Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5017B02B3011F0B129E5EDDAE4EC9C.roa
File: DB5017B02B3011F0B129E5EDDAE4EC9C.roa (raw, json)
Hash identifier: CEyuvwz0hX+oGNlJukeegPh9y4G43ajRzzDHdLFBBGQ=
Subject key identifier: 25:E5:46:30:74:4A:7A:2F:FB:CF:75:4A:7A:88:22:11:AD:0B:0A:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5017B02B3011F0B129E5EDDAE4EC9C.roa
Signing time: Wed 07 May 2025 10:48:49 +0000
ROA not before: Wed 07 May 2025 10:48:44 +0000
ROA not after: Mon 16 Jun 2025 10:48:44 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98145 (0x17f61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 10:48:44 2025 GMT
Not After : Jun 16 10:48:44 2025 GMT
Subject: CN=681b3a91-416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:da:e1:58:0a:34:c5:20:c5:94:bb:8a:08:
71:b8:a4:66:4c:ca:d3:bf:32:fa:e1:48:6f:98:56:
b8:cf:a0:6c:51:47:27:10:6f:dd:cc:7e:f8:f3:4a:
51:30:28:b7:15:21:85:d8:73:ec:db:02:b0:cb:c4:
d2:a0:fc:b2:91:aa:b7:e3:c8:67:91:fa:a4:af:a0:
42:c2:24:8e:c9:9b:f3:71:07:a4:f9:3f:b0:00:26:
d8:45:d0:32:fa:74:5a:a6:b1:b2:65:5f:93:0d:f3:
33:c2:a7:be:4c:66:dd:c3:b2:45:e4:aa:2d:48:37:
ac:47:27:66:77:99:ed:a6:e2:63:70:27:e1:41:be:
1f:f3:06:09:19:1a:7d:50:07:21:65:0e:3a:14:25:
09:71:99:3a:cc:f7:52:b4:93:0a:76:8e:c8:d1:eb:
71:05:2b:37:76:08:70:64:a6:80:23:3a:ac:e2:7a:
e5:92:ce:d3:02:8e:26:87:5b:37:c8:1d:fb:14:4f:
9e:a6:16:6f:8f:20:ab:46:dc:7b:4b:cf:81:16:23:
e2:1e:95:6e:10:8d:2a:55:27:73:73:19:fd:0c:63:
df:43:37:53:c5:b7:6d:48:3a:87:67:c1:90:2e:4d:
7d:ee:fc:eb:04:bc:a3:56:5f:7a:b8:d3:14:70:68:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E5:46:30:74:4A:7A:2F:FB:CF:75:4A:7A:88:22:11:AD:0B:0A:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB5017B02B3011F0B129E5EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
00:88:97:5c:bc:08:4d:0d:08:5c:51:e0:48:16:f0:7c:6c:9c:
85:d0:7b:76:ec:ea:5f:f4:61:12:72:e5:5d:f1:1c:07:c3:3f:
b3:c1:83:3a:bc:d7:5e:d3:04:7b:8f:b1:6f:6f:57:f0:d8:d9:
9e:67:88:8e:bc:6e:aa:9e:06:14:7e:1a:54:70:d1:6c:9a:54:
dd:d4:5c:2f:e5:1b:a6:3f:23:14:b5:33:ff:a2:97:b9:fa:93:
a9:9d:fa:32:ec:7b:11:41:df:ec:d9:09:cc:f7:9a:a7:b7:c9:
2b:3c:8c:64:a2:66:0a:69:a3:76:ad:4b:c2:44:04:fd:fb:3c:
83:e1:1e:61:ba:05:e6:a8:60:7c:64:39:19:8d:8b:2c:80:68:
3b:67:70:25:2c:c0:3e:c7:c4:69:dd:a9:02:4c:b9:85:fa:7f:
18:c8:84:d3:0f:dc:93:b4:45:32:91:b5:bd:74:de:3e:10:3e:
22:5f:c1:58:65:db:20:bf:ce:fe:6c:ad:45:41:cb:d5:a1:82:
9f:2b:7a:56:13:98:4d:1a:24:2e:86:11:7f:7b:7c:73:c1:73:
5d:a6:fe:9e:a6:0c:20:7e:22:5f:68:5f:9e:13:5b:29:9d:75:
59:92:89:e6:ab:78:d5:9b:03:34:d5:93:05:21:42:81:a0:e7:
f7:60:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:48:13 2025 by rpki-client