Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C39F1D1C2AFB11F0847F278EDAE4EC9C.roa
File: C39F1D1C2AFB11F0847F278EDAE4EC9C.roa (raw, json)
Hash identifier: KNU03Gzvuc4fARZ0/+rG7pgTTm1H6SPFlyYg9epxB6U=
Subject key identifier: 0A:CE:41:C2:8C:9C:3B:2F:27:29:16:C7:B8:89:5A:E4:D2:D9:34:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C39F1D1C2AFB11F0847F278EDAE4EC9C.roa
Signing time: Wed 07 May 2025 04:28:46 +0000
ROA not before: Wed 07 May 2025 04:28:41 +0000
ROA not after: Tue 27 May 2025 04:28:41 +0000
asID: 55020
IP address blocks: 154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98096 (0x17f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 04:28:41 2025 GMT
Not After : May 27 04:28:41 2025 GMT
Subject: CN=681ae17e-486c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:a7:f7:30:fb:56:9b:78:92:5c:cb:f3:30:
26:d6:1e:42:e4:60:0d:9a:61:23:c6:7f:61:a0:ba:
a9:80:bf:45:2e:e2:20:1a:56:5a:f3:82:92:cd:50:
ba:a2:57:eb:f2:68:2d:cb:60:23:5b:87:b2:9d:2f:
6c:c8:f1:3b:df:10:1a:28:aa:bf:60:f0:89:14:4e:
4d:a1:87:00:5f:e7:67:d0:31:e4:cd:95:94:02:5d:
31:10:c5:ef:15:86:92:3e:01:39:ba:85:ea:ab:22:
a3:43:87:60:9b:7e:db:75:52:f8:7b:8b:f0:65:34:
fa:8a:04:3a:2d:1a:0a:82:f5:34:0a:d2:db:71:1b:
24:4a:8a:a9:dd:e6:c9:46:95:2a:a5:46:2a:61:cf:
f6:f0:b4:cc:b3:23:5d:f7:92:f3:25:8b:04:c8:03:
3e:01:aa:5e:62:e6:45:02:c9:16:74:e3:b7:98:e0:
49:3e:45:dc:12:eb:37:ed:8f:8d:a4:5c:9d:f0:d3:
5d:27:2e:7a:7a:ad:44:65:5c:f8:11:77:cb:c5:1d:
ba:3c:06:30:86:64:ed:85:b7:90:37:eb:dd:82:93:
82:e1:0b:7f:b7:a2:14:85:13:8a:8c:15:bd:b4:9d:
b8:22:bd:5c:5a:fc:b3:cf:9d:5b:89:e9:2b:ea:d3:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:41:C2:8C:9C:3B:2F:27:29:16:C7:B8:89:5A:E4:D2:D9:34:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C39F1D1C2AFB11F0847F278EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
84:17:4b:cc:78:14:ab:db:b7:51:2e:67:a8:63:6d:bd:bc:ca:
9b:5d:43:33:69:8b:4f:e0:e4:dd:9f:59:ae:5a:f4:35:f1:05:
10:31:2c:c6:bc:89:41:85:d8:31:e6:36:4a:71:3c:ca:49:39:
00:85:40:61:1f:89:8a:f7:b2:0f:48:2f:bf:02:e6:92:4c:22:
f1:90:85:1b:3a:5b:5b:40:f0:e9:db:e5:cc:6c:2f:8a:b3:59:
59:c4:58:08:a9:0f:c0:fc:57:a8:d3:c3:af:e5:07:97:40:bd:
8f:e7:fd:d2:11:2b:16:5e:c4:f7:66:7a:5e:d3:15:d2:a8:9b:
7a:e4:20:84:e0:ed:bd:2f:f5:28:97:dd:ee:55:3c:3a:5c:55:
54:92:ff:85:11:d2:7c:e0:e2:e9:a3:31:83:8c:19:44:14:59:
87:6b:f4:65:ba:4d:95:ea:d4:58:bd:93:21:cf:b7:80:ba:25:
c2:86:78:11:74:73:bc:76:86:f3:bd:07:3f:b8:c4:34:01:1b:
bf:d1:a3:a5:94:c6:9c:c0:89:5d:2d:c3:64:fe:1d:f8:bf:30:
85:17:14:86:b2:de:62:46:21:72:cc:bf:15:3b:a3:d7:95:7e:
99:51:68:e3:cc:0a:75:16:2f:6b:6f:60:f1:ab:4d:d7:3e:4d:
49:43:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:49 2025 by rpki-client