Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F53A002B2C11F0B7EDD4D2DAE4EC9C.roa
File: A9F53A002B2C11F0B7EDD4D2DAE4EC9C.roa (raw, json)
Hash identifier: XlwrXesLVlqUwNDckM/WTMNM2casl2r3PKRat37oDd0=
Subject key identifier: ED:07:04:34:99:29:EF:D7:AA:20:52:F1:20:61:20:24:2B:7E:6F:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F59
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F53A002B2C11F0B7EDD4D2DAE4EC9C.roa
Signing time: Wed 07 May 2025 10:18:48 +0000
ROA not before: Wed 07 May 2025 10:18:44 +0000
ROA not after: Mon 16 Jun 2025 10:18:44 +0000
asID: 57043
IP address blocks: 154.193.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98137 (0x17f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 10:18:44 2025 GMT
Not After : Jun 16 10:18:44 2025 GMT
Subject: CN=681b3388-fe9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:93:db:27:5f:87:33:39:81:23:29:83:1b:
80:56:f8:4f:84:dd:4a:97:1a:e4:5c:d2:5e:19:e4:
79:47:33:66:1f:1b:0b:c1:98:eb:0c:f0:8b:39:5d:
c1:aa:9a:bb:ed:5d:b5:48:c3:0e:6c:5b:a2:3e:ae:
d9:cb:7b:af:b4:5d:d2:08:9d:3b:21:fd:3c:21:50:
33:f2:ba:53:38:b8:71:82:44:02:0f:4c:f7:8f:d6:
72:82:26:00:67:c7:69:17:c5:4d:19:b1:ac:ac:be:
0c:9e:e0:e8:5d:23:67:dd:cb:31:3b:c9:16:9b:72:
96:89:01:df:b6:b3:b1:8f:0e:a3:e9:9a:18:95:27:
db:8f:9b:ba:25:f5:47:ab:4b:91:1f:18:ea:ca:eb:
5c:47:fc:08:ca:7f:3f:b6:6b:b8:eb:c7:29:9e:ed:
88:e2:fc:07:25:00:91:db:ff:5e:a7:7c:fd:d4:db:
4a:38:d1:73:f7:1c:15:a0:e1:71:72:a7:09:a1:54:
94:e0:a7:79:5b:7b:b2:9f:d6:84:a0:80:97:a6:53:
4a:a4:c1:4c:e3:54:f6:94:ef:f7:61:2a:09:50:2a:
76:6b:27:a7:51:61:78:60:da:7d:94:88:67:a9:4c:
2f:ce:0f:5c:bf:b4:ba:22:e8:d4:16:e2:5d:91:f1:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:07:04:34:99:29:EF:D7:AA:20:52:F1:20:61:20:24:2B:7E:6F:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9F53A002B2C11F0B7EDD4D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.184.0/23
Signature Algorithm: sha256WithRSAEncryption
58:7d:0d:30:83:52:9e:6d:97:4f:ea:fd:fe:09:37:73:a0:6b:
8b:72:4c:1e:93:10:73:23:91:fa:4b:fc:09:09:77:90:0c:e4:
8d:a2:d8:a9:f4:1a:1b:4d:96:7b:59:cc:d2:85:cd:dc:40:40:
4c:1b:19:83:8d:93:4c:37:c5:a2:5c:1e:73:20:6b:29:8f:c3:
b3:d7:98:15:14:53:05:13:f3:fe:71:7f:f7:61:22:f6:f6:f4:
be:8d:d9:91:37:3f:c9:2e:59:63:81:12:ef:d4:ca:b9:b6:31:
b3:f6:57:52:c1:02:cd:60:e6:54:f9:ff:ee:a4:0a:68:fd:c8:
35:75:c3:f1:04:f1:2a:d1:3c:28:0d:1a:32:9b:65:b0:d3:6f:
19:4f:42:60:63:b3:13:c4:16:3f:5e:a4:7d:3f:05:58:98:f7:
d8:d6:f3:57:f2:8b:1c:6e:da:72:c8:c4:57:37:3b:cc:43:00:
a8:2c:67:ed:0a:7b:4d:98:d1:e0:7b:54:cf:74:9c:ac:1c:ff:
b5:80:37:b9:fc:08:c4:c0:a8:36:d1:17:fd:18:d9:55:dd:e8:
80:af:b3:a8:19:41:49:c7:4f:b1:eb:2c:c2:b6:46:f3:63:c6:
2f:c2:55:6e:73:49:a6:a3:29:45:56:d2:32:a4:45:a0:d2:e1:
a1:df:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:15 2025 by rpki-client