Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88AFC37427F311F0985CDEC6DAE4EC9C.roa
File: 88AFC37427F311F0985CDEC6DAE4EC9C.roa (raw, json)
Hash identifier: FNPOLCT14QM4teXs4vdoq5EfVd80G4qPPkOYTI2CXes=
Subject key identifier: 9D:16:A2:FC:78:43:C2:CC:3A:9F:D6:BA:95:15:72:A3:BA:B7:B6:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88AFC37427F311F0985CDEC6DAE4EC9C.roa
Signing time: Sat 03 May 2025 07:52:18 +0000
ROA not before: Sat 03 May 2025 07:52:13 +0000
ROA not after: Mon 12 May 2025 07:52:13 +0000
asID: 209242
IP address blocks: 154.83.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97936 (0x17e90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 3 07:52:13 2025 GMT
Not After : May 12 07:52:13 2025 GMT
Subject: CN=6815cb31-165e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:7e:4b:15:9c:9e:62:d9:b1:2c:39:a8:8b:
81:6d:61:d5:e1:da:32:54:48:d2:14:72:a9:8a:51:
e4:6f:77:cf:86:37:3e:14:73:bb:86:09:eb:5d:26:
ae:1d:c4:e7:b1:99:e5:69:b1:cd:a0:8d:ed:35:8c:
a6:f1:91:35:7f:1c:4b:f1:c7:9b:81:d7:fe:c4:02:
33:15:fe:3a:15:e5:99:89:c7:08:60:13:82:8c:27:
06:3c:21:1a:67:03:b1:9e:80:d7:1a:21:56:46:34:
dd:9d:a2:1e:7d:0c:c7:4a:ec:b1:ad:79:5a:f1:1e:
37:bb:c9:93:0e:50:cc:44:50:30:38:67:93:9b:ca:
96:16:f9:17:be:8d:9e:fb:60:1d:92:c2:04:7e:f6:
51:4c:93:e7:2f:d5:a8:d3:a8:e2:88:dd:17:a2:45:
f6:84:19:88:56:59:69:45:fc:d6:f2:29:57:d2:eb:
64:fa:83:dc:6f:b5:29:c8:c7:80:e4:e9:bf:aa:8b:
24:9b:09:ec:6d:6b:a4:52:33:f0:43:d9:14:3e:25:
58:92:8d:58:01:35:48:e0:19:14:ab:2b:33:46:bf:
c4:97:c4:df:7c:d0:e8:de:78:f4:b8:95:3d:ff:06:
ae:8e:a4:de:b5:48:00:8a:14:8d:72:eb:0a:e7:85:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:A2:FC:78:43:C2:CC:3A:9F:D6:BA:95:15:72:A3:BA:B7:B6:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88AFC37427F311F0985CDEC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:1a:ef:c0:84:81:02:d7:70:db:29:5a:62:66:cd:fd:13:c7:
b1:4d:2e:b8:11:4f:c6:c3:50:5e:ba:67:7e:d9:26:e6:fb:44:
d2:e7:0a:70:dc:d6:27:72:c2:b7:d0:b2:dc:2b:5a:fe:d6:fa:
cf:14:d0:8c:af:50:09:1f:86:4e:26:c7:4e:ff:f7:fa:74:30:
90:dc:b4:89:4c:ff:eb:0c:73:be:34:4a:b3:44:98:cd:14:17:
33:56:22:e6:fd:b3:7d:a6:5d:9a:ac:14:e4:20:7c:24:81:38:
d3:da:c9:86:70:c5:2f:ca:27:ab:57:4b:67:1b:e4:d6:35:7c:
03:c7:40:00:1b:da:d9:cb:fb:d0:87:9e:91:c5:93:a6:0e:50:
16:17:f1:92:81:99:78:5c:1c:45:a5:9b:f1:06:13:ef:52:1b:
1f:3b:8d:5e:7a:fb:31:85:94:cd:01:27:28:21:a0:c7:e0:a9:
77:33:7c:df:d7:5d:c5:4e:f9:f4:ba:76:67:a6:74:7f:73:2d:
4b:8f:dd:e3:b2:1f:a7:9b:ef:9d:7c:67:2f:d1:f2:57:41:9e:
ce:eb:3b:73:ea:4f:67:f5:de:d7:58:8e:5e:7b:56:83:44:c1:
e6:8a:fd:76:99:59:ac:f1:e2:52:67:1a:34:44:f7:45:41:eb:
7d:9b:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:46:00 2025 by rpki-client