Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E00B1FE428CD11F09F085579DAE4EC9C.roa
File: E00B1FE428CD11F09F085579DAE4EC9C.roa (raw, json)
Hash identifier: +o5HrM8hBbrThMJIxMeH7gg65BvLvQrh2rmqliPRKiE=
Subject key identifier: D2:05:46:A5:9A:46:AF:BB:94:F7:74:C8:01:31:D4:C3:3A:C5:74:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017ED0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E00B1FE428CD11F09F085579DAE4EC9C.roa
Signing time: Sun 04 May 2025 09:55:14 +0000
ROA not before: Sun 04 May 2025 09:55:10 +0000
ROA not after: Wed 09 Jul 2025 09:55:10 +0000
asID: 395793
IP address blocks: 154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98000 (0x17ed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 4 09:55:10 2025 GMT
Not After : Jul 9 09:55:10 2025 GMT
Subject: CN=68173982-cad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:65:47:20:73:91:c3:2c:2c:72:2e:c3:af:
92:b8:04:d4:8e:7a:dc:69:12:84:03:be:1b:1c:16:
4e:84:d9:d7:9a:31:2d:2a:6b:84:e9:70:fe:28:40:
34:e0:af:05:00:c8:ba:0e:94:5a:f6:ac:58:cc:89:
8c:b1:b7:c7:f2:27:e3:c6:f0:21:80:98:4c:a4:68:
6c:c9:6b:8c:ce:52:b8:ef:c8:ed:8b:19:6a:3e:13:
e4:00:1c:58:fb:24:cb:04:a2:f3:80:bd:0f:f4:fb:
49:db:33:51:81:a9:fc:45:df:3c:3e:05:8e:1b:22:
19:79:a5:9a:e9:46:3f:c0:72:1f:a6:17:8c:c4:5c:
00:88:df:c9:76:a3:18:64:2f:92:d1:fe:e6:85:c0:
3f:54:08:ae:8f:27:b6:d6:3c:cb:67:b5:e2:53:f6:
5c:6e:6d:5e:e1:d7:43:0a:aa:54:21:78:1b:af:7d:
73:5f:fa:83:da:0f:ff:7c:dc:39:35:cd:e7:43:31:
68:d4:b6:95:85:f4:a2:48:40:91:2e:ba:2d:69:aa:
dc:6e:e3:b9:50:26:c3:f6:85:0a:ee:65:4b:6e:4b:
ba:c3:62:5d:d9:81:22:4d:8c:9e:59:46:37:b8:0c:
d8:c0:5c:d5:45:7b:6e:78:01:81:fa:2d:e1:ae:7a:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:05:46:A5:9A:46:AF:BB:94:F7:74:C8:01:31:D4:C3:3A:C5:74:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E00B1FE428CD11F09F085579DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:a0:35:29:57:f1:f3:89:0f:3a:96:e3:bb:89:8a:f8:e6:b8:
34:b2:25:c1:0d:42:87:0b:89:a6:a2:e0:d1:7d:f0:a3:26:e5:
b6:29:8d:8f:59:c2:28:ea:db:01:4b:7f:d1:71:53:49:06:d8:
06:c7:a8:d3:e3:28:8d:40:ef:07:38:b9:cc:c7:5b:eb:eb:59:
e1:e8:34:b7:0f:fa:b6:88:1e:b3:95:cc:1e:8e:c0:28:90:69:
89:28:20:65:3b:18:d5:11:9b:c4:fa:42:61:7c:43:92:6d:16:
da:21:95:37:ef:70:17:ca:1b:46:5c:2d:b7:27:26:04:8a:64:
00:e0:81:ae:53:e4:81:75:92:f4:41:fe:ec:9a:3d:ed:14:93:
f9:42:b8:2a:b8:cc:5b:88:d3:ae:18:86:93:57:ae:ef:67:ae:
55:26:68:2c:09:eb:f6:a6:ae:e4:cd:a6:c3:04:6e:61:70:3b:
23:6e:71:fd:96:b9:0d:8a:80:b0:ef:30:9f:25:8b:1b:a4:b3:
5f:06:94:c5:53:37:dc:3f:05:6d:97:01:95:f8:fe:a6:78:0b:
bd:e7:19:89:98:e4:08:54:2d:05:b5:c7:a9:12:05:d6:bb:39:
b3:7e:20:b2:a2:1d:3a:94:43:86:7f:62:77:67:79:cb:55:cb:
cb:cc:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:09 2025 by rpki-client