Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839796BA24D711F09740E0F3DAE4EC9C.roa
File: 839796BA24D711F09740E0F3DAE4EC9C.roa (raw, json)
Hash identifier: 8K4QgWrxxE9r03LJOvQDm+woPlWeSruJ9V5CUFXvoPI=
Subject key identifier: 04:EA:E1:6F:EB:7D:BB:27:5D:18:76:39:09:69:63:F1:6F:CE:5F:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839796BA24D711F09740E0F3DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 08:54:10 +0000
ROA not before: Tue 29 Apr 2025 08:54:05 +0000
ROA not after: Sun 15 Jun 2025 08:54:05 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97483 (0x17ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 08:54:05 2025 GMT
Not After : Jun 15 08:54:05 2025 GMT
Subject: CN=681093b2-b69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:25:29:d6:44:fd:e4:54:6b:7c:b8:71:93:
a7:7d:21:e2:f3:a2:28:44:36:0a:15:4e:01:60:20:
da:96:45:51:6e:8e:69:20:54:9c:1b:df:78:23:93:
f0:ad:5a:35:91:a2:19:a6:2b:d6:99:33:56:e8:49:
34:36:72:77:53:22:90:2e:f0:b6:5b:e1:5f:79:b1:
4f:0d:9c:9f:c5:21:c7:f8:73:53:99:42:8b:20:33:
18:03:bf:de:ef:42:d3:f2:fe:4a:23:99:72:65:8c:
e8:48:08:f2:bd:9b:7b:f6:c6:f1:07:35:04:61:57:
d0:1c:0b:27:bd:b1:39:c8:d7:1a:bb:76:bb:3b:c8:
05:a2:05:1c:5c:c5:73:cb:ea:66:71:99:f5:a0:7b:
ca:20:80:7a:d8:4c:89:06:e9:50:d3:6a:e5:31:74:
81:f7:81:be:c0:39:d3:fd:28:a2:97:99:8d:b6:98:
0c:5c:79:c0:e6:d3:b5:26:b0:f3:33:3c:b1:77:5a:
47:df:50:3a:c5:23:7e:de:fe:a3:f1:10:6b:1d:55:
4c:ac:8f:c7:fa:7d:05:29:5c:15:e0:21:ac:c0:2b:
7f:a1:cf:9a:9f:38:80:14:61:33:52:26:ae:b2:92:
ed:37:c9:54:7c:b3:2d:73:61:8c:0a:15:fa:ca:33:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:E1:6F:EB:7D:BB:27:5D:18:76:39:09:69:63:F1:6F:CE:5F:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/839796BA24D711F09740E0F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:fa:30:2c:23:34:61:28:1e:7b:e8:5d:0d:d2:d4:e7:1f:83:
7c:0b:c5:54:03:00:0a:5a:90:ec:11:ab:bd:60:cd:d1:f6:87:
2a:73:1d:a8:b3:fc:93:0e:a5:74:fc:2c:95:12:27:34:ad:6c:
ad:44:2a:a9:60:1a:a6:e0:08:5d:a0:5c:35:2f:a5:db:f6:19:
9f:f4:2e:68:01:a6:24:32:c2:2d:fd:ea:75:76:5b:62:99:94:
cc:a2:aa:6e:57:5d:77:cd:9e:92:ba:cf:14:e4:e0:63:e5:f3:
57:34:66:a1:b4:b4:09:fa:8f:c3:d1:82:f1:a8:09:71:1f:b1:
68:a8:87:a1:58:06:e1:87:ff:49:be:35:68:4d:48:b9:7c:81:
9a:14:ea:d6:a9:bd:5c:f4:c4:e5:d6:87:2d:53:67:e0:30:4d:
89:0d:8e:3c:22:c1:23:98:6f:fa:d7:7f:be:69:06:6d:87:6e:
b2:36:fe:f1:05:3f:f8:bf:23:8c:0e:6b:4b:28:dc:15:da:b9:
54:c3:25:e0:66:a2:0f:19:21:c9:4f:08:df:ce:7d:e5:21:24:
9d:ff:61:88:e9:6d:66:5c:1c:67:d7:34:48:30:6f:14:d6:f4:
db:3a:f4:88:82:a0:40:a8:10:b9:0c:b3:e9:83:9b:31:11:8b:
7b:dd:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:12:40 2025 by rpki-client