Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD864496309F11F09C106DCADAE4EC9C.roa
File: CD864496309F11F09C106DCADAE4EC9C.roa (raw, json)
Hash identifier: y1H4Q3U7DuaA9XaDxkUVB9ukeONsGZlpJhVyMgUlg9k=
Subject key identifier: 00:6D:7C:98:BC:33:8F:BF:31:4B:58:20:BE:8D:9E:91:25:E0:2C:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018081
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD864496309F11F09C106DCADAE4EC9C.roa
Signing time: Wed 14 May 2025 08:45:36 +0000
ROA not before: Wed 14 May 2025 08:45:31 +0000
ROA not after: Tue 30 Jun 2026 08:45:31 +0000
asID: 137263
IP address blocks: 154.86.4.0/24 maxlen: 24
154.86.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98433 (0x18081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 08:45:31 2025 GMT
Not After : Jun 30 08:45:31 2026 GMT
Subject: CN=68245830-65f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:84:d2:86:ff:43:84:18:a7:36:63:4b:92:
c1:7f:7e:5c:56:cc:7e:c5:bf:d2:68:d0:81:7d:2a:
91:1c:51:f3:7c:2f:25:67:bd:65:53:15:64:4d:40:
74:f2:c7:b3:85:78:c3:67:f0:d3:1e:b4:db:7d:4a:
4b:4f:34:32:f6:6c:db:c8:74:c2:86:6b:5f:d4:a3:
89:49:2f:47:f8:6c:64:1b:4d:29:b7:da:7f:50:39:
ed:d8:80:42:0c:53:f7:6e:ca:8c:f2:79:cf:20:72:
12:69:34:c0:94:eb:0a:42:6c:63:1a:a6:aa:dd:52:
47:37:79:e6:ed:bf:36:ab:ab:06:77:c6:06:bd:9e:
1c:37:46:59:bf:76:70:f2:e9:58:79:c7:47:f4:08:
38:61:d5:58:d1:8b:7c:82:eb:ae:a3:18:63:c1:43:
cd:bc:3b:03:18:f6:4a:d7:d3:d3:13:b6:72:20:da:
d7:af:4e:08:c8:8d:76:7b:54:bc:68:cc:c2:d1:ec:
4a:b9:4d:17:97:ae:e3:50:03:c2:2c:05:b5:1b:8d:
f6:9b:73:e1:53:b9:bc:17:a0:bc:6f:1f:6f:be:33:
91:52:b8:98:7d:01:3b:80:22:91:26:03:fc:bc:89:
25:5d:40:57:0d:63:66:19:53:40:d4:b5:66:09:31:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:7C:98:BC:33:8F:BF:31:4B:58:20:BE:8D:9E:91:25:E0:2C:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD864496309F11F09C106DCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.4.0/23
Signature Algorithm: sha256WithRSAEncryption
21:4b:ea:c7:74:66:27:b6:0d:c7:d4:73:fb:ee:78:d4:6b:fb:
8c:57:47:5f:d6:8b:19:13:ab:e2:db:2e:f6:dc:e1:96:f8:6e:
cf:01:3c:62:e6:41:fc:e2:d7:ce:9d:ca:d5:3f:fc:95:fb:f4:
41:d4:72:0f:26:8d:0c:47:00:35:54:86:9b:83:51:af:3e:1e:
42:5a:6f:4f:e6:19:04:66:37:3a:57:ea:a6:67:56:64:71:ac:
33:2d:c2:d8:4c:5f:47:36:64:b2:4d:54:c7:f8:aa:8a:65:46:
60:64:13:9c:c1:de:38:2e:85:37:9f:46:88:7b:4f:66:80:08:
7d:68:29:1f:60:8f:76:ed:00:d5:e8:fb:e9:c3:2b:98:91:7c:
8e:61:03:96:c8:b8:e7:2d:76:5d:c1:4a:2e:04:2d:83:22:f4:
ee:99:e2:6e:9a:b6:a6:44:62:67:f9:ed:b0:50:5d:8f:45:e8:
f7:7b:fe:c2:0a:c3:f4:37:f1:7d:2c:d7:ce:fb:ac:84:62:40:
15:ec:70:b8:07:be:c6:16:28:cc:6e:e1:18:c2:a7:e9:1e:0b:
5e:ad:76:10:0e:ce:b6:61:44:b7:84:f4:43:e3:52:f7:ac:66:
c9:f1:f0:f2:9d:df:4d:82:4c:59:b8:a1:20:2f:45:b8:c9:fa:
1c:ee:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:09 2025 by rpki-client