Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6B09B82F2D11F0B1A33499DAE4EC9C.roa
File: 8E6B09B82F2D11F0B1A33499DAE4EC9C.roa (raw, json)
Hash identifier: 5WRID7X7AL1C/9vHuUtEFYqzTTREF7lldC+O7HkJwsM=
Subject key identifier: EF:8A:BC:E8:02:09:DB:54:CB:82:F8:63:A7:EF:4E:87:EC:40:8E:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01800B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6B09B82F2D11F0B1A33499DAE4EC9C.roa
Signing time: Mon 12 May 2025 12:35:16 +0000
ROA not before: Mon 12 May 2025 12:35:11 +0000
ROA not after: Wed 18 Jun 2025 12:35:11 +0000
asID: 20473
IP address blocks: 154.83.134.0/24 maxlen: 24
154.83.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98315 (0x1800b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 12:35:11 2025 GMT
Not After : Jun 18 12:35:11 2025 GMT
Subject: CN=6821eb04-b1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:4d:f5:77:20:c1:52:d4:38:93:ba:f8:90:
9c:8e:05:76:ca:59:96:39:75:df:a3:2c:df:77:cb:
4d:7f:c3:2a:09:54:8c:7a:60:7b:d6:c8:6d:6f:a8:
65:35:1c:6f:13:6c:b5:16:6f:21:aa:dc:a8:4a:b4:
04:c1:ad:3c:ba:37:a2:0b:23:af:6b:79:11:a5:de:
39:75:5d:a9:38:9e:70:30:ec:0c:5c:85:1f:c7:cb:
2a:dc:94:23:cb:f2:2b:2b:70:02:2b:f4:6b:3e:c5:
7c:53:b9:a4:f3:61:e4:8a:37:ff:0a:93:4f:e7:b9:
c3:3f:cb:2a:e4:40:25:a6:61:8e:1f:10:56:cb:6d:
60:8f:f4:1b:eb:9b:55:a2:75:08:01:18:33:d2:24:
79:8c:a2:a0:61:f2:b3:d6:05:55:6a:2a:8f:e8:c6:
a4:19:58:36:75:49:f0:b8:f3:20:c3:3b:c5:43:28:
7d:7d:6a:06:3b:30:5d:c9:33:3d:86:09:d2:4e:5b:
27:85:05:47:00:b6:5e:18:a0:c3:e6:01:ac:a7:5c:
02:b5:2c:a6:73:8b:e4:f6:b8:65:ea:04:4a:71:2e:
bb:3d:11:3b:2b:62:fb:90:d8:14:54:0d:35:a7:54:
47:80:62:ad:3a:c7:7f:39:e4:09:53:bf:4c:a8:a5:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8A:BC:E8:02:09:DB:54:CB:82:F8:63:A7:EF:4E:87:EC:40:8E:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E6B09B82F2D11F0B1A33499DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
154.83.188.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:0b:76:af:9d:12:3e:af:96:e4:4d:0b:55:17:63:1b:a5:4c:
51:2b:f8:43:0a:54:bb:9d:ab:36:85:ba:f4:be:0b:8e:df:82:
50:5c:31:4d:00:8c:f2:de:d7:a1:4e:63:56:02:6d:48:4a:9d:
4d:91:81:72:ae:cc:c0:47:c0:8f:ba:79:dc:e7:db:db:c7:0d:
b3:73:21:7b:38:d4:36:df:21:8c:85:af:f8:1f:a4:95:33:a9:
f0:4e:ee:56:14:c7:c9:05:f3:77:19:1f:95:97:cb:06:ec:41:
70:eb:bc:fe:b9:e0:f3:94:b0:71:50:02:8c:2d:9b:d1:92:e8:
6b:81:70:81:8a:cd:84:49:71:e0:eb:98:c4:a0:8a:d2:ae:83:
1d:23:80:da:cc:61:2c:48:59:84:3a:d6:d1:72:e7:db:c1:0f:
f9:b8:ee:d6:d9:61:4c:9c:6c:16:30:15:f4:d3:63:01:a3:62:
5b:49:77:8c:7f:82:6a:bb:08:63:e5:d7:26:1d:13:3b:3a:38:
6a:24:c7:b7:b2:8a:3b:b2:3f:30:9c:a5:c7:aa:a0:5e:cb:a6:
a6:96:49:f6:3c:c3:54:63:eb:dd:1b:7e:f3:cb:92:7a:99:f4:
fa:93:e7:22:62:f3:f2:88:bf:db:a0:b4:83:40:09:5b:36:7c:
d5:6b:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:55:45 2025 by rpki-client