Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0884EC316C11F0BD7306A7DAE4EC9C.roa
File: BA0884EC316C11F0BD7306A7DAE4EC9C.roa (raw, json)
Hash identifier: mOJJgOsJkF1ldJG9Soy8+R55Y2z1fouXkzMy/B3sbZU=
Subject key identifier: 82:1D:76:36:28:2E:46:09:09:12:6B:9F:46:97:31:B9:C0:D7:E7:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0884EC316C11F0BD7306A7DAE4EC9C.roa
Signing time: Thu 15 May 2025 09:12:30 +0000
ROA not before: Thu 15 May 2025 09:12:25 +0000
ROA not after: Tue 24 Jun 2025 09:12:25 +0000
asID: 18013
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98496 (0x180c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 09:12:25 2025 GMT
Not After : Jun 24 09:12:25 2025 GMT
Subject: CN=6825affe-ca08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:65:b9:08:52:93:43:07:ef:38:ed:8d:8e:
af:a9:72:7f:58:76:bb:e2:5b:59:0a:96:fa:9d:0f:
c4:27:1e:be:fc:fe:bd:2f:e8:08:77:56:4a:02:29:
26:ee:d3:ad:cf:eb:80:44:77:ef:7a:a1:d2:5f:ec:
66:7a:f1:a8:33:9e:49:2d:9e:b9:a3:07:e4:5a:06:
ab:59:bc:ca:da:cb:eb:f6:d8:f9:33:92:96:da:c5:
d0:ed:2c:a3:e5:05:af:32:04:a8:f6:cc:66:30:3d:
af:a0:c0:f2:8f:c4:6c:0e:fd:4a:dc:6d:51:d9:ad:
19:82:e7:6c:1f:71:b4:08:31:76:57:eb:72:26:37:
72:aa:3f:af:ab:b9:8e:6d:9f:16:a0:44:02:cf:f8:
3a:6f:a3:30:65:36:e8:47:7d:19:b1:70:c2:40:22:
72:4e:2a:6b:1b:18:13:d7:30:a5:b0:a0:60:8b:cd:
bf:81:be:b2:6c:7a:1e:97:b2:7c:ea:e8:82:da:bf:
73:74:54:9d:96:63:fb:8e:6e:68:ca:92:c9:89:7e:
e4:4e:9a:e4:85:3e:1c:49:cd:db:a0:1b:0c:7b:f6:
34:0a:10:c5:a6:12:07:0d:51:1b:17:e7:0a:24:5d:
23:a5:8f:1c:34:5f:f6:97:15:a1:5a:db:02:73:fe:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1D:76:36:28:2E:46:09:09:12:6B:9F:46:97:31:B9:C0:D7:E7:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA0884EC316C11F0BD7306A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f5:8c:f4:90:1e:75:64:06:be:c6:29:f5:53:47:28:bb:a6:
ff:6f:48:2f:f4:b4:a5:2c:5a:e3:0d:ce:96:48:e7:01:74:98:
3c:0e:e7:bf:2b:b6:75:c1:ce:a8:d3:43:f3:89:50:34:ae:b0:
40:77:85:ff:02:d1:97:33:cc:d2:7a:3d:12:18:b4:be:e3:76:
53:bd:09:8a:6d:e6:61:ae:65:e1:35:3d:7c:a5:59:5e:0f:70:
e0:ce:f3:6a:b6:65:c0:a3:aa:f6:38:43:e0:da:c7:af:8c:ac:
c5:4a:9b:87:d4:38:76:91:eb:46:66:af:4a:18:cd:49:7a:31:
ce:7b:bd:d4:73:14:47:e0:b5:22:4b:3b:11:51:40:af:a2:52:
68:4d:94:e0:75:40:b2:e5:2d:f9:82:db:cb:e5:51:57:df:62:
0a:1a:80:2b:40:34:c0:93:3a:ef:66:9a:1c:10:3d:ee:9d:1c:
f1:3f:d3:38:1d:98:51:dc:9a:8a:d8:08:d0:a9:ea:12:7a:3e:
f3:bf:ea:79:89:09:aa:6c:4d:82:8c:8a:e3:b1:8f:86:24:de:
b1:99:84:2f:49:45:39:fe:b3:20:8b:9a:e1:64:00:83:87:3c:
f7:45:6f:1e:fa:fa:5a:1a:3a:22:c2:6a:e3:63:49:8c:15:1f:
97:4c:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:56 2025 by rpki-client