Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A369BD80317811F0821884F4DAE4EC9C.roa
File: A369BD80317811F0821884F4DAE4EC9C.roa (raw, json)
Hash identifier: gWdzOSCh1MpGBPiC547yvRUimW6dQvVHPgGg+u1iFCk=
Subject key identifier: B1:C9:51:55:29:AB:FE:6F:75:47:4C:AB:C4:51:63:52:D6:48:4A:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A369BD80317811F0821884F4DAE4EC9C.roa
Signing time: Thu 15 May 2025 10:37:46 +0000
ROA not before: Thu 15 May 2025 10:37:41 +0000
ROA not after: Tue 24 Jun 2025 10:37:41 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98518 (0x180d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 10:37:41 2025 GMT
Not After : Jun 24 10:37:41 2025 GMT
Subject: CN=6825c3fa-da3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:69:d5:db:0e:99:72:83:3d:fc:f6:83:8a:
d3:f2:50:63:f2:94:88:78:f7:a1:fe:bc:69:a5:3b:
90:78:ef:92:d3:2d:e4:3a:dd:a9:b3:a7:76:75:1f:
74:ec:02:60:8a:cc:fe:78:20:f4:43:25:33:35:7e:
d6:a6:14:c7:a9:52:97:71:bc:96:3d:4b:a5:b7:ad:
ca:d5:cf:ab:9c:11:6b:99:e2:d5:44:e0:6a:84:a1:
41:00:31:45:27:b3:d0:a1:41:c3:75:3b:d1:25:fe:
ef:35:dc:98:42:43:f3:77:40:3a:12:79:c8:ce:bb:
d4:06:80:99:f3:af:12:98:49:56:fb:67:4f:12:05:
e0:c0:7e:7b:9a:07:29:18:1a:f8:55:8b:13:45:f9:
0f:3e:63:86:5c:de:aa:24:92:02:f1:a0:5e:ab:bd:
32:58:c2:04:f9:81:d3:1f:52:45:2c:c9:ba:4a:5d:
4d:83:86:c3:96:7e:f0:97:f2:4f:8f:24:39:b7:a3:
68:1b:49:09:a1:9d:03:65:ae:a5:6c:60:bd:ee:14:
53:b6:7e:2d:92:3c:f6:75:fa:c4:eb:8f:61:a0:58:
66:e4:2c:6d:f1:01:3a:8d:44:71:5f:08:a2:8e:92:
41:49:f8:0d:18:fc:94:c9:2a:7d:6a:ac:28:97:d6:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:51:55:29:AB:FE:6F:75:47:4C:AB:C4:51:63:52:D6:48:4A:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A369BD80317811F0821884F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2e:a2:5f:0e:e2:73:24:46:1a:09:63:3a:f8:f9:db:8b:ca:
f2:42:70:ed:ab:bb:fe:b1:3a:b7:35:c8:b7:48:73:9c:0e:df:
57:5b:e2:45:52:f0:18:98:19:bf:b2:a7:c1:24:56:57:d3:0a:
1f:90:3d:a7:9a:3f:85:89:0b:f1:ee:c4:68:ec:68:87:f7:2d:
32:13:cd:fe:35:3a:74:42:f3:b6:00:f4:6a:28:7e:1f:b1:6f:
22:03:72:65:7e:19:0a:38:08:ce:fc:e6:73:0a:33:e3:60:3c:
22:b4:fc:94:a9:59:f6:3c:c9:16:ce:ba:b8:df:ff:99:77:80:
ce:b6:f3:ac:e8:9d:83:7a:10:c3:c6:57:0f:25:82:9e:17:4c:
41:04:18:d0:b8:a9:14:7e:74:7a:f9:2f:d3:fc:fa:16:d5:08:
59:30:15:74:7d:6f:3d:12:f0:55:23:dd:bd:74:24:74:26:35:
d6:c6:8d:7f:7f:11:4b:d2:3b:d8:c0:d2:0b:31:25:0d:3c:ea:
48:e8:c1:8d:e8:4c:9d:51:32:90:c9:2d:10:0b:69:0c:7a:b4:
8b:9b:a6:8d:8a:6f:27:95:49:ae:0b:46:01:13:8f:13:62:03:
ae:59:4a:da:3c:3d:91:87:ba:d1:3e:ec:c9:78:61:cf:16:e0:
e8:98:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:58 2025 by rpki-client