Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDEBFE7A2BF011F098A5E6F3DAE4EC9C.roa
File: CDEBFE7A2BF011F098A5E6F3DAE4EC9C.roa (raw, json)
Hash identifier: +SkNldjewcYL9qfNvTnU2UQW22vzzfGuBVgK0bK3TI0=
Subject key identifier: 6A:2F:54:CB:97:3D:2D:C2:77:8E:74:34:16:45:9A:E4:62:0F:50:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDEBFE7A2BF011F098A5E6F3DAE4EC9C.roa
Signing time: Thu 08 May 2025 09:42:50 +0000
ROA not before: Thu 08 May 2025 09:42:45 +0000
ROA not after: Thu 15 May 2025 09:42:45 +0000
asID: 135097
IP address blocks: 154.204.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98188 (0x17f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 09:42:45 2025 GMT
Not After : May 15 09:42:45 2025 GMT
Subject: CN=681c7c9a-5038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:a3:42:d8:19:44:26:bd:48:86:89:3c:e0:
fa:58:cf:5f:8b:6d:4e:78:b4:e9:09:78:49:bc:26:
68:53:40:cb:2a:00:79:f8:95:38:ad:5b:d3:f9:39:
c6:c5:e1:eb:84:10:46:bb:b2:f3:34:0c:c6:95:d8:
75:31:14:09:8f:a0:7d:47:96:52:58:33:fb:a0:9f:
2f:09:98:ca:3c:29:98:98:a3:fa:ce:b7:88:b1:1d:
2b:e1:3d:9e:9e:27:5b:8e:fa:31:9b:7e:4a:e9:a9:
c8:85:46:6a:80:3a:18:03:59:8a:3b:f8:40:19:3d:
e6:9f:2e:a0:39:27:55:d1:4f:64:79:22:37:34:36:
0f:1b:87:26:9f:e1:8f:da:9c:30:6e:a9:49:ea:9f:
64:d2:3e:2e:f3:df:20:e9:83:fe:13:68:04:02:90:
ce:bd:1d:ff:ee:4a:69:6d:0b:5b:59:fd:8e:cc:a9:
f8:9e:de:86:c2:d2:89:fe:a2:a6:5e:26:7e:3f:0d:
23:e9:60:1f:bb:2f:01:59:96:ed:0c:e0:33:27:44:
ad:bd:a9:c8:eb:b9:66:1e:da:1f:44:77:cd:df:ad:
3f:89:a0:79:b3:49:0c:00:48:ce:b1:34:c8:a2:ef:
bc:33:9a:70:1e:3b:40:e0:aa:be:40:39:ae:f4:aa:
61:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:54:CB:97:3D:2D:C2:77:8E:74:34:16:45:9A:E4:62:0F:50:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDEBFE7A2BF011F098A5E6F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.192.0/18
Signature Algorithm: sha256WithRSAEncryption
61:52:37:7d:f3:94:e0:d8:c5:05:7b:f6:e4:87:e3:fc:9b:c2:
b9:cf:b0:cb:e8:ba:ac:2d:00:1a:07:b2:9a:5b:32:15:e2:6e:
04:2b:f8:51:7d:0c:42:33:2b:b4:ea:0f:21:ee:43:18:9e:5e:
cd:b5:2d:cf:d3:54:18:f2:51:d4:01:6c:5c:2e:6a:2c:28:af:
23:36:bc:33:b4:05:19:cd:4f:db:61:d8:ee:81:0d:8c:76:54:
71:36:6f:a9:f3:3a:ad:12:44:ff:7c:6c:89:3b:15:6d:ac:4d:
3b:22:53:f0:2a:ea:b4:22:30:9d:ef:c3:92:47:30:11:3c:96:
3a:e8:bc:c6:c5:eb:5e:6e:18:92:53:5a:0e:07:b8:c3:60:fb:
c5:5a:00:bb:32:9f:e9:11:e3:f7:f3:0b:32:77:0b:15:20:95:
a9:d0:84:34:ce:f7:a5:28:51:77:aa:84:6c:b5:6b:b1:ea:a8:
01:64:a5:de:18:66:61:a1:28:c6:92:98:ad:c3:f1:69:14:c4:
df:01:9d:b1:6a:d4:c4:21:f9:e6:3e:04:14:17:f7:aa:64:db:
4a:83:52:b6:f2:dd:c5:b5:9e:5f:d5:c0:1e:97:54:44:ba:1a:
2f:8b:a9:0c:50:b4:a4:1f:2a:8c:7a:90:04:d3:22:fe:e5:d2:
a4:ed:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:26:44 2025 by rpki-client