Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5BF09228B811F0BAE289EBDAE4EC9C.roa
File: 8A5BF09228B811F0BAE289EBDAE4EC9C.roa (raw, json)
Hash identifier: lPbf+pYmWdzm5hkrv9SQzy5vkQ5UodCCVb9rArghCFg=
Subject key identifier: 23:11:9A:8E:6A:A7:FB:B5:A3:B2:7E:98:0B:52:E5:C1:59:DE:9B:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5BF09228B811F0BAE289EBDAE4EC9C.roa
Signing time: Sun 04 May 2025 07:22:31 +0000
ROA not before: Sun 04 May 2025 07:22:27 +0000
ROA not after: Fri 06 Jun 2025 07:22:27 +0000
asID: 213896
IP address blocks: 154.193.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 01:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97972 (0x17eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 07:22:27 2025 GMT
Not After : Jun 6 07:22:27 2025 GMT
Subject: CN=681715b7-daba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:cc:39:06:73:23:54:09:4d:bc:89:d1:a5:
fb:8b:f8:9c:f0:dd:5a:1f:b5:8c:f6:8c:02:bf:bd:
ff:5b:48:2a:88:b3:0e:c4:84:f4:32:95:66:c0:e0:
ca:3e:38:16:31:4f:96:04:e8:92:60:38:86:97:e5:
60:05:64:11:b6:e3:db:ab:9b:00:59:d9:5a:29:73:
75:23:67:10:de:4f:ac:db:53:ec:46:e3:24:0e:36:
00:79:a5:28:87:68:aa:8f:ea:04:fe:c1:6d:33:6d:
d6:14:1a:86:d8:12:cb:9f:a3:2b:f0:69:e9:10:a2:
92:63:a3:cd:4e:e7:a5:5b:71:6e:ef:ad:a1:53:fa:
00:9a:33:31:aa:d7:6c:50:12:40:c2:ed:13:7e:17:
97:bd:44:8f:b9:be:61:ab:71:9e:77:9c:4c:fa:d0:
de:7f:29:9c:69:4d:59:ea:1a:c5:61:43:94:4d:25:
6b:31:6e:1f:78:a9:1e:0a:2b:b5:0f:78:7c:b5:47:
35:0a:67:ac:6b:3f:6d:19:3a:aa:f7:4a:85:25:f4:
cd:6a:c9:70:5e:e6:1c:f2:4d:a1:1b:b7:cc:0d:cd:
1a:17:70:34:d7:0f:b4:30:38:a0:0a:22:cc:ba:45:
d5:eb:0b:a0:c6:ca:5b:70:bd:f8:4f:df:10:90:2d:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:9A:8E:6A:A7:FB:B5:A3:B2:7E:98:0B:52:E5:C1:59:DE:9B:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5BF09228B811F0BAE289EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:bb:bd:8d:22:84:3e:6f:a8:4f:23:7c:c5:df:fd:e5:1f:19:
e5:86:2e:6e:20:cc:95:3a:7c:2d:85:3b:cd:6f:df:0a:75:58:
ed:39:35:2d:6b:37:55:65:f3:10:6c:22:ad:f3:7c:c7:62:99:
d7:2d:31:48:15:1c:6e:eb:ec:96:db:0b:6f:7c:73:a7:32:e7:
85:5b:e6:73:b0:e1:07:c1:af:1a:67:d6:11:9f:41:54:cc:69:
e0:e4:19:0e:0f:fe:07:ea:25:ca:d1:23:1c:4d:ec:3e:ec:97:
40:32:60:55:8d:33:3f:9a:37:3e:9e:08:ec:d9:ba:5c:f3:0c:
f7:aa:c7:fb:5d:b5:e0:d7:f3:a2:7b:21:5d:f7:f7:62:5f:b8:
01:01:af:61:7e:de:75:15:59:8b:92:3e:51:83:d1:cf:f6:52:
2b:7d:79:63:aa:60:f9:f0:97:81:4a:ab:bd:96:df:15:d0:80:
34:01:50:35:02:48:cf:1f:f2:d4:b3:23:04:a2:77:30:b7:27:
45:9d:84:58:df:d0:80:07:c6:ea:5c:bf:e0:26:fb:dd:94:a8:
70:0a:88:d7:ec:da:44:4a:52:d8:d8:eb:b4:a6:22:03:fa:00:
66:10:b2:21:b3:f8:fd:e0:a1:f1:a8:8b:b1:23:e0:f3:2c:65:
7a:82:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:26:34 2025 by rpki-client