Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E589D36E243311F0BE9F12A6DAE4EC9C.roa
File: E589D36E243311F0BE9F12A6DAE4EC9C.roa (raw, json)
Hash identifier: IeA9gjMOuKmm0PcPHpPnQYvJHEWCPyzro4P1hZDdKFU=
Subject key identifier: B1:EB:69:05:62:C3:A4:7F:B1:1B:7D:7D:65:A7:EB:CA:06:7E:FD:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E589D36E243311F0BE9F12A6DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:22:57 +0000
ROA not before: Mon 28 Apr 2025 13:22:51 +0000
ROA not after: Thu 23 Mar 2028 13:22:51 +0000
asID: 17561
IP address blocks: 154.205.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 13:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97251 (0x17be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:22:51 2025 GMT
Not After : Mar 23 13:22:51 2028 GMT
Subject: CN=680f8130-73a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:e3:3c:4e:8d:44:51:64:fd:11:ce:3c:00:
6c:e1:93:6e:c0:e3:3f:fe:69:df:34:e2:4d:33:c2:
de:d4:03:b5:c6:5a:53:e1:15:be:e4:a4:41:d3:8b:
b1:f1:11:c5:29:9a:ad:5c:bb:79:a8:0d:65:45:37:
6b:11:55:31:dd:d7:e2:cb:85:58:a7:34:33:21:65:
e4:43:b3:4e:e5:78:a2:34:f3:c9:6e:7e:c5:a6:cb:
65:40:e6:ac:e5:5b:08:07:48:77:68:1d:ce:a8:39:
9a:04:8b:68:29:5a:57:0a:83:b1:93:27:04:f1:bd:
3b:57:7b:8c:21:f1:8a:6e:f5:34:54:c0:fd:f9:c4:
68:66:3e:fa:ab:cf:98:93:54:18:d6:14:c2:aa:52:
a4:6b:34:8e:3c:6b:9f:cc:31:72:63:27:f8:88:bf:
8c:9c:e5:fe:cf:9f:64:47:6d:1f:21:43:08:b2:e5:
17:f2:04:8e:33:98:3d:b0:7e:9c:05:0a:e7:91:f7:
ac:d3:25:38:65:54:7e:13:44:3f:e2:79:f6:55:f0:
f1:ae:78:0c:78:cc:9c:05:16:b6:c0:fe:c7:48:85:
89:7d:d6:65:15:ec:cd:6d:3e:dd:0e:42:db:80:cc:
16:7e:09:ff:35:d5:24:3b:14:42:be:fd:c5:c6:4d:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EB:69:05:62:C3:A4:7F:B1:1B:7D:7D:65:A7:EB:CA:06:7E:FD:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E589D36E243311F0BE9F12A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2f:99:ae:c4:f8:b2:43:6f:e0:ec:ba:fb:19:5a:d2:1e:d1:
90:ee:c0:81:a2:78:44:f0:e2:f4:8a:ea:09:94:f4:8d:b5:b2:
a3:e3:97:2e:c6:aa:c9:f2:a0:2f:d1:9b:8c:8f:1e:94:2f:81:
85:80:6d:1d:95:7b:28:62:ad:94:a2:51:fa:10:4b:aa:e9:26:
94:e4:62:7f:3a:3b:96:c7:dd:0e:36:0d:f4:9d:04:4e:00:18:
30:d0:cb:3c:a6:44:ba:2e:50:16:b5:28:61:35:8c:01:c2:fd:
0a:b7:69:85:01:b8:62:c5:eb:d8:b4:7c:e2:f7:05:b5:f8:1b:
dc:5e:7f:9a:0f:00:fe:d9:cb:4f:6b:07:2a:40:bb:cd:a0:ae:
5e:70:87:95:6a:8b:de:f4:20:b6:d0:cb:19:39:9e:80:b8:6f:
6e:3c:02:f0:c9:26:68:e8:63:f0:7f:70:da:9f:d5:36:da:5e:
5a:d4:1b:e8:82:f1:57:cc:22:bd:88:36:f2:a4:73:b2:9d:78:
62:f2:6b:9c:78:85:bc:b6:da:4d:b9:1a:a3:18:02:97:18:fc:
c5:94:5c:ba:85:1c:10:4c:18:e8:04:69:04:fc:cc:29:0c:a7:
5b:3c:c4:9d:43:22:bf:1d:90:33:60:a5:2d:ec:d0:91:19:54:
40:2f:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:40:52 2025 by rpki-client