Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4243584316711F0B36A8C87DAE4EC9C.roa
File: C4243584316711F0B36A8C87DAE4EC9C.roa (raw, json)
Hash identifier: hjC11vvmAH8l+0w5GwqZCw//Z5uUx9Bdp7pm8jyQZNQ=
Subject key identifier: 2D:AC:38:A8:E5:CA:73:9B:58:85:BE:50:DF:7B:9B:AB:50:6E:F0:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4243584316711F0B36A8C87DAE4EC9C.roa
Signing time: Thu 15 May 2025 08:36:59 +0000
ROA not before: Thu 15 May 2025 08:36:54 +0000
ROA not after: Tue 24 Jun 2025 08:36:54 +0000
asID: 40065
IP address blocks: 154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98486 (0x180b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 08:36:54 2025 GMT
Not After : Jun 24 08:36:54 2025 GMT
Subject: CN=6825a7ab-f376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:85:88:35:96:ed:68:0c:08:44:de:9a:fc:
82:11:00:b0:64:56:7d:cb:ee:55:6b:6f:b4:84:66:
2c:36:c6:a5:3c:e2:79:f0:63:e7:d4:24:d0:8f:c7:
8e:04:02:6c:3e:66:66:1a:cd:34:54:e7:8b:82:47:
c2:cc:66:be:52:1b:20:9c:43:37:5b:e6:e2:05:ac:
d2:47:d6:f8:f4:3e:3e:7c:3b:b2:df:d3:d6:74:a6:
9a:ac:be:9d:a8:84:3c:f8:4e:68:ab:44:fb:44:51:
47:f5:bd:2c:65:a7:d7:1e:05:1d:0c:01:79:6a:9f:
a0:6e:44:eb:63:b3:ca:16:e6:c8:b3:c8:c0:3d:49:
cc:33:02:59:2e:cf:ec:a0:92:63:d2:41:82:e6:4c:
57:d4:9f:0e:6c:48:75:aa:69:5f:4c:16:5b:67:a7:
9f:0a:d3:f5:78:e3:67:33:44:83:11:f6:1b:4a:cb:
82:1d:7a:97:a9:b5:b9:3e:1c:8a:76:76:8b:bb:99:
ab:f7:fd:18:79:05:22:0f:eb:92:f3:3b:0c:80:f5:
29:60:de:a3:91:30:b7:c7:d1:10:a3:7e:87:1f:5b:
a7:ae:e6:ed:d2:c7:12:6d:dd:34:72:37:f0:1b:09:
44:4d:86:56:a2:78:cc:b9:38:5e:43:7e:75:f3:ce:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:38:A8:E5:CA:73:9B:58:85:BE:50:DF:7B:9B:AB:50:6E:F0:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4243584316711F0B36A8C87DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:b5:56:41:37:7c:76:eb:95:30:93:ae:75:ef:4d:70:c3:8c:
74:cd:79:e9:19:59:1c:8f:f8:7a:70:a6:78:02:df:06:c3:40:
cc:81:a3:55:80:41:2d:f8:51:e1:6a:a8:3f:44:88:6c:da:8f:
30:5f:9f:d3:7e:4a:8d:b7:44:80:f3:d1:41:86:25:13:77:bb:
78:73:3d:f4:eb:a9:26:54:9d:3b:e3:7e:ed:98:d8:9b:74:ca:
cc:25:e7:75:00:13:ce:3d:ea:3c:c8:69:bd:4c:4e:f0:5c:a7:
78:a1:d4:bb:78:f3:ea:6c:f4:aa:64:32:38:82:6a:75:31:c6:
ca:1b:ba:b9:9f:c5:ec:f5:6b:1a:f6:f2:73:44:50:0b:d9:f5:
5e:71:ba:9d:44:44:16:3b:ec:77:b7:56:a9:da:7d:30:e0:93:
c8:b5:45:a9:65:7a:35:d5:c3:72:72:ce:8f:54:4f:b9:bd:02:
8d:27:da:c0:39:c9:a3:cf:20:12:88:53:0a:78:99:4d:63:5e:
61:07:8a:30:21:05:a2:ec:ac:8c:35:8b:8f:53:43:63:48:a3:
23:6b:a4:f7:2c:28:ab:49:4a:06:bc:c6:23:a6:92:44:9a:7f:
fa:ba:28:9a:53:eb:0e:c3:d7:c3:4b:86:6d:0a:e2:26:27:40:
45:77:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:10 2025 by rpki-client