:43:6b:b8:f4:57:e8:b2:90:58:51:70:97:
67:97:17:b8:81:6d:27:85:a6:28:95:b3:83:cf:f5:
18:c2:31:dc:f7:c9:be:7c:b6:ad:1b:16:34:d9:34:
68:c3:0f:64:bc:b5:d6:4e:45:46:e0:58:45:77:5f:
8b:07:c4:94:f4:f6:20:73:2d:44:00:2c:4b:d8:c7:
75:7a:64:e5:5b:f2:da:35:c5:ad:67:66:56:0f:0c:
ad:38:dd:00:7d:d4:88:33:36:02:fe:17:e5:13:5e:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:E5:0D:C1:D1:82:E3:3E:97:1A:9F:BB:B2:64:42:EC:20:A0:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/788FB6402A3011F08E5964BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
42:a9:67:de:a1:61:19:34:b8:fe:b4:9c:82:88:b7:0c:be:27:
17:13:c8:ce:69:f8:13:a6:8a:68:5b:ac:3e:f9:3c:d9:43:35:
5d:dd:b8:aa:f2:ed:72:0f:d1:d0:63:cf:06:ea:8a:d0:2e:23:
f9:5f:e5:ca:72:9c:d5:8b:db:b4:9e:be:b0:9f:78:2f:dc:fc:
e1:a5:32:c3:e1:4d:ee:71:d2:fe:0e:e0:b3:52:d0:71:ef:65:
41:4e:18:c9:ed:ca:f5:cb:fa:d9:2f:a9:41:67:5b:fb:08:ff:
f3:ab:c8:43:40:1a:5a:9c:94:41:ab:0f:99:ad:63:30:8e:c0:
ab:93:0e:e6:40:ab:3e:18:d0:83:22:66:0d:ae:fa:4a:bc:84:
dc:75:0b:5e:9a:30:27:ee:72:d5:8e:61:62:82:4f:eb:ca:64:
57:8e:c6:81:4a:e6:64:1d:7b:63:33:5b:70:3f:a2:29:b3:32:
33:8c:9e:3f:e3:55:6b:c7:82:dd:8f:16:1a:75:c0:93:33:14:
28:5f:73:13:e5:c7:09:c9:3f:06:d4:b3:07:37:c9:7a:37:e7:
66:9e:7b:23:40:80:a4:4b:d9:04:c6:22:38:35:c3:8e:35:f3:
77:ae:95:29:af:3f:61:4b:78:2f:b1:a2:bc:c1:70:b9:ef:ef:
99:cd:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:46:54 2025 by rpki-client