Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B4D1242A2E11F0B96B39B0DAE4EC9C.roa
File: A6B4D1242A2E11F0B96B39B0DAE4EC9C.roa (raw, json)
Hash identifier: Icyg7Ij3RK3rJ3rZb72Zix6Xcl4rYn9Od85bRL6wtNk=
Subject key identifier: DE:89:E1:21:DF:93:DB:82:EE:C7:A8:A3:8D:3B:EE:59:74:AA:D7:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B4D1242A2E11F0B96B39B0DAE4EC9C.roa
Signing time: Tue 06 May 2025 04:00:31 +0000
ROA not before: Tue 06 May 2025 04:00:26 +0000
ROA not after: Fri 06 Jun 2025 04:00:26 +0000
asID: 55020
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98059 (0x17f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 04:00:26 2025 GMT
Not After : Jun 6 04:00:26 2025 GMT
Subject: CN=6819895e-4d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:39:77:ae:b4:c7:a6:8a:7b:e8:0a:a5:22:
5a:ed:28:c4:09:be:c6:2c:ac:31:38:4c:98:84:a1:
dc:15:fb:de:3a:5c:e4:e9:48:7a:3f:6e:c2:3e:cf:
e4:09:9d:e5:ed:50:62:0a:ce:30:20:11:f1:f2:22:
29:d5:3c:dd:36:a7:f4:c8:79:1b:5e:8d:a4:fb:0c:
c2:00:94:84:35:f9:84:8b:f2:e3:4a:5b:83:1f:03:
4e:25:c8:64:6c:60:f2:42:52:2b:60:f9:00:a5:bb:
0d:87:b0:fa:8f:8a:76:64:d7:a7:3d:02:07:21:a7:
2f:59:3e:99:3d:d6:4d:02:0e:b5:85:f6:38:76:c2:
12:1f:7e:55:31:67:10:42:3b:a2:2c:dc:22:ad:5a:
6c:24:05:e9:f0:22:fa:e4:03:2e:d1:2c:16:e0:a5:
4a:e5:7c:1f:36:49:1f:00:04:eb:91:b6:b4:99:0e:
ed:3c:29:e3:57:9b:03:4b:df:d0:13:f6:f0:46:80:
eb:c1:85:b8:b9:6a:91:9c:77:11:7f:13:d2:5b:95:
05:5a:cb:cc:ae:50:c5:8f:fd:5a:39:30:21:eb:58:
3b:87:93:47:bc:bc:70:b1:87:c8:e9:0a:6d:96:9f:
92:45:0d:5b:10:9f:fd:6d:ba:3c:22:a3:52:fa:9a:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:E1:21:DF:93:DB:82:EE:C7:A8:A3:8D:3B:EE:59:74:AA:D7:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B4D1242A2E11F0B96B39B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:58:d9:9f:cf:9e:af:46:50:1d:57:fe:20:d3:68:c0:01:30:
43:cb:04:eb:10:99:dd:62:9b:8c:b8:a2:8e:ad:7b:a3:44:5f:
6f:80:ce:a7:97:72:27:2a:fe:ab:0a:08:95:9e:dc:d1:e6:96:
75:7c:6b:75:fa:55:62:ae:b7:b3:94:f2:8d:d8:f0:7c:89:80:
a4:37:6b:dd:43:11:ab:e6:0d:df:51:a5:3f:2f:67:16:8c:92:
45:85:14:98:83:69:bd:ce:c9:3e:5e:82:8c:c1:f5:7d:4b:66:
55:c8:f9:f4:24:d2:46:af:65:b4:01:6f:ec:67:0e:fe:e4:94:
41:03:87:4b:27:d4:47:0c:9d:73:01:b3:02:9c:9a:26:28:8f:
e2:27:a8:27:6e:2e:d7:61:73:ff:e6:22:ab:af:63:81:cd:a7:
55:6b:53:74:7c:71:b0:f8:0b:cf:6f:c8:9f:fd:b1:a6:70:4b:
a0:2c:d0:53:cd:ca:06:60:b6:f0:cc:dc:d5:f0:20:14:09:c3:
e5:fb:4b:37:08:b8:41:d3:76:6c:10:94:08:92:b5:43:58:0e:
e2:f0:8b:d5:79:b6:01:94:ba:8f:ff:e4:6b:70:29:cd:49:32:
f4:15:95:02:0e:4f:b9:42:d6:c4:0d:08:f7:bf:d5:10:e1:c0:
15:b2:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:57 2025 by rpki-client