Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4868D3E30A511F0B47878F1DAE4EC9C.roa
File: A4868D3E30A511F0B47878F1DAE4EC9C.roa (raw, json)
Hash identifier: qbfkShraD5iOdBeaymgkviBbki86q7a8u+FIIW2DcNg=
Subject key identifier: 59:D4:7E:F5:E2:59:3E:07:DE:78:FB:69:F2:4C:B1:F8:5E:DC:A9:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01808F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4868D3E30A511F0B47878F1DAE4EC9C.roa
Signing time: Wed 14 May 2025 09:27:24 +0000
ROA not before: Wed 14 May 2025 09:27:19 +0000
ROA not after: Fri 30 May 2025 09:27:19 +0000
asID: 401075
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98447 (0x1808f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 09:27:19 2025 GMT
Not After : May 30 09:27:19 2025 GMT
Subject: CN=682461fc-3939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:b8:65:38:63:6a:c5:1b:f4:e1:47:ca:19:
5a:31:24:ad:85:97:a4:c2:73:c6:3a:82:6e:ca:c1:
34:25:7f:29:8e:ab:c1:2b:26:70:48:8c:75:49:fe:
1c:e9:a5:0d:2f:8f:6e:ee:ad:55:e7:9b:cb:85:98:
26:b3:e2:41:2e:70:94:4f:a4:eb:66:33:97:43:4a:
88:fa:3b:41:e9:8f:fb:81:bc:1b:7e:dd:c2:1e:27:
60:7c:50:a1:14:94:86:b9:60:32:fd:0d:81:d7:e3:
b2:f9:1c:8b:cc:bf:aa:8b:50:7b:e3:5c:09:e0:9c:
02:d9:4d:74:80:14:0e:1b:e6:fd:dc:2c:bd:a0:09:
ad:16:e0:20:da:77:c9:e3:08:5b:17:89:4c:53:66:
7d:3a:c3:bf:ed:f0:8a:eb:23:91:3b:34:5c:56:63:
3b:64:24:77:dc:ee:c7:93:01:22:31:a5:16:34:a1:
e8:8b:2a:91:51:75:3b:f7:13:d0:b5:57:ad:9f:2d:
2d:ee:d9:76:a3:5b:bc:83:e3:16:9c:e5:4f:94:46:
2a:33:a9:08:34:66:eb:20:95:d7:72:7e:41:df:83:
91:2e:e7:c0:89:6c:22:4f:ee:ee:47:63:ff:cc:07:
21:9a:64:ab:b0:2a:c9:03:db:7f:07:da:1e:f7:a7:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:7E:F5:E2:59:3E:07:DE:78:FB:69:F2:4C:B1:F8:5E:DC:A9:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4868D3E30A511F0B47878F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:95:fb:b2:1e:ff:e9:f0:b1:5e:3d:86:a2:01:4a:f2:83:54:
f7:7a:13:e2:13:e6:fc:6f:46:b0:aa:b7:89:66:58:ef:6e:45:
b1:70:14:a1:da:f9:15:ff:d4:c1:ea:ed:d4:ba:bd:b4:94:06:
f9:1f:ce:07:8f:42:52:c7:37:b5:20:37:1e:f3:5d:ad:f8:92:
4a:c2:57:5d:32:06:d9:81:de:f3:8b:69:f7:fa:db:5e:66:0c:
7b:a0:4a:a4:22:cd:32:f9:79:96:8a:f7:e5:ca:ab:ba:07:24:
4a:37:f4:d0:e7:78:56:95:c8:53:76:19:e6:7a:57:46:db:dd:
48:a1:40:b1:80:74:2e:13:2a:fc:48:da:4e:a9:df:87:67:81:
fc:d3:dc:a2:7a:1b:4a:1a:2c:54:c8:91:bd:52:25:10:55:19:
06:1b:de:46:62:5b:10:4c:eb:a7:70:22:07:dd:8c:cf:31:4b:
49:a5:69:9c:93:7e:13:ab:5a:1d:30:fc:6a:50:3c:07:d0:ec:
00:b1:48:6e:12:7b:a4:01:05:c6:98:dd:47:29:99:13:1a:bb:
8e:2e:55:bd:38:c1:fd:a8:ca:3c:b0:5f:19:2e:80:35:20:6f:
28:b5:06:f3:93:8f:70:14:0b:52:b3:42:da:57:43:a5:b9:5a:
2c:1f:fe:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:46:53 2025 by rpki-client