Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE2D2B4A241F11F09792749FDAE4EC9C.roa
File: BE2D2B4A241F11F09792749FDAE4EC9C.roa (raw, json)
Hash identifier: 7KEs1/ZPmgKUAKcQ2YlBdGn4u5eQM+0UfvVEOt6j3aM=
Subject key identifier: FF:5C:7D:B1:DD:E9:FB:14:0F:31:1E:B6:59:3F:9E:1C:EA:47:7F:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE2D2B4A241F11F09792749FDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 10:58:41 +0000
ROA not before: Mon 28 Apr 2025 10:58:36 +0000
ROA not after: Sat 31 May 2025 10:58:36 +0000
asID: 5068
IP address blocks: 154.92.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97141 (0x17b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 10:58:36 2025 GMT
Not After : May 31 10:58:36 2025 GMT
Subject: CN=680f5f60-c2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:6c:8d:f6:c1:ba:bf:2b:57:b4:a8:16:06:
4f:2c:49:ce:6c:7b:4f:fc:24:96:a8:fe:12:c6:51:
36:2d:f5:c2:0c:aa:b2:bc:5b:cc:d9:21:82:ae:c7:
57:2e:95:3f:4b:7d:2a:df:20:3f:cc:e1:90:df:64:
3f:6a:ad:7b:df:2e:b9:40:13:47:3c:81:c3:25:e6:
d9:96:54:9d:d3:76:12:36:1a:90:03:d8:74:54:13:
20:9c:b2:0f:4d:25:71:b3:2e:ef:47:dd:97:de:49:
ea:99:36:cc:91:32:19:f8:f7:9e:23:68:63:a9:5b:
a6:a7:b1:a0:26:7e:ca:d6:78:04:3e:c0:11:07:f6:
53:58:4e:a6:db:0e:d9:52:fb:ed:58:b2:7c:76:40:
f0:8c:d6:95:69:fe:02:85:75:ec:59:fd:29:48:54:
94:07:b1:95:de:85:98:e5:b3:48:f9:6c:5b:6b:23:
bd:d6:80:28:56:2f:03:d4:2e:22:94:6f:13:72:21:
d1:84:43:c2:17:c7:a1:d9:5c:cd:42:e5:0d:ef:66:
e1:1b:59:28:2c:15:06:4f:64:e2:95:96:f2:d5:22:
20:69:1f:02:77:10:11:c8:fa:ef:51:6a:f3:ee:7d:
28:43:cd:48:74:e2:28:2d:8b:32:3d:98:11:07:84:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:7D:B1:DD:E9:FB:14:0F:31:1E:B6:59:3F:9E:1C:EA:47:7F:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE2D2B4A241F11F09792749FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.128.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:b2:22:e0:30:1f:41:be:bd:54:b6:f8:ae:be:c9:e1:d7:95:
17:8a:eb:4d:2e:45:89:8f:a8:e6:75:c2:ce:27:a5:5e:13:78:
6e:39:ff:b3:9b:5a:31:d9:c0:f1:70:f6:65:6f:0d:84:77:26:
96:bf:aa:39:e8:65:f5:af:1e:fc:3b:14:80:3d:c3:fb:35:b7:
12:d2:7f:50:a0:cf:18:c7:a3:44:20:ab:cf:61:63:b8:1c:32:
d4:c9:43:6a:a1:05:ed:9b:f7:83:1c:40:c0:ba:29:13:d6:c0:
3b:5f:db:9b:ae:83:a7:92:08:8e:f0:54:27:5c:89:1e:74:32:
40:4f:a2:7b:8d:ba:95:fb:c9:9e:eb:76:86:2a:6f:ee:2b:2f:
f8:17:10:e2:5f:66:0b:ad:c6:16:c0:97:aa:28:08:8f:90:04:
f2:13:48:94:1b:ae:f3:61:2a:0f:1f:e6:80:17:fb:01:e0:60:
01:bd:1a:92:18:97:7e:e4:6c:22:4b:5b:ed:51:96:6b:b5:f6:
e4:1b:28:67:42:09:f8:89:5a:90:5d:e9:08:92:82:6c:d7:4c:
cf:a8:a4:1b:a4:41:be:7d:d6:9d:26:8a:69:85:47:5d:df:62:
f6:3d:ce:b9:a8:e8:50:d2:0f:9a:88:56:5c:a0:22:8e:f5:cb:
52:38:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:10 2025 by rpki-client