Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/847EEA10242311F08D22DAB9DAE4EC9C.roa
File: 847EEA10242311F08D22DAB9DAE4EC9C.roa (raw, json)
Hash identifier: kCHgJzYr7FT/Nnbc0I09VmvP3bI2U2F7c1HKSHAhHpA=
Subject key identifier: 84:D0:61:D1:8C:72:5B:F5:59:5A:9B:5A:2B:F0:57:20:77:E5:7C:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/847EEA10242311F08D22DAB9DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:25:42 +0000
ROA not before: Mon 28 Apr 2025 11:25:37 +0000
ROA not after: Sat 02 Aug 2025 11:25:37 +0000
asID: 400175
IP address blocks: 154.203.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97153 (0x17b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 11:25:37 2025 GMT
Not After : Aug 2 11:25:37 2025 GMT
Subject: CN=680f65b6-99f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:73:14:79:5c:ba:d5:35:1e:6d:a4:e2:a4:
7f:21:fd:bd:a7:d6:c6:03:f4:0f:13:7d:d3:39:a1:
25:d7:45:22:64:31:dc:16:b0:80:a3:06:b3:20:5a:
4f:9d:e4:7f:51:79:0f:d2:b7:84:bd:82:26:1b:43:
9a:32:e7:71:96:c2:18:2a:f2:e1:ef:57:fd:5d:8d:
49:a0:87:8e:d3:bf:89:f4:2c:c7:6e:2b:d2:51:78:
36:b8:8e:1a:67:55:ad:53:24:f3:74:ef:8e:d5:d9:
c2:28:d8:33:e5:f9:17:98:02:b2:28:ef:d4:44:c7:
9a:3a:43:6d:f5:96:f5:b4:87:a8:7c:08:6f:c3:8f:
22:66:b7:0e:18:ba:52:36:a9:09:6c:c3:f9:8c:d6:
d8:af:39:81:c9:a2:a8:29:22:01:7d:60:44:a1:65:
37:aa:10:70:bd:a0:a1:a0:3f:67:45:02:dc:7d:72:
0d:3a:ed:28:75:4e:1a:c0:45:c6:06:98:5e:3c:d8:
87:2a:43:2e:c8:aa:14:aa:84:df:0a:48:43:ad:d1:
af:c1:64:51:33:99:b2:01:1a:48:31:2a:d5:f5:ec:
d0:8d:df:1d:23:bd:71:37:d8:85:43:7c:7d:5a:d8:
cc:37:ef:98:33:65:ec:bd:2e:b6:5c:43:44:56:f3:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D0:61:D1:8C:72:5B:F5:59:5A:9B:5A:2B:F0:57:20:77:E5:7C:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/847EEA10242311F08D22DAB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.2.0/24
Signature Algorithm: sha256WithRSAEncryption
15:89:f6:01:f2:ad:6e:8b:24:62:f4:5d:c2:38:6b:ee:a0:df:
ac:b5:72:2f:96:e1:fc:4f:55:02:70:3f:02:b6:23:e6:b5:d2:
f0:39:db:b4:7d:61:78:4d:db:7e:67:b6:23:5d:29:06:f7:40:
fc:8a:d4:f6:f4:c1:80:24:02:ac:45:b9:9c:d7:b9:65:ce:6a:
c1:a3:9a:3b:d3:58:31:1b:28:26:dd:b7:c0:f7:f7:34:da:e9:
04:ff:d1:1b:ed:6b:cb:58:88:d2:9e:33:7a:63:cb:01:1e:7d:
ba:ca:ee:1c:75:f7:48:64:4c:a3:28:43:02:1a:b9:3c:78:aa:
81:ae:c3:c4:05:49:34:c1:62:5d:31:b6:3b:d7:a2:b6:a1:5e:
43:c4:2b:33:38:fc:1b:61:f1:5c:3b:3c:46:7e:e8:57:85:fe:
3a:15:bd:3f:d0:ba:df:e1:9e:37:d4:4e:0b:89:01:95:a6:62:
a0:86:2c:53:4d:2a:41:9b:47:4b:76:ab:a8:b8:bd:e5:be:96:
19:77:40:83:1e:c9:22:2d:70:97:a8:2a:4a:e5:28:96:27:de:
6f:94:4d:56:84:66:ca:ae:01:33:4f:2f:44:a2:68:ba:76:a1:
b6:5c:48:0d:c7:17:57:66:d1:3e:b9:9b:e1:dd:15:13:74:4b:
d1:04:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:59:57 2025 by rpki-client