Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4170CC62F4B11F0B4B6FDDDDAE4EC9C.roa
File: A4170CC62F4B11F0B4B6FDDDDAE4EC9C.roa (raw, json)
Hash identifier: k+DOKLXUr+JCjJeB7ATyGt/dsVLSR96dy0beq87RFdE=
Subject key identifier: 59:25:8A:D6:1D:F2:EA:31:16:2B:27:00:31:55:AA:1F:76:E1:E6:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01803F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4170CC62F4B11F0B4B6FDDDDAE4EC9C.roa
Signing time: Mon 12 May 2025 16:10:37 +0000
ROA not before: Mon 12 May 2025 16:10:32 +0000
ROA not after: Sat 05 Jul 2025 16:10:32 +0000
asID: 399195
IP address blocks: 154.193.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98367 (0x1803f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 16:10:32 2025 GMT
Not After : Jul 5 16:10:32 2025 GMT
Subject: CN=68221d7d-bc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:59:73:fe:89:d7:c7:8d:93:aa:49:99:ed:
ae:eb:9d:89:6f:fc:7b:5d:4a:56:2e:4e:5a:fe:10:
c1:59:2f:70:73:8d:ba:9d:4f:2c:ca:2c:d6:47:d0:
af:8b:49:ca:4c:df:03:16:79:99:2b:f0:35:9b:8e:
fa:3c:a8:02:18:d2:2c:75:3f:b1:d1:5c:d1:c6:a3:
b6:f6:4d:16:4b:da:15:2c:dd:81:62:01:77:18:27:
93:37:23:fd:40:ce:6c:c9:ff:6b:c2:00:a0:c6:04:
a7:d9:2c:b6:9e:ce:9d:2e:28:85:c4:61:6b:ac:f1:
7f:9a:20:89:68:13:8d:75:c0:21:f6:16:07:79:3f:
fd:01:db:29:ee:de:cf:87:d5:92:8a:a7:be:8a:db:
af:85:5d:e7:fc:47:22:7f:96:93:11:be:da:99:b3:
d8:9d:c9:5f:1d:2a:d4:de:b3:2b:4f:e5:bd:37:90:
34:29:f0:8f:9c:e7:93:0b:25:02:6e:cd:92:7e:13:
d2:4a:a1:e0:80:d6:80:cc:82:e5:07:07:71:ca:8b:
1c:46:88:99:96:c4:e3:86:6b:81:a2:54:d0:d8:39:
86:36:ee:e5:69:f5:89:03:7f:a7:96:d6:aa:15:db:
ee:13:d2:45:6c:8a:e8:f8:0b:35:a6:ef:c4:cf:3b:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:25:8A:D6:1D:F2:EA:31:16:2B:27:00:31:55:AA:1F:76:E1:E6:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4170CC62F4B11F0B4B6FDDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
Signature Algorithm: sha256WithRSAEncryption
06:65:34:6c:15:dc:9b:6a:42:f2:2f:86:c3:51:c4:ef:9a:af:
bd:61:50:b0:7f:3c:6d:cc:df:e8:52:93:14:63:fa:76:7c:b4:
27:d8:0f:9b:a8:1e:ac:92:ff:0f:3f:cd:9e:d2:76:ac:82:4c:
e1:62:58:cd:6c:9b:e5:cd:02:19:8e:4b:d6:ec:5c:39:8c:ea:
cc:1b:26:59:cd:ae:b3:d2:47:dc:75:97:1e:2d:a3:11:52:99:
67:93:fb:25:f9:e1:8a:57:81:f3:59:5c:95:ce:50:00:fd:34:
4d:f4:3d:9b:ff:0b:f7:6d:2b:eb:e4:4f:43:6d:ad:ca:c3:a8:
2f:9c:00:4c:b9:b3:a7:96:2c:7c:78:a2:16:5b:24:78:b4:c3:
ea:c1:49:0e:f7:e4:c8:51:f6:88:b6:a3:e8:a9:aa:5b:de:3b:
55:ea:c0:8f:b3:34:27:13:d9:a1:9d:e3:86:d1:b9:ae:cb:3d:
19:77:73:e7:7d:ae:94:6b:89:bf:c5:d4:63:55:b8:f9:90:bf:
61:fd:f3:ca:7b:c1:5b:f9:dc:ee:30:58:45:c5:3f:6e:cc:f2:
f6:d0:fb:7f:4b:1c:73:7d:2a:0c:e8:1b:5c:31:9c:28:7b:dc:
98:5e:16:da:1f:93:7d:b5:39:ad:71:b4:38:e4:b1:a8:1d:4e:
10:89:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:54:41 2025 by rpki-client