Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98D130AE24F511F0A3A73DBBDAE4EC9C.roa
File: 98D130AE24F511F0A3A73DBBDAE4EC9C.roa (raw, json)
Hash identifier: 2rFwFRxxHPXM8rtfNVO6G+G7TuPz5NL5lk5fJzAKwOI=
Subject key identifier: 20:29:88:B5:97:B2:93:7E:DF:12:8B:74:AB:D5:CF:56:42:E5:1D:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017CFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98D130AE24F511F0A3A73DBBDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 12:29:30 +0000
ROA not before: Tue 29 Apr 2025 12:29:25 +0000
ROA not after: Fri 04 Jul 2025 12:29:25 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97530 (0x17cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 12:29:25 2025 GMT
Not After : Jul 4 12:29:25 2025 GMT
Subject: CN=6810c62a-cbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:1d:66:89:59:90:aa:8f:70:63:0e:d6:22:
fa:47:a3:2d:02:6f:f5:c7:fc:66:f4:3e:1e:7b:cb:
3d:2a:11:be:ac:25:fa:1f:a9:b3:e0:7e:be:d1:91:
e6:a7:72:07:53:9a:02:a6:6d:69:e9:3c:ce:8a:4c:
d2:f5:25:33:9c:82:dd:72:73:7b:e5:0d:bb:0f:90:
a1:eb:dc:ac:bd:e4:cb:10:9f:63:95:de:3b:07:15:
9d:a3:0d:e0:ce:a0:56:27:ad:a1:64:62:75:e1:78:
9a:c7:88:d6:20:14:a6:5e:10:1c:d4:bf:56:b1:b0:
f6:4a:86:9d:b0:52:3b:3b:6b:a5:85:28:46:d1:76:
c1:9e:bd:81:60:f7:07:28:ec:fc:1f:19:32:b4:7f:
14:fe:6b:d6:0d:e1:e1:ca:dc:97:6b:50:4a:1e:b1:
63:45:07:b4:9e:07:ef:2c:99:a6:da:8f:49:27:c8:
db:75:71:45:b4:25:13:5e:26:c9:a2:87:fe:a8:00:
1d:80:c7:3f:b9:e0:cb:32:cb:c2:a7:69:b9:aa:22:
b8:ee:29:13:0d:cd:59:55:24:ca:4f:4c:b7:2d:c7:
17:8f:7e:56:8f:a4:ee:14:62:0b:d5:74:6f:9d:fe:
cc:85:12:a0:fb:61:5a:26:5d:b4:08:c8:0f:cd:dd:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:29:88:B5:97:B2:93:7E:DF:12:8B:74:AB:D5:CF:56:42:E5:1D:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98D130AE24F511F0A3A73DBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c4:d7:72:86:7f:f3:ed:a0:9a:d8:39:9f:6a:9c:9c:91:75:
7e:ce:e0:33:f9:81:1d:85:b3:e4:57:ca:90:38:3d:a6:2c:c6:
1c:a4:85:be:54:df:92:a6:7c:3e:78:81:e0:fc:97:cc:1c:9b:
6e:96:0a:e2:7b:39:4a:10:b7:6b:d0:14:36:3b:c0:f7:64:4c:
b6:b8:50:ff:e5:fb:7d:19:bf:f6:41:d4:58:4f:7c:62:98:e7:
67:14:14:ff:25:e4:03:f4:75:95:e6:ac:8c:3c:c2:fe:8d:4d:
a9:ec:fa:68:73:e1:3a:8c:e4:58:3b:f6:e9:38:a3:8d:51:b0:
f6:68:d8:c6:9d:70:31:23:9a:7f:d7:13:4d:04:5d:51:73:b9:
c1:94:4a:92:5d:67:4d:0c:3c:e3:2f:18:75:c0:93:72:6f:0e:
42:a7:79:34:e0:74:8c:66:7a:90:f8:92:6f:93:e5:1e:47:1a:
23:92:26:3b:c7:49:13:4a:4e:ab:80:9f:5d:4e:73:39:40:a0:
1a:01:14:cd:fc:e6:f9:50:49:56:6e:15:83:35:d2:60:a0:76:
bb:45:c3:0d:5e:5d:92:4a:b7:4b:07:3e:2d:fa:e4:ed:11:d2:
48:d8:73:a3:ca:b0:dd:15:05:95:74:49:f4:3f:08:af:99:20:
51:cf:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:30:18 2025 by rpki-client