Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81A6243E243C11F084DEFDDDDAE4EC9C.roa
File: 81A6243E243C11F084DEFDDDDAE4EC9C.roa (raw, json)
Hash identifier: gIRHZlakQ7LL6qAL7OVJotJUYvO2Eo3S/H8CxdUeabY=
Subject key identifier: 63:CD:99:45:65:FD:AA:BB:AE:86:B6:3F:9C:4A:97:E5:23:FA:C7:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81A6243E243C11F084DEFDDDDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:24:34 +0000
ROA not before: Mon 28 Apr 2025 14:24:30 +0000
ROA not after: Mon 27 Mar 2028 14:24:30 +0000
asID: 17561
IP address blocks: 154.81.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97283 (0x17c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 14:24:30 2025 GMT
Not After : Mar 27 14:24:30 2028 GMT
Subject: CN=680f8fa2-84ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:b1:32:5d:c6:34:60:67:38:11:a3:7f:e1:
ea:e7:6a:57:36:93:98:43:58:f5:6a:31:84:3b:ac:
e4:b4:b9:2b:57:ca:45:18:0b:6c:73:f7:cf:a8:dd:
fc:e1:3b:03:83:ed:d7:13:77:7c:38:14:4e:6d:5b:
61:3e:64:ec:41:f9:97:78:9a:d7:fe:7e:9c:91:24:
91:85:de:03:9d:71:62:b2:9e:5c:59:79:a0:6e:af:
c9:be:04:71:dc:b4:ea:89:48:11:63:02:c7:04:9b:
20:d0:33:00:68:43:8e:ba:71:9b:ab:91:5d:62:d9:
6d:2e:e2:ea:48:bd:3a:3d:f0:7c:ed:c3:7a:29:c3:
f5:84:04:c1:d3:de:c4:06:a3:66:03:0e:11:31:36:
68:14:59:d5:69:7f:e5:cf:df:8d:d3:61:8c:5e:c0:
0b:4a:65:42:21:95:06:8d:1d:e1:e1:9c:1d:1c:72:
31:7a:ce:d8:63:10:fa:28:a1:9c:ee:e0:27:fc:e9:
6f:ce:fc:11:bf:8f:41:8d:6e:e2:67:ba:0a:87:40:
4a:0e:e5:3f:88:64:ac:3e:53:a1:7f:34:32:0e:50:
40:ef:18:46:22:d3:f1:b3:66:7e:05:5a:77:9f:38:
1e:20:88:e5:27:2d:31:60:13:94:9e:aa:2f:26:55:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:99:45:65:FD:AA:BB:AE:86:B6:3F:9C:4A:97:E5:23:FA:C7:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81A6243E243C11F084DEFDDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.13.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0f:45:f1:fe:e7:da:de:5a:25:4a:77:1a:5f:f6:94:f3:56:
09:05:d6:5d:86:b9:e7:27:5f:9c:b3:12:0b:47:7a:1b:29:8b:
fe:7f:62:d9:49:2c:c1:28:a3:08:47:a9:5c:a9:29:39:ff:48:
9e:94:07:94:8a:ea:c6:9f:cd:ec:b6:e8:bf:1a:20:cc:05:79:
a7:46:d6:8e:dd:f2:a2:98:d9:4c:13:e1:03:18:f2:bc:dc:bd:
80:6f:a7:57:24:af:bf:4a:ba:b0:43:fb:76:b5:d0:e6:5f:23:
7b:1f:f9:8f:84:b2:40:3c:c5:bb:db:0f:ca:ef:f8:92:c7:81:
4a:05:61:4e:e8:af:b7:6d:f9:69:23:c2:d9:8e:a6:de:a2:e0:
1b:00:70:b1:46:e2:0d:1f:37:e6:16:60:13:f6:30:a6:53:a8:
f8:68:27:d8:f5:83:94:82:05:d9:ba:99:75:05:e4:6c:50:c2:
e1:02:1e:ef:2d:14:75:c0:a4:68:69:f5:0f:45:95:55:c6:ff:
1c:7d:fb:fa:17:34:6b:51:05:2f:a0:a3:3a:92:0a:91:48:e2:
a8:01:3a:72:9a:db:d3:0a:54:24:ab:09:6b:a9:fa:26:d3:d0:
ff:ad:3d:9f:95:b6:07:6c:0d:2f:f3:0a:52:43:12:c5:15:08:
fd:a9:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:07:56 2025 by rpki-client