Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0DE5914243211F0994A4B9DDAE4EC9C.roa
File: C0DE5914243211F0994A4B9DDAE4EC9C.roa (raw, json)
Hash identifier: eeDqHB7dZk8JTRDqe2i4Odkj8uiD9XZHBsp36DYrkj0=
Subject key identifier: 76:1E:CC:78:5C:EB:6F:04:DA:A5:1B:EF:26:38:BD:BC:ED:25:B0:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0DE5914243211F0994A4B9DDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:14:45 +0000
ROA not before: Mon 28 Apr 2025 13:14:41 +0000
ROA not after: Thu 23 Mar 2028 13:14:41 +0000
asID: 17561
IP address blocks: 154.205.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97243 (0x17bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:14:41 2025 GMT
Not After : Mar 23 13:14:41 2028 GMT
Subject: CN=680f7f45-0bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:21:2a:2f:5d:28:15:8e:de:5d:e8:30:b4:
97:29:df:d8:f7:fd:da:5d:c1:48:b5:62:7b:c8:1d:
0d:2a:7b:ee:cb:a0:2a:ef:b8:98:d2:d3:20:78:98:
e1:f2:e6:25:83:4c:25:ec:86:48:9c:5c:5b:8d:6a:
8e:fc:df:ab:8c:18:eb:67:c6:32:3e:16:71:32:86:
ee:e4:8b:ad:89:53:de:f7:9e:ec:f7:cf:f0:95:cb:
6a:e0:1a:dc:e9:72:c0:08:90:2c:d4:66:26:ae:ba:
04:6a:cf:57:47:07:9c:bb:0d:ba:26:0d:9a:ce:e0:
f4:39:7e:a5:a7:7e:71:79:9e:54:00:37:b8:02:1b:
68:69:1b:31:68:75:75:36:f8:f0:f0:21:96:db:d8:
fe:9a:7a:ad:17:a0:30:23:b0:5f:af:b0:29:42:b7:
63:66:a6:0f:ee:5e:9a:93:f8:fa:95:e4:7b:ad:b8:
59:7d:06:fe:26:88:42:6e:e9:43:7a:37:f9:a1:c6:
7f:4c:a8:d0:ab:78:3c:14:d2:d6:ca:4b:6f:8c:2f:
78:84:67:c2:05:9e:df:1a:fd:dd:3b:8e:80:2c:e2:
fb:fc:63:42:b3:35:8d:1a:46:79:1f:af:15:63:04:
cf:31:ab:df:b2:30:71:55:a2:27:9a:c7:67:c1:40:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:CC:78:5C:EB:6F:04:DA:A5:1B:EF:26:38:BD:BC:ED:25:B0:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0DE5914243211F0994A4B9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.163.0/24
Signature Algorithm: sha256WithRSAEncryption
56:81:ba:d6:b6:57:8f:05:aa:7d:4f:72:55:d1:f3:dc:79:c5:
90:af:e4:da:d4:00:a5:8e:bc:c9:56:7e:31:1c:b5:5b:a2:97:
3b:1d:e2:b9:bc:5c:13:60:0a:61:c8:c0:7f:96:62:ea:b8:07:
eb:37:ce:6d:0b:f6:f3:d2:95:48:16:31:8c:53:75:f4:e6:fc:
e3:c1:6b:c4:33:a3:d8:e5:bd:38:2f:a0:47:3d:a5:f1:09:92:
5b:84:bb:55:c8:bd:60:10:4c:a1:df:98:a9:74:7a:cd:bb:bc:
2b:cc:e1:20:84:d9:ad:ca:53:da:00:3c:f3:2e:62:27:a7:cf:
82:63:f7:be:d8:fb:69:db:c6:c7:a0:e3:83:5f:d0:f1:7f:a0:
0e:20:78:ca:b6:17:ea:20:ba:87:64:ba:2a:0a:c8:13:db:8c:
92:24:45:c6:04:87:b1:64:b8:8e:8e:44:13:49:9c:2e:be:24:
81:e6:07:89:a0:9d:d8:ec:d6:55:b8:2e:41:cf:99:db:45:31:
e8:c0:77:8f:f3:15:14:fe:81:76:c4:56:fc:9f:ed:d4:e3:c7:
dd:a1:76:ab:b7:21:9b:e2:84:7e:b2:00:f8:a8:3b:b3:74:19:
0b:17:c1:ab:b4:5d:5d:a9:2f:3c:84:28:7a:b9:df:36:76:3e:
4c:5d:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:26:58 2025 by rpki-client