Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6BC420259211F09A45E6DADAE4EC9C.roa
File: BA6BC420259211F09A45E6DADAE4EC9C.roa (raw, json)
Hash identifier: 7xVvXABROXoPiLVFXLyZBRQ75LhNu6AlGAEkR63ug7E=
Subject key identifier: 3C:3B:AD:AA:C6:00:F7:C2:E6:59:99:B5:73:56:08:EF:D5:DB:C1:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017D0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6BC420259211F09A45E6DADAE4EC9C.roa
Signing time: Wed 30 Apr 2025 07:14:18 +0000
ROA not before: Wed 30 Apr 2025 07:14:13 +0000
ROA not after: Wed 04 Jun 2025 07:14:13 +0000
asID: 151419
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97550 (0x17d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 30 07:14:13 2025 GMT
Not After : Jun 4 07:14:13 2025 GMT
Subject: CN=6811cdc9-cc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:67:d8:94:91:d9:f6:76:a9:a3:ed:53:5d:
f7:26:01:ec:58:6e:ce:9f:c9:b3:de:af:6c:c8:d8:
75:48:c9:16:00:d4:7b:53:e1:27:29:74:12:e9:b2:
86:8f:ab:ec:61:a6:77:52:3c:8d:9a:8b:f7:d7:02:
42:97:38:5f:14:72:1e:84:3b:84:de:7f:55:f7:45:
b5:d9:ff:24:6c:83:bd:b5:cd:fe:b7:94:c2:9c:8a:
96:9a:26:d5:e0:3c:66:0c:8a:2b:e1:fe:99:6f:a5:
bd:20:57:85:de:96:57:28:cd:e1:0e:9c:b4:12:3f:
e9:54:20:b0:d1:16:9e:c4:20:17:61:fe:10:f1:3d:
d7:7d:ea:3d:28:f0:a9:f1:66:31:dd:07:64:1d:2d:
9a:c7:ee:a0:c9:70:2e:a3:ee:44:ef:97:82:de:7c:
c6:b9:22:40:13:67:ad:6e:9b:88:fc:31:fe:2a:f8:
46:d8:43:c4:22:8e:01:a3:92:a6:9b:83:9b:95:86:
10:19:74:29:2c:43:4e:4c:49:c1:0a:05:68:81:9b:
48:32:cd:87:4f:0b:d4:41:9e:d6:eb:47:f5:d6:1c:
24:16:ce:7a:b9:dc:60:7b:16:8a:72:96:1a:82:8d:
12:8a:b2:8a:32:75:5b:cc:19:31:ed:f5:ad:08:af:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:AD:AA:C6:00:F7:C2:E6:59:99:B5:73:56:08:EF:D5:DB:C1:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA6BC420259211F09A45E6DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:bf:42:a5:2a:ef:15:c2:3f:c8:1c:03:5d:ca:a3:f4:16:29:
3a:43:4a:8f:dc:4a:7c:c9:3c:d6:71:cd:1e:2c:ef:be:35:eb:
9b:5d:c9:c5:48:fa:46:50:ee:95:d0:9a:6e:c8:e7:a0:c6:f6:
af:27:f0:34:9b:f0:34:15:60:5c:ae:55:9d:eb:9c:8b:15:d5:
ba:77:dc:c6:da:33:fb:75:92:23:1e:40:e5:37:7e:97:68:f5:
11:b4:68:70:d0:82:e6:f5:08:27:94:b1:92:84:9f:8b:78:23:
e5:63:80:31:fc:34:e7:67:4e:7e:3d:54:49:68:c6:7e:58:66:
fd:d1:fb:8d:24:cc:2c:45:91:17:ac:ef:26:73:ed:55:4d:c8:
c8:06:fb:1e:9d:48:34:c0:86:a9:98:79:fe:03:e5:73:e6:23:
7e:40:91:0f:11:ee:59:08:f8:8a:97:7f:17:8b:08:cf:a1:a8:
ee:48:7f:f1:ff:7f:dd:19:31:63:ca:9b:13:d2:ff:0e:21:e7:
55:49:e8:43:d1:45:3a:c3:e4:34:08:f2:c8:51:97:0b:39:8f:
3e:87:f1:f5:80:52:b0:54:d1:cf:8d:f6:f4:b7:ec:bf:0e:f9:
7e:56:40:0c:1f:d3:14:0f:bc:3e:6e:19:5a:f7:ce:94:fa:30:
a8:25:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:24:39 2025 by rpki-client