Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47FB426273811F099E727E0DAE4EC9C.roa
File: A47FB426273811F099E727E0DAE4EC9C.roa (raw, json)
Hash identifier: uO6GbOKQmV2uYEVLHLTqTDGSfuxmuNclUMT7QQmMt10=
Subject key identifier: C8:13:B4:90:E9:2A:BC:47:4A:48:D7:53:DA:CA:D8:BC:3E:CE:66:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017E5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47FB426273811F099E727E0DAE4EC9C.roa
Signing time: Fri 02 May 2025 09:34:28 +0000
ROA not before: Fri 02 May 2025 09:34:23 +0000
ROA not after: Mon 12 May 2025 09:34:23 +0000
asID: 135097
IP address blocks: 154.91.8.0/21 maxlen: 24
154.91.16.0/20 maxlen: 24
154.92.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 09:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97886 (0x17e5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:34:23 2025 GMT
Not After : May 12 09:34:23 2025 GMT
Subject: CN=681491a4-a8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:ee:9c:77:6c:a7:fe:48:ca:b7:b3:ef:06:
0f:3a:43:91:7a:b0:fe:24:5d:ed:9b:93:01:8e:4a:
c6:85:f1:a1:69:8e:f9:39:bc:99:4b:b1:53:c2:55:
f9:57:f1:c5:f8:19:9c:0c:79:8b:cf:4e:79:ca:5c:
16:dd:7d:a8:2d:42:d3:ca:31:86:b9:ea:22:ba:ec:
e2:b0:d1:68:05:e5:ea:0c:ee:46:64:47:df:91:84:
e4:7c:f8:f7:2a:d2:d9:3d:9a:97:af:fa:8d:81:3f:
ae:2b:0e:f4:a5:83:78:ae:6c:81:98:87:e2:0e:d4:
e6:84:b4:fe:07:8b:85:7a:93:5f:f4:67:16:10:75:
16:e8:7d:cb:12:de:5f:c8:f0:ba:54:e3:b9:e4:19:
62:1f:2a:8f:37:1a:2b:3e:05:3a:6b:d0:00:39:a2:
ab:13:7a:e3:41:78:f8:99:fa:cc:72:9c:5b:35:66:
87:30:5c:a9:cf:e1:2e:30:6d:3d:a5:5a:90:4e:f0:
f4:b3:f4:0e:df:1a:85:24:aa:c9:b5:5e:15:07:a6:
bb:38:2b:9c:1a:e1:66:74:61:73:9b:46:56:a5:41:
c4:13:16:e6:a4:bd:b3:6c:e6:be:6e:da:94:f1:f9:
35:aa:de:b7:09:ad:c2:5e:72:3a:c6:75:39:de:48:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:B4:90:E9:2A:BC:47:4A:48:D7:53:DA:CA:D8:BC:3E:CE:66:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A47FB426273811F099E727E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.8.0-154.91.31.255
154.92.96.0/21
Signature Algorithm: sha256WithRSAEncryption
20:e5:5a:a9:fe:50:52:07:20:36:09:c7:74:c5:e8:4d:b9:5b:
36:f4:9a:51:9e:46:73:33:79:d9:3e:67:bd:57:99:63:d8:b4:
49:c2:84:30:e7:b5:3f:f6:3d:98:83:ee:ba:80:13:a2:c3:00:
5a:4b:5d:fa:d2:23:ce:03:14:62:06:2b:7d:df:24:06:e1:bc:
f5:28:cf:28:61:ac:14:da:5a:ef:49:ed:59:f9:04:5c:d3:58:
0c:11:83:9f:7f:42:64:90:b0:9d:ff:38:79:37:fe:48:9b:d3:
e2:32:97:1e:fe:0e:db:29:06:9a:5e:e9:28:45:64:bc:4f:3b:
32:70:57:11:45:0d:d2:19:d2:d1:db:3b:24:e8:4e:4a:6b:13:
75:96:b8:27:7c:45:ac:a8:51:42:fa:67:09:6c:47:9e:63:24:
9a:74:fe:6f:06:43:9b:d8:74:b9:3b:27:ba:d0:6e:2e:b2:eb:
69:d0:47:8b:dd:bc:32:74:3e:7e:ec:1d:9a:4e:87:7e:ce:d8:
d2:ee:43:3b:e8:2d:f5:25:0b:12:e2:3b:72:b7:c0:41:52:1b:
a8:a0:e6:2a:0c:02:6d:bc:ba:13:95:e3:63:e4:f5:ef:63:85:
6e:0e:1f:cf:01:1b:6c:03:31:49:40:46:61:2d:d6:a4:c3:a0:
74:fd:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:49:32 2025 by rpki-client