Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D452BC2A5A11F089A5D2D9DAE4EC9C.roa
File: D7D452BC2A5A11F089A5D2D9DAE4EC9C.roa (raw, json)
Hash identifier: hXBThjhFuB225/vg2ZWqqzpc/FD4QpSfVmSoEilHIHs=
Subject key identifier: 4C:9A:F8:55:D9:1E:B8:F0:5E:E1:F1:51:85:00:E9:43:9A:20:7A:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D452BC2A5A11F089A5D2D9DAE4EC9C.roa
Signing time: Tue 06 May 2025 09:16:51 +0000
ROA not before: Tue 06 May 2025 09:16:46 +0000
ROA not after: Fri 13 Jun 2025 09:16:46 +0000
asID: 8796
IP address blocks: 154.193.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98079 (0x17f1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 09:16:46 2025 GMT
Not After : Jun 13 09:16:46 2025 GMT
Subject: CN=6819d383-b087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fb:2e:16:52:74:72:6c:6e:2f:74:9c:d0:3b:
c9:af:76:79:24:85:4f:e9:ee:3e:6d:fa:2a:5c:ca:
d1:02:0d:f6:73:19:dc:e6:36:c1:b6:b0:91:af:ec:
4b:c0:77:20:c0:f0:bb:fa:d4:79:b9:59:57:8f:c1:
31:28:8e:d4:5c:af:3e:07:65:cc:a8:d6:27:36:e4:
2d:86:65:cf:ee:29:60:98:c0:6b:ee:ee:2e:18:5a:
17:25:5a:08:f4:2d:c8:a4:2e:52:e8:2b:db:22:b2:
cb:7c:c1:12:38:85:10:1f:6b:e1:c6:1d:4e:8a:55:
dc:66:02:b5:da:02:fb:d4:01:d0:b1:db:ae:da:2c:
2d:1c:4c:3c:d5:ee:5f:fc:4e:7f:6d:70:c1:48:52:
db:fa:02:db:e8:2d:34:29:4d:8d:91:ef:7d:2d:1f:
37:41:05:78:56:40:9d:8a:4a:0a:c5:f4:15:12:d4:
fc:e2:aa:80:a4:82:b8:da:b4:40:09:2a:75:3c:27:
42:20:5b:c5:25:30:38:8e:f6:53:f3:6d:ef:fd:94:
44:73:e8:1b:fb:a6:07:d6:0c:61:86:ff:70:e2:4f:
c7:c4:af:6d:92:f3:a6:ac:29:82:e7:a6:72:e7:62:
54:f3:d0:8e:4f:77:f6:39:f6:3f:ab:b0:67:5b:f6:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:F8:55:D9:1E:B8:F0:5E:E1:F1:51:85:00:E9:43:9A:20:7A:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7D452BC2A5A11F089A5D2D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:15:b9:2f:59:ba:47:7e:d5:2b:3e:58:93:d7:be:4a:4e:9b:
8a:23:37:51:ae:20:ff:ac:85:47:c4:c8:8b:bc:6e:53:24:ec:
8e:af:60:95:e0:31:0e:b2:a7:a8:83:5d:03:67:5d:b9:90:2a:
be:11:80:f0:fa:f4:79:34:dc:2c:d8:05:ac:41:08:71:b0:e9:
00:a8:d9:ee:ac:67:fa:38:a3:fb:c8:70:90:54:6d:8c:28:95:
e2:65:59:22:22:d3:ad:9d:42:58:cc:75:3b:52:6d:2c:01:7f:
c5:77:2e:b1:f0:49:2e:89:0c:9f:0a:42:8b:1c:e4:0b:62:98:
75:95:61:cb:d8:94:6f:46:dc:ca:d2:9f:c3:35:90:29:17:ed:
d7:5c:99:ce:61:d9:11:5d:94:28:bc:dc:9b:40:1f:9f:c4:e2:
87:2f:5e:a1:f5:5c:10:96:ae:ac:76:eb:73:9b:1b:32:80:10:
e4:9f:03:73:4b:7b:e4:ee:11:3a:da:f8:eb:5d:4b:2e:e0:4f:
46:36:2e:fb:56:a5:74:7c:55:82:50:31:e6:b7:c6:af:bc:3e:
72:04:b5:18:1b:07:0a:3e:c2:45:e2:19:37:58:08:45:16:e0:
ff:3e:ac:82:41:32:e5:16:5d:fd:d9:06:2e:8f:8f:99:fb:70:
98:9e:69:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:54:53 2025 by rpki-client