Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E5056A2BEC11F0923FE0D8DAE4EC9C.roa
File: 87E5056A2BEC11F0923FE0D8DAE4EC9C.roa (raw, json)
Hash identifier: Cv0Jh2T388oF9OPxgQ/ox5UZeItFpAgn7hF4XiXOXgM=
Subject key identifier: 4F:4A:87:B9:D5:AC:28:0E:F3:DB:64:05:3A:B5:8E:1A:98:C1:E4:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E5056A2BEC11F0923FE0D8DAE4EC9C.roa
Signing time: Thu 08 May 2025 09:12:14 +0000
ROA not before: Thu 08 May 2025 09:12:10 +0000
ROA not after: Sun 18 May 2025 09:12:10 +0000
asID: 13335
IP address blocks: 154.207.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98178 (0x17f82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 09:12:10 2025 GMT
Not After : May 18 09:12:10 2025 GMT
Subject: CN=681c756e-06ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:30:e4:b7:83:ef:cc:2e:8a:99:56:f9:f0:
6c:62:27:e7:a7:87:5d:84:4e:fc:44:64:8e:bf:3a:
14:c9:b3:32:41:07:eb:76:43:e4:01:84:6f:19:73:
97:fb:a2:4e:11:85:2d:bd:68:95:35:55:01:b8:53:
09:d5:65:4e:3d:ab:fe:ae:41:2f:fc:30:4d:67:4a:
b0:f3:33:89:16:fe:13:ff:41:e3:c6:19:bd:58:60:
fc:da:29:1a:79:e8:c8:a4:5d:8a:e4:46:d9:07:2b:
fd:ec:a3:39:6e:76:87:3d:14:8e:5b:e9:9e:12:15:
b9:dd:79:1f:ce:5d:fa:e8:49:5a:06:38:80:78:4f:
f8:50:fd:5d:b9:b7:f4:75:3f:b0:1e:f2:93:7a:2e:
5c:70:cf:a6:f8:34:39:48:5d:41:1c:3d:77:23:8d:
76:d6:e0:ed:42:a5:7f:3c:78:a2:3a:6e:48:07:b7:
22:4a:51:35:cd:0d:44:a0:a4:06:6f:da:3b:c0:55:
69:4b:43:00:a4:4c:27:bb:62:df:7d:b3:b9:e5:c1:
a0:24:f3:00:c0:6f:ae:87:1d:fe:0e:a3:ab:f8:f1:
77:7a:da:1f:ef:ae:91:e0:67:27:55:bd:7a:3a:c3:
83:7d:eb:7c:f0:89:e2:4e:37:cb:0f:4b:18:68:57:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4A:87:B9:D5:AC:28:0E:F3:DB:64:05:3A:B5:8E:1A:98:C1:E4:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E5056A2BEC11F0923FE0D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.77.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:31:72:cf:0c:ad:07:3a:89:da:95:a0:dc:35:c6:4f:3f:32:
9a:a5:c2:9d:4a:42:77:7b:15:73:0a:ee:fa:1c:66:5c:4e:fa:
68:b0:43:f7:db:26:56:eb:34:f5:09:9e:f9:95:60:09:83:52:
81:67:73:3f:e9:4e:2a:84:14:68:46:8c:8f:3b:8c:25:b1:eb:
fb:d4:f9:7a:a2:1d:c0:dd:47:6b:99:d9:f0:7a:93:6c:71:36:
b9:59:c9:65:e7:74:08:7a:1a:4b:ef:ac:02:31:df:83:4d:c3:
3b:52:b9:42:94:69:2e:93:b6:86:b8:ce:a5:74:58:bf:5f:8e:
dd:ba:6b:62:d6:e3:bf:89:c8:ac:d4:dd:c4:c8:41:aa:88:51:
03:32:1a:74:56:79:c5:91:a6:fe:31:49:30:0a:cb:ae:13:ec:
32:7a:f1:6a:d4:f3:35:4b:6b:63:7d:91:06:83:59:38:07:d9:
0a:d6:6a:03:07:14:43:1f:7e:be:01:0f:85:4d:a8:c2:dd:2f:
fd:cf:93:bc:a8:d4:23:79:77:73:7c:1a:25:09:32:b3:43:ef:
d4:70:71:ea:80:a2:e6:22:fd:3d:75:93:bb:14:e4:aa:4c:cf:
83:c0:cc:ff:c6:8a:21:84:6d:f1:dc:82:a2:4b:95:11:3a:e5:
de:9f:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:00 2025 by rpki-client