Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D189CBE30B411F0B12719D2DAE4EC9C.roa
File: 8D189CBE30B411F0B12719D2DAE4EC9C.roa (raw, json)
Hash identifier: Bl0ED+BC/5wHlC5hnDdhdnK1cjqcbgaPMlVBhZbKCkc=
Subject key identifier: 91:73:CF:2B:8A:A8:BA:94:D0:4B:F6:2A:1E:FD:50:02:49:AB:F7:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01809D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D189CBE30B411F0B12719D2DAE4EC9C.roa
Signing time: Wed 14 May 2025 11:14:07 +0000
ROA not before: Wed 14 May 2025 11:14:03 +0000
ROA not after: Sat 24 May 2025 11:14:03 +0000
asID: 133180
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98461 (0x1809d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 11:14:03 2025 GMT
Not After : May 24 11:14:03 2025 GMT
Subject: CN=68247aff-58e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:a8:63:30:cb:c7:63:25:bb:38:90:d6:06:
02:4a:85:1b:3b:72:0c:2c:0e:28:35:5b:12:0e:f9:
c6:22:2d:0d:c7:3b:1d:90:54:ee:d0:7b:04:cf:5b:
71:31:0a:fa:a2:24:99:e6:ec:f5:33:6e:b1:ae:83:
45:a9:1e:63:ac:1b:b4:61:02:2a:2c:0f:3e:09:ea:
35:4d:fb:52:38:7f:11:7b:09:c0:fb:02:99:b0:e5:
27:2d:41:38:7f:4d:62:7e:00:68:6e:5d:47:73:63:
f0:e7:4f:7d:6d:05:e6:fd:73:a7:86:b5:e7:f7:65:
fc:31:03:da:bc:52:ed:ef:74:2d:c8:46:b6:6a:27:
4e:8b:5d:dd:94:85:20:19:a9:0b:17:fa:a5:57:dc:
54:85:85:97:78:25:de:ba:22:f3:c0:ef:c0:0e:29:
21:b0:ef:33:9b:dc:b2:31:ff:21:06:b9:f9:0b:e8:
04:5b:ed:27:73:a1:3e:8e:b5:4a:4d:7c:1d:c2:bb:
0e:4f:f9:08:24:ef:8c:5a:40:76:1a:14:91:24:56:
4d:1f:7a:70:d1:b5:c7:17:5c:56:9d:37:4d:1e:c9:
3f:87:f1:a8:f8:a1:6c:d5:7a:9c:6b:01:0b:0b:52:
89:10:41:cb:e0:0e:8e:23:fb:6d:e9:7e:0f:df:3e:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:73:CF:2B:8A:A8:BA:94:D0:4B:F6:2A:1E:FD:50:02:49:AB:F7:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D189CBE30B411F0B12719D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
28:2e:fc:ef:b4:f3:b4:82:c8:79:55:9e:12:5a:75:fb:31:2d:
b9:ae:13:e3:31:a0:04:fd:4f:50:a0:03:51:97:0c:13:4a:90:
55:67:c5:d4:6f:6e:6e:32:b8:09:a0:d3:1b:f6:f4:f7:68:e3:
a8:79:80:43:78:fd:66:86:70:11:6b:e5:2c:ea:20:14:f9:df:
85:28:5e:a5:7c:28:d9:d0:ac:e0:9f:49:97:37:27:21:70:ee:
12:d4:d4:d6:2d:13:df:c1:ab:d7:23:94:73:cb:f3:d9:7c:cd:
85:4e:99:7a:15:d9:da:8f:cc:f5:a0:0e:15:22:c5:6e:9d:e6:
9a:74:91:83:4a:4f:b6:8f:67:98:65:42:e2:68:78:16:48:46:
53:3b:fa:93:06:61:7b:b3:fe:c6:0f:67:60:b4:3e:63:da:47:
00:be:3d:f9:cf:ec:e8:c7:b5:4d:e2:54:4e:b2:2d:0c:b1:9f:
52:81:ae:5b:81:c8:26:41:86:53:ad:2a:93:a7:f7:31:c5:d8:
34:8e:9e:b5:a2:ec:90:57:c0:df:f1:85:98:a5:d8:57:01:ba:
bd:ce:ff:4d:2c:70:61:ea:03:4a:d7:c9:96:59:cd:cf:ff:6a:
d6:ac:10:2b:2a:2d:27:95:1d:1a:5f:a9:ea:4f:56:81:61:2c:
39:4f:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:53:36 2025 by rpki-client