Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8C3FCCC2F1911F09EB78A95DAE4EC9C.roa
File: D8C3FCCC2F1911F09EB78A95DAE4EC9C.roa (raw, json)
Hash identifier: 8rCpec6x3g2D8KyOLjr99WSZnhtreVjWqPapJngVlpY=
Subject key identifier: C8:92:FA:68:CB:30:9C:52:6B:98:4C:D0:6E:37:55:77:BC:4D:4C:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8C3FCCC2F1911F09EB78A95DAE4EC9C.roa
Signing time: Mon 12 May 2025 10:14:11 +0000
ROA not before: Mon 12 May 2025 10:14:06 +0000
ROA not after: Thu 24 Jul 2025 10:14:06 +0000
asID: 135097
IP address blocks: 154.91.4.0/22 maxlen: 24
154.91.8.0/21 maxlen: 24
154.91.16.0/20 maxlen: 24
154.92.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98259 (0x17fd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 10:14:06 2025 GMT
Not After : Jul 24 10:14:06 2025 GMT
Subject: CN=6821c9f3-7e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:3d:fe:cf:58:0f:b3:5c:d8:da:16:22:f2:
ec:78:dc:bd:05:51:31:a7:ee:14:6e:24:3b:8f:ef:
03:56:5e:6e:3e:c4:8a:e0:0a:e4:79:38:61:88:b7:
4d:48:41:7f:5d:9e:38:9e:e4:09:a1:c0:b7:0f:01:
bd:9f:d2:9f:65:bd:7c:4c:91:6d:0e:2b:81:d0:ba:
21:62:8a:07:3f:e6:dd:74:b7:0c:30:6f:cd:b7:76:
ee:8d:40:bc:c0:a0:83:71:99:f7:fc:d0:7b:63:d3:
23:5b:c3:71:10:05:aa:e9:6c:4f:a0:9d:c7:7d:6d:
c9:04:68:80:68:c0:94:54:a6:c2:38:17:61:81:15:
21:5d:a6:2e:09:2c:cf:67:a0:c5:bc:eb:06:4f:ed:
f0:05:58:97:27:83:a7:14:3f:c5:74:1e:d2:92:a4:
e5:89:43:dc:c8:26:7f:bf:23:e9:ff:90:32:28:dc:
6e:a3:6a:b1:99:3f:60:6f:55:73:07:08:8d:9b:de:
11:b4:8d:79:55:c4:9b:63:9b:a9:ab:cf:8c:5c:b5:
1e:b2:10:27:4b:48:de:19:11:46:91:7b:03:c2:4d:
20:5d:17:33:67:ec:60:bc:a5:70:08:e9:c2:20:9f:
8e:9f:75:f8:5d:d9:dc:e3:79:df:c7:4b:77:86:9f:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:FA:68:CB:30:9C:52:6B:98:4C:D0:6E:37:55:77:BC:4D:4C:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8C3FCCC2F1911F09EB78A95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.4.0-154.91.31.255
154.92.96.0/21
Signature Algorithm: sha256WithRSAEncryption
c8:df:37:55:2e:99:dc:da:bc:21:19:e0:3a:2e:08:ae:94:20:
32:b4:34:99:5a:77:59:0d:70:00:c9:2b:a8:0a:03:b7:db:93:
dc:55:e2:de:57:d2:80:ba:b6:f6:a9:7d:05:a3:62:ef:ec:db:
44:7f:20:4a:fd:55:ce:9c:67:f3:88:6b:c0:fc:51:0d:a3:f1:
80:99:c1:7b:49:cb:dd:bf:8e:fd:be:e4:40:49:a3:57:a4:f0:
1b:64:f8:dd:af:c3:a2:26:7d:20:33:14:d2:d6:39:cb:12:5e:
e9:2a:4f:6e:5e:bd:39:a7:d5:84:34:55:84:55:17:03:6f:ab:
e6:9d:4f:3c:99:8b:b8:f0:c7:14:8a:89:3b:04:31:53:19:f8:
09:16:87:1f:be:80:58:41:25:da:c3:ff:04:7f:87:ba:fa:ae:
ae:e4:21:87:fd:02:41:32:9e:e7:60:f8:a9:79:c3:6d:32:e6:
c5:9b:40:da:ee:62:25:64:2e:00:ba:0a:ef:08:f3:06:8d:42:
c2:73:14:46:f9:4f:0e:61:02:e8:be:d4:38:5b:69:dc:4a:33:
fd:cf:9d:5a:12:c6:d3:bc:b9:3a:c8:b4:ed:2b:a3:35:4d:90:
bd:26:eb:2c:60:e5:b7:ae:b0:29:70:0f:57:ca:62:d1:e5:80:
5f:5f:73:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:43:58 2025 by rpki-client