Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1AE8A0E2F2E11F08163BAA1DAE4EC9C.roa
File: E1AE8A0E2F2E11F08163BAA1DAE4EC9C.roa (raw, json)
Hash identifier: 8vBzcHg1H13vch77L7Mxx2AozbdxzZ20nnanUNnHwHc=
Subject key identifier: 4C:48:6E:9F:24:C3:D9:43:BE:35:66:C1:A3:55:87:A2:92:87:A2:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018011
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1AE8A0E2F2E11F08163BAA1DAE4EC9C.roa
Signing time: Mon 12 May 2025 12:44:45 +0000
ROA not before: Mon 12 May 2025 12:44:41 +0000
ROA not after: Tue 17 Jun 2025 12:44:41 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98321 (0x18011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 12 12:44:41 2025 GMT
Not After : Jun 17 12:44:41 2025 GMT
Subject: CN=6821ed3d-4e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0a:e0:c8:aa:f5:26:41:fe:1d:c3:af:94:61:
a1:a9:09:83:6a:3f:55:78:25:2d:a3:0e:d3:84:e3:
2d:b8:f5:05:17:44:e8:84:d1:3f:f7:9e:95:44:b5:
4b:ef:1f:71:bf:ab:d9:97:9d:af:7f:6d:4c:69:30:
9a:9c:d0:f6:be:b0:f3:d4:b5:a5:a9:13:6f:d9:e0:
5b:17:9f:68:5e:18:2c:55:3b:a3:af:80:a8:13:25:
e9:33:a9:11:a9:07:41:c6:89:0c:30:2a:79:f6:cf:
15:a0:66:be:94:b7:66:6a:a3:d0:70:95:ce:d8:00:
92:d2:ab:65:c3:55:48:9f:19:d8:df:b9:2e:e7:20:
cd:e7:67:45:49:be:eb:02:9e:b8:99:7a:ad:ad:00:
f5:76:ff:39:7f:d3:65:a6:17:ad:31:72:af:c2:6f:
f6:5a:de:28:2f:54:21:00:21:98:8d:71:27:bc:73:
44:0c:e7:cb:46:20:1d:a4:44:33:c5:06:5e:c5:82:
b0:99:66:ee:04:b6:47:9b:be:1b:eb:80:46:c1:27:
c3:65:77:22:1e:60:7a:e4:c2:d2:e1:c3:be:f3:7c:
16:6f:6a:1c:8b:f2:33:e7:c3:22:c6:48:39:ee:71:
f4:0e:72:20:10:d9:6a:32:b1:57:64:94:bf:36:d8:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:6E:9F:24:C3:D9:43:BE:35:66:C1:A3:55:87:A2:92:87:A2:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1AE8A0E2F2E11F08163BAA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c3:80:fe:46:27:8c:70:53:fc:4b:0e:68:76:d0:8b:de:4a:
67:27:fd:2e:d5:c7:01:75:2a:2d:7f:d1:ac:52:5d:31:d8:44:
07:97:6a:61:e2:67:61:dc:32:d2:03:91:ae:1c:3c:74:1b:49:
de:5f:b6:18:c9:d0:9b:27:1a:76:bf:92:1e:2d:2d:f0:1a:75:
32:ce:be:42:bf:24:1e:25:86:f4:29:f4:e8:53:5b:7d:62:5f:
5b:00:dd:6b:8c:43:2b:83:dc:92:a1:7e:1e:7b:12:23:47:ec:
81:34:00:5f:d7:13:ec:7b:3a:14:8d:a5:f2:b3:2e:0b:95:e8:
52:a8:b2:ee:4b:61:d8:61:0b:af:a7:a4:d3:1b:29:fd:81:00:
6f:85:ee:c5:7c:f8:e4:e1:b8:b1:08:bc:ea:1f:4a:82:9d:5f:
39:a6:e6:e6:2e:e9:0e:ed:0c:ae:8e:0b:3b:49:d5:e6:fd:11:
40:33:62:41:66:b1:ae:56:9c:44:8a:42:02:22:8d:41:b8:47:
73:4e:1a:d1:52:c9:66:be:89:18:de:f7:a0:ba:53:bd:d2:be:
16:c3:ba:76:be:d5:ef:3f:a1:6c:56:d0:d5:cf:af:6c:56:b5:
2f:23:d9:05:4e:36:00:bb:9a:20:61:ca:68:36:ac:f7:ad:af:
4d:6d:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:19 2025 by rpki-client