Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1FE310C298911F0BD1F0EE0DAE4EC9C.roa
File: A1FE310C298911F0BD1F0EE0DAE4EC9C.roa (raw, json)
Hash identifier: 3mhTttKNndAzM/xQWKg3usDTiCSlSiIYRLWylOlgLP0=
Subject key identifier: 11:D3:ED:E2:6E:30:99:68:3E:AD:60:68:53:CD:FD:DA:55:76:9D:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1FE310C298911F0BD1F0EE0DAE4EC9C.roa
Signing time: Mon 05 May 2025 08:19:16 +0000
ROA not before: Mon 05 May 2025 08:19:11 +0000
ROA not after: Thu 12 Jun 2025 08:19:11 +0000
asID: 57043
IP address blocks: 154.193.129.0/24 maxlen: 24
154.193.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 09:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98025 (0x17ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 08:19:11 2025 GMT
Not After : Jun 12 08:19:11 2025 GMT
Subject: CN=68187484-1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:ea:71:cd:7b:10:f0:81:d0:f5:79:49:32:
7d:ef:66:6e:f7:2c:df:0d:84:cf:44:26:49:c2:f6:
ab:15:0c:f9:9f:11:13:28:79:b5:da:b6:69:6f:37:
a6:d3:ef:5b:80:d6:61:ba:ce:72:c8:35:05:a0:b6:
ba:68:44:f2:d9:57:a1:48:ff:4e:01:49:12:41:56:
97:de:88:57:d6:2a:b0:04:f0:ac:c2:6f:b8:b8:f4:
94:e4:8b:02:cc:5d:89:2b:1b:e2:30:4c:01:9a:e6:
e1:82:4f:18:0e:55:f9:89:81:f6:dc:5a:63:ae:77:
7a:02:b6:41:60:9b:66:17:1a:ca:86:06:ae:d1:48:
3e:55:15:a1:c9:21:b9:56:7d:de:aa:8c:3a:24:e8:
21:91:de:8b:d6:65:a7:23:e1:ea:c3:4d:80:8c:82:
e4:4b:bb:d3:df:85:0a:f9:24:64:4b:39:3a:53:65:
5b:cf:82:d6:38:5d:72:59:5d:1e:af:8b:24:29:86:
04:eb:00:fe:5e:7c:31:ce:6f:ed:ad:be:c3:9c:c6:
1e:05:c8:19:37:96:85:2d:d2:b3:66:f5:5f:31:25:
6c:ab:22:7d:ba:c2:f4:45:16:29:1f:e7:27:d0:53:
3c:ef:89:dd:ca:b9:f8:de:9c:0e:18:a7:dd:0b:09:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:ED:E2:6E:30:99:68:3E:AD:60:68:53:CD:FD:DA:55:76:9D:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1FE310C298911F0BD1F0EE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.129.0/24
154.193.131.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fb:d2:36:0a:95:50:2c:b0:c5:b3:c3:fe:a0:ab:79:d6:6b:
18:2b:68:c6:7d:d3:a6:07:68:ec:29:6a:60:af:cd:9c:fa:e4:
dc:ad:6d:d7:21:9e:6f:a3:28:88:7d:05:db:46:7e:82:09:92:
dd:68:35:46:69:de:60:ce:32:7b:10:00:f2:87:9f:8b:c9:74:
46:35:cd:8f:57:c8:00:e9:f4:3e:73:b3:6d:06:ec:2e:90:9c:
a7:8b:1e:57:be:da:e5:e0:45:f2:61:b8:b5:4c:22:f6:7e:fe:
f6:23:f9:a1:14:a0:10:b4:d2:0e:22:2d:09:81:82:ac:8c:bb:
62:44:91:0c:93:f0:0e:e3:e4:20:5a:b3:a1:fc:1b:4a:a2:6c:
73:b6:7c:6a:ab:66:dd:12:50:18:c0:3f:88:a6:db:c9:69:1a:
a5:ca:f6:a2:a2:0d:c4:61:2c:94:76:c3:23:11:52:58:bb:f6:
ff:ff:4d:26:9b:a0:20:06:0f:6a:a3:e0:75:33:a0:cf:8b:67:
db:03:6b:83:46:b1:56:88:29:04:f1:8b:18:c8:d7:54:98:de:
5a:65:5d:a5:51:e1:9a:18:a6:ab:19:6e:cc:6d:2b:24:2e:18:
01:f4:9b:f3:08:99:f9:80:f3:41:f2:f9:20:f9:0b:5a:aa:df:
7f:25:7e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:08:08 2025 by rpki-client