Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C74D3C4243111F0A80FA496DAE4EC9C.roa
File: 9C74D3C4243111F0A80FA496DAE4EC9C.roa (raw, json)
Hash identifier: bNffKSC46X7pq+H0Uv2/P4kObCdU62JIcnWefZDPz1M=
Subject key identifier: CF:FF:D8:3A:76:2B:A6:5E:F9:86:AF:33:02:30:1E:1B:23:E4:71:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C74D3C4243111F0A80FA496DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:06:35 +0000
ROA not before: Mon 28 Apr 2025 13:06:30 +0000
ROA not after: Thu 23 Mar 2028 13:06:30 +0000
asID: 17561
IP address blocks: 154.203.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 11:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97233 (0x17bd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:06:30 2025 GMT
Not After : Mar 23 13:06:30 2028 GMT
Subject: CN=680f7d5b-5b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:5c:f4:5c:20:a9:47:b2:be:e9:d7:e2:1d:
23:9d:c7:b3:2e:0c:97:32:a9:b3:4e:f4:19:9f:69:
22:58:71:60:7d:02:93:7f:1a:1c:61:69:cb:0c:bf:
bc:6f:3b:d8:d1:c6:67:65:9a:3a:e2:58:3c:83:23:
79:5e:ca:15:5d:df:e3:4c:2f:4a:c6:77:6f:03:26:
3b:bf:ff:87:42:4a:00:29:0d:5b:e4:8e:4e:13:79:
df:d1:2c:d7:aa:32:90:56:5d:42:ee:64:d3:53:10:
b2:48:14:3c:2a:da:d9:ac:26:dd:43:0a:cd:d6:b6:
17:b1:ce:e4:63:d1:1c:40:11:e2:7a:24:67:71:8a:
32:86:45:8d:a6:4c:de:9c:42:52:58:3e:97:80:ba:
6e:d8:86:1a:91:0c:fd:54:09:22:4a:7f:93:13:5f:
39:19:da:66:dd:9c:7d:70:7d:5f:da:d6:76:45:ca:
28:55:4f:3d:8e:03:f8:f0:91:54:9a:f5:5e:21:87:
e4:a7:1b:40:ff:b0:d8:dd:e7:d4:40:cb:3b:58:ee:
22:a8:f9:fa:9e:63:0f:07:cb:83:9b:bd:fc:8e:30:
33:c0:7f:cf:cd:4c:27:4d:e6:8a:b6:d9:3a:25:47:
27:e7:6f:26:6f:64:fd:69:d4:ce:87:91:e3:02:65:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FF:D8:3A:76:2B:A6:5E:F9:86:AF:33:02:30:1E:1B:23:E4:71:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C74D3C4243111F0A80FA496DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.79.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fd:11:c6:e6:ee:79:73:87:a7:8e:f9:95:b8:14:ef:a1:1e:
56:79:a6:42:ab:f5:36:7f:50:3f:88:41:cd:42:ac:e9:ac:44:
0d:ea:06:45:79:57:52:a9:d7:59:a6:72:7a:a8:5a:80:3d:31:
37:87:eb:c4:ec:e9:7e:18:27:af:c9:ac:09:9f:a6:73:b7:95:
23:a9:24:cb:31:54:ef:4b:c3:80:e9:35:7c:04:ba:94:3d:22:
6d:7d:5c:1b:4c:07:fc:bc:17:ea:5c:c4:9c:67:00:66:6d:aa:
44:65:fe:53:96:cf:a3:ab:19:7f:de:cf:11:56:40:a8:29:cb:
c9:b6:5f:3a:80:9b:f1:fc:4e:a1:d7:76:69:8e:ba:a5:b2:b7:
98:c6:eb:47:65:e3:4d:25:aa:1d:a3:f8:b6:72:50:e4:f6:a7:
1a:fb:47:36:8b:04:a7:39:50:a9:a7:18:6b:66:35:f1:69:c2:
25:b3:70:0d:dd:f4:f1:1e:37:71:ec:fe:7c:50:94:a2:c8:06:
6a:ad:b3:a9:58:28:b2:b4:04:f4:b2:11:33:e7:6e:14:af:57:
ed:bc:f4:29:8f:65:6e:79:54:14:af:1c:f4:34:c3:e2:c6:1b:
de:34:68:ac:ca:96:f3:b8:f7:d7:77:bf:50:6c:86:1f:6d:67:
9f:da:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:52:50 2025 by rpki-client