Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBEB1A1C2A7411F0924F8E84DAE4EC9C.roa
File: BBEB1A1C2A7411F0924F8E84DAE4EC9C.roa (raw, json)
Hash identifier: qd6fjjLhZOPRfULKPpqrAxjTwuJwZpNcMMtk3/dJzMw=
Subject key identifier: 77:AD:CF:45:AA:61:8B:6B:30:C2:F2:43:CD:81:33:57:4D:59:D5:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBEB1A1C2A7411F0924F8E84DAE4EC9C.roa
Signing time: Tue 06 May 2025 12:22:11 +0000
ROA not before: Tue 06 May 2025 12:22:06 +0000
ROA not after: Fri 05 Jun 2026 12:22:06 +0000
asID: 984
IP address blocks: 154.82.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98089 (0x17f29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 12:22:06 2025 GMT
Not After : Jun 5 12:22:06 2026 GMT
Subject: CN=6819fef3-8ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:bc:12:27:c2:02:a7:a2:32:8c:d7:4a:23:
1b:ad:5c:f9:2d:ff:53:9d:0a:e3:73:08:60:d8:bd:
99:06:22:c4:de:42:d0:1c:41:44:bf:85:08:a6:99:
f8:2e:11:25:c5:2d:f7:45:15:c9:2e:8a:6d:9d:b1:
a1:00:dc:86:6f:a2:d8:09:7d:f0:fe:ff:92:9c:f7:
e1:32:5b:69:1a:2b:61:2f:18:8e:64:97:da:d0:80:
f6:71:4e:b8:e2:bb:df:c9:7f:da:32:eb:f6:6e:1e:
b6:29:5c:9f:bc:8f:dc:c1:49:86:47:30:8a:d1:3c:
bb:a0:de:d6:be:95:05:42:c8:99:92:72:04:43:cd:
9f:a0:a6:3a:bf:8f:c3:59:97:b3:bf:55:79:1c:f6:
b1:df:1f:f6:67:4b:4c:99:cc:91:10:76:88:08:ac:
e5:8c:50:5e:b8:d3:50:85:d9:6d:24:67:7d:28:18:
55:37:ff:16:99:10:2a:a1:38:d3:d8:ee:a5:16:9f:
87:16:26:e7:85:4b:38:ed:f4:e0:1e:a3:c5:1c:44:
dc:ea:6c:ad:07:4a:81:01:76:05:72:80:1b:6e:36:
b5:73:ee:65:43:9e:b1:99:74:2f:53:3b:fd:49:63:
33:41:fe:ed:12:83:12:ea:75:53:8f:fb:d2:60:95:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:CF:45:AA:61:8B:6B:30:C2:F2:43:CD:81:33:57:4D:59:D5:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBEB1A1C2A7411F0924F8E84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.132.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9d:2c:96:6d:8c:2a:72:20:d1:b2:a6:34:af:27:76:86:0f:
bd:d2:03:83:fd:ee:0c:0f:47:09:b0:8b:18:dc:5d:a5:fd:47:
4b:9c:3b:18:de:c2:e6:46:19:64:76:c1:4a:e7:69:76:97:db:
6c:dd:49:70:fb:2e:79:99:99:e3:17:45:7c:8c:a5:bf:6b:e6:
13:e7:55:28:0c:8d:c1:b8:23:93:c5:3d:90:a6:b5:81:d2:59:
68:08:e7:48:dd:c3:0a:b6:7e:a1:a6:7f:77:ca:c6:32:2b:d4:
b4:92:e2:ba:04:ca:2f:fb:fa:15:1f:12:ce:d7:94:12:d1:84:
ec:a9:56:47:76:12:cf:74:42:4c:2d:0e:51:33:bf:f9:8b:c9:
41:63:2e:e9:11:9f:c2:32:ea:98:93:50:5d:4f:40:e1:20:62:
6d:e1:0c:b5:30:79:e1:fe:5e:8e:2c:cf:03:06:b6:2b:86:75:
56:84:d4:a5:96:b2:59:76:38:f6:cf:6b:f0:be:d4:95:c4:e5:
d1:04:db:0e:43:a3:ad:09:c9:cd:28:83:d0:c3:a0:1c:95:0c:
82:a4:c7:27:ca:70:27:ec:c2:03:54:77:9d:e9:e1:0d:45:f7:
a2:4c:3b:65:48:c7:15:68:3f:e8:32:5a:b2:d2:51:fb:9b:fe:
8f:df:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:27:14 2025 by rpki-client