Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D574286A30A111F081A0D3D7DAE4EC9C.roa
File: D574286A30A111F081A0D3D7DAE4EC9C.roa (raw, json)
Hash identifier: COsuV1Myinwcj27KOdXxtrgHXA8FfSWbwEQGvTnTDL4=
Subject key identifier: 43:6B:39:FF:72:3E:3B:C0:12:57:18:B8:D2:9E:B1:1C:8D:06:5E:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018087
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D574286A30A111F081A0D3D7DAE4EC9C.roa
Signing time: Wed 14 May 2025 09:00:08 +0000
ROA not before: Wed 14 May 2025 09:00:02 +0000
ROA not after: Wed 18 Jun 2025 09:00:02 +0000
asID: 135983
IP address blocks: 154.200.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98439 (0x18087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 09:00:02 2025 GMT
Not After : Jun 18 09:00:02 2025 GMT
Subject: CN=68245b98-7e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:63:c4:77:90:3a:3d:d6:a9:dc:dc:6c:e6:
50:c1:30:07:45:11:24:a1:03:78:ff:62:5c:11:fb:
cc:30:04:06:94:1c:fc:7e:8b:93:3a:a3:f5:71:92:
39:ba:0d:57:2e:d3:b4:a9:1f:21:93:06:4f:96:79:
c0:0c:39:61:64:1a:65:e0:20:ef:b0:6b:bd:57:fc:
7b:72:f7:c6:6e:e9:4e:6b:03:e3:ef:69:12:c9:34:
07:17:c1:de:5c:ab:66:c6:9b:16:4e:8b:55:f4:3d:
db:39:d6:f4:d3:50:29:85:b3:64:e3:86:25:aa:46:
b1:4d:80:61:f9:f4:f0:24:3e:66:45:1d:aa:e0:47:
73:a3:51:f7:43:00:6d:a9:4e:eb:69:f7:a5:68:25:
91:3a:3f:0e:68:bb:d7:d0:d3:a1:4a:31:ff:d6:7d:
3c:70:33:b2:a3:52:5e:7f:61:86:3d:8a:dd:5e:0d:
f1:ae:7c:7f:a0:43:c1:b5:9c:05:3a:2a:39:11:4e:
03:2f:bd:f3:9d:8f:58:7f:7f:df:0d:d2:9a:e8:b9:
40:95:ad:bb:da:b3:d4:08:47:26:c7:84:97:3e:7a:
b9:77:bc:bc:11:be:f5:9f:50:e5:a4:d4:79:dd:14:
75:c8:ec:23:6a:25:31:d7:aa:1f:66:0e:04:ff:c0:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:39:FF:72:3E:3B:C0:12:57:18:B8:D2:9E:B1:1C:8D:06:5E:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D574286A30A111F081A0D3D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.30.0/23
Signature Algorithm: sha256WithRSAEncryption
39:57:d7:38:46:93:d3:28:fd:3b:50:72:d7:0f:7b:41:3d:97:
d6:8b:5b:8d:62:81:d8:e1:89:6d:28:df:4a:23:e2:a6:d9:a9:
0f:47:da:22:11:9e:ea:15:2c:e5:70:c2:c7:7a:37:a1:d9:4b:
ec:f9:b4:ad:f4:ef:78:45:64:2c:4c:0f:70:17:25:a2:f9:f2:
84:51:b7:b1:3d:91:12:aa:ec:0c:94:15:91:2a:5c:cd:f9:84:
21:9d:8a:84:e9:88:a7:fb:2d:ef:e8:1e:20:79:c0:52:4b:9a:
fb:e7:54:6a:01:a7:44:40:d2:d2:1f:b0:28:79:92:6a:af:ae:
3e:8a:28:fc:2a:10:bf:5a:b7:c4:c1:b3:a9:e7:39:a4:f8:47:
c7:ac:34:c0:59:1f:b6:ac:67:c7:b7:3a:54:ef:a5:45:af:02:
34:48:85:47:b5:e7:9b:5a:ef:c8:4b:a6:14:10:9f:11:86:c3:
8f:6c:0b:14:92:7a:8b:62:d0:b7:0c:32:b8:71:f1:45:1a:3d:
56:62:03:60:0f:de:ca:a9:2c:27:78:69:ca:65:8e:1f:af:5b:
1f:8d:18:bf:19:d6:30:e6:51:b3:fa:19:8f:85:56:11:75:0c:
b9:ef:81:c2:7d:6e:c3:47:6f:3c:73:b0:d2:60:26:4f:1d:5d:
49:a2:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:46:00 2025 by rpki-client