Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B16CB8243E11F0BEF209EEDAE4EC9C.roa
File: E3B16CB8243E11F0BEF209EEDAE4EC9C.roa (raw, json)
Hash identifier: aZH2lbOKNXW4vL9wZQC86VfGz5oscq8kR+sOfRxtSEg=
Subject key identifier: 2A:28:27:59:7D:42:BE:2D:E1:FD:E1:E7:79:63:46:43:6A:9D:53:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B16CB8243E11F0BEF209EEDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:41:38 +0000
ROA not before: Mon 28 Apr 2025 14:41:33 +0000
ROA not after: Mon 27 Mar 2028 14:41:33 +0000
asID: 17561
IP address blocks: 154.95.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97302 (0x17c16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 14:41:33 2025 GMT
Not After : Mar 27 14:41:33 2028 GMT
Subject: CN=680f93a2-c732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:64:3b:73:7a:73:ea:03:ea:97:51:09:5f:
42:e9:bd:7d:4f:68:88:3d:f0:79:7f:7b:b6:a9:3c:
35:c7:9b:f5:40:f8:15:85:e6:a8:9b:f6:4b:15:56:
64:c5:f6:94:28:a3:e0:c7:30:51:b1:ae:91:7c:e5:
50:f5:ab:50:1e:02:e8:f8:48:a5:0f:8d:66:47:13:
00:03:4c:4c:ec:64:c4:e4:f3:76:23:8b:98:ac:ad:
5d:aa:31:8a:60:6f:dc:2e:c4:30:c1:da:22:3a:78:
4f:f9:ce:34:b6:ed:ce:28:da:d3:90:2d:0c:ac:68:
62:75:c0:5e:24:b5:b5:98:44:02:5c:f7:cf:64:e6:
c8:03:4e:c1:c8:15:b0:bb:31:d0:20:55:22:fc:89:
05:04:ef:bb:3e:c1:91:d9:2b:76:4b:7c:e0:b4:73:
3f:29:15:f0:64:2f:74:67:9a:b5:85:39:48:14:9c:
c7:48:34:9a:17:03:10:e4:7b:ba:97:d4:6a:18:bd:
6e:87:ff:00:86:9e:2e:f4:92:3e:83:31:4f:be:57:
ce:c6:e9:85:c9:10:09:e8:9e:9e:f2:1c:ae:5e:9d:
5c:19:76:de:04:ba:4a:c4:11:a8:f0:d3:f9:a3:39:
44:5d:23:71:7d:1d:c6:20:3e:a9:0d:12:f7:94:f1:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:28:27:59:7D:42:BE:2D:E1:FD:E1:E7:79:63:46:43:6A:9D:53:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3B16CB8243E11F0BEF209EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:21:de:78:37:38:b2:0d:95:00:6f:1e:79:ec:54:e5:71:14:
c5:4f:c1:4d:6f:05:48:45:31:47:88:2c:8e:64:ed:8f:ac:fa:
67:e0:4b:6c:4e:17:bd:c7:eb:a4:e3:11:04:6e:d5:69:14:a6:
e5:a6:c4:3e:b5:fc:c1:4e:b9:d7:95:77:8e:55:55:2b:65:fa:
4b:f0:21:3d:d7:a8:e6:9a:30:f9:51:9b:08:04:14:6e:92:34:
22:00:e5:ca:ab:c2:4d:ce:ce:7b:cc:7f:13:b5:3b:c8:85:49:
1c:80:f9:d7:de:b1:8f:5a:79:49:32:24:9e:ef:ad:6f:11:23:
d8:b6:60:24:2f:73:be:39:01:1a:c4:ac:7f:11:e1:f5:01:b0:
bc:67:aa:fd:79:07:81:31:eb:0e:a8:d2:97:c0:fe:9b:70:59:
a0:55:a8:e6:2f:d9:fa:15:a5:88:83:df:4e:e0:61:cf:0d:d3:
45:3a:3b:10:4d:f8:66:21:70:74:7d:2f:aa:4e:51:fa:99:b4:
28:6f:21:db:38:cf:5b:2f:6e:29:d6:d1:30:3c:73:34:df:1e:
f4:de:92:f8:fc:b6:d7:4e:b2:e5:85:3f:4c:7d:2b:51:06:f6:
c8:f0:0d:b9:fc:1a:1e:7b:77:02:40:f1:21:9a:7f:97:60:56:
40:ed:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:00:52 2025 by rpki-client