Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC69E56259611F0931DC9F5DAE4EC9C.roa
File: AFC69E56259611F0931DC9F5DAE4EC9C.roa (raw, json)
Hash identifier: CLCrLQ0GBDqGnSOUo3PmE05KIDVxQ42C1+g0UQUAo1M=
Subject key identifier: 7E:AE:6F:71:B2:F6:A1:7C:F8:E1:87:56:07:EC:09:23:12:FD:25:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC69E56259611F0931DC9F5DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:42:38 +0000
ROA not before: Wed 30 Apr 2025 07:42:33 +0000
ROA not after: Thu 05 Jun 2025 07:42:33 +0000
asID: 20473
IP address blocks: 154.193.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97562 (0x17d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 07:42:33 2025 GMT
Not After : Jun 5 07:42:33 2025 GMT
Subject: CN=6811d46e-00d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:97:c1:55:dc:32:ab:1c:9a:ef:95:49:9b:
ce:16:5e:77:ff:9a:bb:3b:32:77:ec:27:06:11:72:
48:30:58:3c:3f:11:1c:2c:36:16:21:9f:3c:62:ab:
20:59:51:87:d9:ce:43:28:cc:b2:08:87:5d:53:c6:
e0:32:99:bd:08:d1:f5:61:4f:cc:01:2b:f2:70:92:
12:35:40:0e:58:e3:9f:25:90:4b:e7:95:8c:df:22:
e8:d0:d0:d3:b9:d9:1d:50:b5:dc:c8:62:ef:b7:91:
a6:4a:e6:e2:2b:13:41:8e:41:a8:bc:d8:5a:5e:bb:
7e:97:3e:69:ec:c6:b5:61:d7:40:31:6c:37:bc:33:
f1:cf:44:36:a2:ce:2d:87:21:0e:97:57:01:b3:ee:
8f:da:c0:4d:9f:e2:6a:61:cd:24:3b:a1:c6:51:1f:
2b:18:9d:ca:2f:e6:e3:b1:a8:c0:2f:17:13:0e:47:
7c:74:51:e4:db:25:37:83:96:6e:7a:29:3f:9a:fe:
e4:36:2a:7e:c2:74:91:82:95:82:e3:03:45:e1:d9:
47:06:8a:f6:b2:f4:fa:3d:ab:73:d7:3f:c1:13:84:
c8:15:e8:62:a3:a1:78:db:89:d4:ec:0b:1c:20:08:
22:e7:a1:46:9e:06:48:93:91:31:59:b1:44:4f:c8:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:6F:71:B2:F6:A1:7C:F8:E1:87:56:07:EC:09:23:12:FD:25:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFC69E56259611F0931DC9F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.160.0/23
Signature Algorithm: sha256WithRSAEncryption
68:c6:2b:89:af:13:4f:9f:9b:4e:fa:b2:7d:7d:8b:34:0b:47:
94:ea:36:b2:65:d2:0c:3f:f2:ef:48:2b:2a:bf:49:d4:c2:2e:
c8:45:88:c3:e2:38:2c:fe:49:2b:fd:99:6c:b1:b5:a8:f5:79:
2a:31:22:00:06:33:8a:89:3f:a6:e6:ac:e7:63:37:24:b5:9c:
fa:b2:a9:ea:c0:60:6f:c5:13:6f:c4:26:5e:cf:04:47:39:9a:
34:cd:4d:8e:bb:f6:65:38:af:52:1e:3a:f8:5d:9f:67:58:17:
b6:2f:a6:0f:f4:00:e8:c5:e2:bf:eb:58:43:30:49:d4:18:d4:
57:91:4a:10:25:c9:ee:38:56:d5:66:18:0b:a2:4d:0e:c0:3e:
2a:96:43:dd:25:04:5e:b3:cb:12:d4:36:ba:a2:f3:97:6e:7d:
b2:63:77:fd:c4:d7:60:3a:42:d4:32:33:37:02:26:8b:4f:08:
de:2b:91:a5:3d:c2:ce:be:12:28:36:20:0e:32:14:6c:ac:ba:
62:78:09:d0:60:68:c2:8d:82:dc:8d:32:0a:23:85:64:eb:00:
03:7a:e1:02:9f:72:f7:55:f2:9c:78:7c:3b:78:6a:ef:15:b5:
06:0a:b9:26:c7:dd:04:51:a5:c0:f2:7b:d0:f9:df:06:2d:c2:
b6:4d:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:46:59 2025 by rpki-client