Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C288478828C511F0BB51E0C3DAE4EC9C.roa
File: C288478828C511F0BB51E0C3DAE4EC9C.roa (raw, json)
Hash identifier: gKbKgFpaCkSdWgSTmKlap4gnCawB8dU+g6ri6xqw6Wg=
Subject key identifier: 0B:CD:69:74:23:4A:52:0E:04:F1:C5:5F:6F:9A:14:80:56:E4:46:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C288478828C511F0BB51E0C3DAE4EC9C.roa
Signing time: Sun 04 May 2025 08:57:09 +0000
ROA not before: Sun 04 May 2025 08:57:04 +0000
ROA not after: Wed 11 Jun 2025 08:57:04 +0000
asID: 401615
IP address blocks: 154.82.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 07:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97992 (0x17ec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 08:57:04 2025 GMT
Not After : Jun 11 08:57:04 2025 GMT
Subject: CN=68172be5-020f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:ad:0c:64:06:a6:52:ad:ce:04:4d:d5:46:
d7:e4:a3:47:f7:48:49:c6:73:b1:a1:7b:fc:b1:1d:
fb:6e:69:77:b9:5a:9f:2c:e3:f3:ef:ac:6b:b6:1d:
c5:b7:99:1d:46:8f:16:f2:a1:a8:04:c6:ab:c7:d6:
77:e4:d2:ff:76:fe:73:a1:bb:05:26:4d:9c:88:d2:
75:9c:7e:66:cd:a2:8f:92:d4:9e:c5:5c:87:d5:02:
e8:26:a8:3e:7a:9f:c5:e1:a4:55:d8:c2:13:98:58:
a5:e0:1e:a6:76:19:ba:af:1e:00:71:bd:f3:7d:da:
31:62:b0:ee:c7:44:d6:70:a3:18:8f:21:5f:6a:31:
e5:b8:6a:c1:71:5c:2c:ef:f4:30:e9:73:48:ee:17:
d2:e9:81:40:bc:14:b8:a9:62:ec:0f:64:1d:4a:59:
df:e3:cd:3a:be:a8:71:e1:63:69:2d:ec:57:ff:b2:
2d:ba:fd:b7:06:a7:5e:6d:9b:2c:cf:70:d9:8e:13:
bf:36:48:63:44:c7:f7:ce:0a:c4:84:82:2b:53:d9:
48:fa:90:a4:9e:bd:c2:dc:e5:fe:c2:44:7d:df:36:
71:fa:95:31:3a:5e:22:97:6c:72:15:2c:a1:35:f2:
2b:aa:eb:f8:72:4b:ca:72:9d:52:80:c3:e1:b1:3d:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:69:74:23:4A:52:0E:04:F1:C5:5F:6F:9A:14:80:56:E4:46:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C288478828C511F0BB51E0C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:c8:ba:e0:43:78:11:8b:6d:50:bc:1f:36:a6:5a:01:77:f8:
bb:d0:f1:f3:0e:af:ea:09:00:5b:0f:2f:a8:5c:79:bb:85:bb:
c5:87:ce:40:35:ba:5b:fa:24:5a:d9:b3:e9:56:97:d0:60:be:
9e:47:cc:e0:84:6c:6b:46:80:d4:40:47:d1:ec:94:de:1c:14:
23:8a:b9:30:81:f8:b9:32:8b:c9:11:a6:38:8c:44:81:45:95:
a0:5e:d8:75:70:8e:3b:12:7f:85:e9:95:f3:bb:07:14:2a:f8:
a7:2e:c1:07:1c:c7:c6:16:49:40:85:d2:ad:dc:7a:e0:4a:76:
9d:37:c9:65:bd:6a:1c:97:44:91:b4:54:1b:fb:d1:d7:5f:04:
4c:26:df:4d:f4:60:c3:a9:9b:10:87:bd:d2:00:c7:cd:79:2f:
5f:35:fe:c6:e7:68:58:79:0f:dc:d0:c5:72:45:e7:3c:58:89:
42:3b:b8:60:53:72:7d:46:41:69:ab:bf:cf:db:0b:f8:d1:49:
c3:e4:b2:33:bb:73:e7:8e:7e:db:5e:95:2c:e3:8e:85:e5:11:
97:b2:83:e0:7d:71:33:76:81:ac:98:d0:06:e3:5a:2a:9d:fb:
84:b8:6e:d9:55:d5:66:99:84:f6:c2:5d:bb:f4:fe:75:7b:2c:
04:18:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:15:58 2025 by rpki-client