Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD27C2E02A2D11F088EFBDA8DAE4EC9C.roa
File: CD27C2E02A2D11F088EFBDA8DAE4EC9C.roa (raw, json)
Hash identifier: SH1JyVdH8aFShKu5KfpwFTr+CfCaYBRcNyd7/dUlqiY=
Subject key identifier: A7:05:0C:19:B7:35:D9:47:C8:A0:76:46:38:7E:45:D7:78:87:D7:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD27C2E02A2D11F088EFBDA8DAE4EC9C.roa
Signing time: Tue 06 May 2025 03:54:26 +0000
ROA not before: Tue 06 May 2025 03:54:21 +0000
ROA not after: Fri 06 Jun 2025 03:54:21 +0000
asID: 400619
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98057 (0x17f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 03:54:21 2025 GMT
Not After : Jun 6 03:54:21 2025 GMT
Subject: CN=681987f1-3628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:95:b9:74:0a:c9:76:fc:af:42:43:63:60:
64:1b:12:0f:15:0e:7c:73:ba:29:90:e9:70:7f:46:
73:aa:c2:7b:f9:bb:1c:b3:8e:67:13:ba:b0:1b:15:
4a:f0:85:1d:d5:42:54:d3:fd:55:cb:3a:68:12:97:
e4:44:d2:df:83:5d:97:5d:70:9d:58:a5:f1:d4:88:
fd:04:1f:84:34:a0:b9:c1:34:e2:77:65:de:9b:9e:
08:49:93:09:35:d6:b8:86:e4:bd:5e:51:e4:c8:e7:
17:45:a8:1e:de:4b:78:b8:bf:6a:5d:9b:56:f8:cc:
46:54:81:58:ad:f9:77:ce:ef:e9:58:f4:45:c2:6b:
db:3e:e9:cb:0e:c2:9e:69:c2:e0:0d:4e:e0:b1:a5:
99:75:8f:1a:97:7e:2d:ce:0b:c0:78:f1:38:90:3f:
d6:d1:1d:0e:ec:49:46:1c:74:a9:46:88:9f:e4:07:
18:6f:f3:d7:5e:73:66:b7:e6:33:cc:c7:2c:2e:46:
18:02:3f:4d:bd:26:b6:3d:b5:ac:2f:db:d6:c7:1b:
37:bb:61:36:0f:54:74:51:df:b7:93:1a:af:aa:fd:
d2:de:a5:cc:eb:bb:c0:65:fe:6d:ca:78:60:75:78:
6a:f7:7a:ad:c1:ff:61:70:18:8b:20:80:22:bf:03:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:05:0C:19:B7:35:D9:47:C8:A0:76:46:38:7E:45:D7:78:87:D7:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD27C2E02A2D11F088EFBDA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a1:91:ec:8d:d8:48:96:9e:fe:b0:6c:46:ce:cc:45:82:4c:68:
6a:ee:ff:38:28:05:48:44:50:2a:89:04:79:cb:87:8f:bf:59:
aa:2c:62:7c:e8:02:df:67:d7:90:0f:c6:79:54:8f:7f:95:9d:
60:e1:5a:44:73:62:73:50:03:06:39:aa:b6:09:34:10:a3:f5:
d9:65:53:ba:df:eb:35:1f:31:62:c3:28:4d:9b:7d:56:0a:ed:
f2:3c:9f:6f:be:80:38:0a:2c:8e:6a:da:74:96:06:eb:2c:55:
85:5a:56:fe:d9:30:50:bc:79:a1:25:78:98:1e:06:d5:0d:b0:
ef:97:ea:58:98:18:08:cd:68:18:70:cd:fd:92:4b:fa:e5:58:
b2:64:50:0c:f7:e1:97:47:39:1f:71:7c:36:18:5c:ae:ec:19:
3c:2f:76:be:4a:72:e0:d4:06:06:1d:a3:94:4e:c2:7b:37:85:
31:0b:00:68:1b:b6:e5:ba:91:aa:ab:cc:f3:a1:81:e0:da:53:
a8:92:ef:47:13:0d:fc:51:ab:82:58:73:49:92:55:82:87:17:
6a:b3:a1:67:b7:bc:69:54:93:9f:df:e8:0a:a9:c9:76:e9:4d:
c1:87:85:56:1f:ac:57:2c:ef:b6:04:28:bb:40:5b:e2:04:ef:
e4:f6:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:51:15 2025 by rpki-client