Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE362D78266911F0B3C7E27BDAE4EC9C.roa
File: DE362D78266911F0B3C7E27BDAE4EC9C.roa (raw, json)
Hash identifier: 9V22ew9N3bVDfGl/oS9/Rd1SoJ+LTLV9S2COdzgsyC4=
Subject key identifier: 04:59:B3:B4:23:90:CE:E9:B8:0F:39:63:26:7D:39:92:E1:7C:3B:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE362D78266911F0B3C7E27BDAE4EC9C.roa
Signing time: Thu 01 May 2025 08:54:20 +0000
ROA not before: Thu 01 May 2025 08:54:14 +0000
ROA not after: Tue 27 May 2025 08:54:14 +0000
asID: 57043
IP address blocks: 154.83.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97758 (0x17dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 08:54:14 2025 GMT
Not After : May 27 08:54:14 2025 GMT
Subject: CN=681336bb-81bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8e:f2:26:9b:08:5b:d3:4b:cf:a2:0b:cb:6b:
84:f8:3c:11:68:98:77:27:3b:a7:68:ae:9e:a7:cb:
d9:d3:5e:d2:37:0b:7a:f8:46:e7:66:29:96:1e:26:
04:1b:46:5f:d6:70:6e:da:de:43:93:fa:28:7c:f0:
74:9d:25:86:1d:ff:b0:0a:7a:f9:e9:09:63:f7:a3:
1c:6e:e8:48:8c:65:c0:a2:b3:b6:b6:bd:7f:b5:63:
eb:48:bb:db:71:60:87:1a:ad:f0:65:ad:d4:f0:ee:
1d:7e:64:9f:5f:c4:08:f6:b3:fb:3d:4b:71:a2:fb:
81:37:95:6c:1f:dd:15:6f:26:88:6f:a4:94:60:64:
b9:dd:b9:ce:5a:38:1c:58:ea:7c:31:fb:4c:3a:dc:
dd:44:93:05:19:45:fc:75:3b:b6:5b:09:c1:f2:c2:
89:d7:f8:c6:fe:08:dc:b4:39:c2:04:17:51:c3:61:
e6:c5:ae:57:30:a4:a1:31:ba:76:03:c3:58:35:3a:
41:9e:90:86:27:fa:8c:2a:dd:4b:7e:8d:8b:e4:c6:
48:41:83:3a:23:e8:23:9a:fb:40:39:e9:1f:e6:4d:
b7:34:89:ca:fc:9c:84:94:85:21:eb:28:56:8c:7a:
f9:e7:45:4c:84:72:79:92:e9:57:42:5b:52:32:20:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:B3:B4:23:90:CE:E9:B8:0F:39:63:26:7D:39:92:E1:7C:3B:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE362D78266911F0B3C7E27BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:a3:2a:b9:ce:d3:52:2a:5d:11:62:8d:88:aa:80:62:d1:7f:
b3:8d:19:35:6e:c8:66:00:00:82:37:66:4a:6a:92:1a:f6:ca:
92:3a:8a:03:93:64:c0:1a:ae:0d:98:1d:ff:f5:5b:5f:bd:73:
0e:3e:f1:5f:bc:c7:7d:2b:b6:e8:f1:f4:7e:19:49:e1:53:91:
34:59:2d:30:ba:33:50:9d:83:66:31:d7:19:33:79:57:be:4e:
96:76:4d:16:c0:53:5e:78:b4:9f:40:42:5b:5c:cf:27:ef:cd:
50:f9:6d:b4:8f:bd:df:a1:6e:ce:38:ef:7c:9d:6e:32:77:9c:
ce:90:0f:f9:d3:fe:28:fe:8c:19:ad:22:1d:d5:a9:f0:75:ac:
04:e4:c1:a4:11:dd:14:65:2d:ae:52:5d:a0:d9:1a:23:e6:7f:
f2:38:d9:30:4e:85:ce:d1:26:6e:2f:06:d6:92:47:04:5b:fc:
8c:7c:5d:94:59:65:c1:74:b2:03:31:a6:62:71:aa:ec:93:d3:
ba:94:dd:9d:4e:c1:5f:f0:c2:63:2b:24:5b:4b:8f:ba:e1:c1:
49:20:fe:41:76:29:eb:89:0e:7b:77:78:b4:08:97:d2:74:82:
d8:2b:d1:45:a9:ab:b3:6c:32:62:4d:dc:93:e2:1c:a9:1c:16:
ac:71:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:35:33 2025 by rpki-client