Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9205F882A5511F091A9D0B7DAE4EC9C.roa
File: A9205F882A5511F091A9D0B7DAE4EC9C.roa (raw, json)
Hash identifier: zZHq5Z4bG4cXl3krhfnwRevBhmR8MQQ976FgOOGhqZ8=
Subject key identifier: C6:DC:FF:AE:20:75:DB:98:79:9F:69:6F:E2:EB:2D:C6:94:35:8B:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9205F882A5511F091A9D0B7DAE4EC9C.roa
Signing time: Tue 06 May 2025 08:39:45 +0000
ROA not before: Tue 06 May 2025 08:39:40 +0000
ROA not after: Fri 13 Jun 2025 08:39:40 +0000
asID: 57043
IP address blocks: 154.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98071 (0x17f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 08:39:40 2025 GMT
Not After : Jun 13 08:39:40 2025 GMT
Subject: CN=6819cad1-98b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:ca:40:10:db:77:40:09:b6:2f:95:f0:5d:
b8:9f:4f:38:14:67:fe:ce:8f:19:a4:94:73:f5:38:
bb:f4:83:b1:78:79:ac:30:cb:73:c3:ee:98:f0:1b:
bb:d1:90:11:96:56:ac:6e:0c:49:39:3c:ed:4e:2a:
43:38:1a:7e:84:4a:59:75:4c:ca:69:cd:60:4c:e3:
7c:5d:88:55:db:8c:7f:6e:2b:62:0e:9c:b1:5e:02:
95:2f:1e:d9:59:6a:bd:b5:ca:ee:1d:22:a6:57:37:
da:ed:67:13:17:27:5b:0d:7f:fd:4a:f5:71:8a:1f:
c3:b0:cf:4c:ee:66:74:2b:d7:35:e5:0a:a4:b9:42:
99:e4:3c:cc:20:c4:e4:80:74:f9:4d:43:b2:c2:15:
95:02:0d:76:cf:79:b0:c7:dd:e6:81:dc:5a:43:3b:
d0:bf:67:b7:af:87:0f:1f:e1:d9:01:b4:c7:d5:de:
7e:61:24:72:57:86:4e:5d:53:84:57:e7:bf:f9:01:
9c:53:ab:1d:8c:41:6c:25:aa:a2:9c:d8:94:c2:69:
86:81:78:e9:a6:25:e8:81:7a:95:d5:97:a8:53:de:
ff:fe:c9:ff:75:39:79:be:a8:37:b2:17:45:e7:d2:
55:91:ab:1d:fc:cb:06:da:24:8c:35:9a:0f:76:b6:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DC:FF:AE:20:75:DB:98:79:9F:69:6F:E2:EB:2D:C6:94:35:8B:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9205F882A5511F091A9D0B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
15:df:08:85:0d:37:29:5a:cb:9c:be:86:62:9f:d6:0e:de:d5:
15:fc:c3:2c:80:ca:e7:1d:98:83:12:05:6d:23:a4:02:74:a4:
56:aa:11:bc:d8:f6:77:0e:c3:d2:0f:a4:ed:11:60:45:86:da:
df:c6:b8:27:ae:3a:12:93:cc:3c:51:ad:0a:9e:ca:6f:fe:88:
10:33:a6:3e:6d:52:a3:d5:ae:31:ca:bb:5e:28:e2:3e:a7:ca:
b1:f0:18:8a:d2:30:68:5a:79:fc:8f:9f:28:82:05:d3:0d:d2:
f5:32:45:26:96:17:56:a9:77:1d:6f:c3:56:07:ff:61:84:0a:
2a:f8:8b:d1:d9:3d:c4:07:90:1c:21:d6:6a:ba:5d:ee:b7:1f:
c3:0e:cb:90:db:93:e2:4d:bc:ed:45:c5:af:b3:a6:82:58:e8:
18:1f:bd:c3:ce:ad:97:40:1e:a9:a3:1f:0f:60:dd:47:0c:1c:
30:a4:b4:d2:eb:d8:52:62:9c:89:12:ac:01:3a:ba:eb:b8:cf:
af:30:e7:4a:60:b4:c9:a1:a0:0b:11:67:9b:a6:b8:6d:ce:6a:
2e:86:a9:b4:1b:15:6c:72:1c:df:97:eb:20:ea:0a:af:44:22:
98:be:0f:b1:30:99:73:49:53:b6:12:14:f0:73:78:65:3e:05:
5f:74:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:54:43 2025 by rpki-client