Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E703C1B2240D11F0AE3E67AADAE4EC9C.roa
File: E703C1B2240D11F0AE3E67AADAE4EC9C.roa (raw, json)
Hash identifier: DtPAde5goNojbNAO3SsjZ1s9XIWccVH2jveg2SCG0Mg=
Subject key identifier: E3:EA:94:8E:A3:AC:A4:03:74:E1:2B:23:17:A7:F8:64:70:54:D4:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E703C1B2240D11F0AE3E67AADAE4EC9C.roa
Signing time: Mon 28 Apr 2025 08:50:58 +0000
ROA not before: Mon 28 Apr 2025 08:50:53 +0000
ROA not after: Wed 14 May 2025 08:50:53 +0000
asID: 133180
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97102 (0x17b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 08:50:53 2025 GMT
Not After : May 14 08:50:53 2025 GMT
Subject: CN=680f4172-d2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:66:b5:f3:f0:91:9e:d8:09:0f:31:21:03:
ec:d2:ad:14:c7:64:f1:5c:27:6d:74:0e:a2:e9:da:
13:fc:ed:73:61:6a:d8:06:8f:87:46:45:9c:5b:b2:
c5:4c:bf:34:6c:9e:25:e8:1a:cd:6f:c7:fd:81:c9:
cf:87:d7:1e:07:0e:0b:d9:53:d8:a3:a4:c2:1e:e1:
07:93:c7:d9:b2:06:ff:59:b4:09:76:36:ae:f2:92:
9a:cc:33:19:6f:40:aa:b9:07:6a:58:fa:f2:ea:fb:
f1:51:ed:53:89:a8:b9:bd:51:41:84:a1:28:b5:0d:
1e:ce:22:34:54:b3:4a:14:e2:38:c8:c2:42:77:b0:
d3:90:f8:80:c0:ea:08:c2:57:37:a7:76:a5:3b:60:
2b:cf:c3:31:25:24:63:61:c1:99:a3:f7:9c:f9:47:
de:d6:6c:da:85:aa:46:65:c4:7d:48:43:cc:a8:ac:
4f:ed:30:3e:1f:ea:5a:eb:59:b4:b6:9e:2c:82:12:
74:ff:b4:a3:e3:bd:6a:c5:8b:18:dc:3b:14:c0:f2:
d6:c1:28:d0:39:f4:4a:d2:b9:9b:51:44:e6:eb:21:
51:dd:e9:4a:29:57:35:3d:c6:93:a9:46:53:52:67:
c9:80:fa:f4:72:6c:d2:11:f0:99:ef:05:bf:fd:46:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:94:8E:A3:AC:A4:03:74:E1:2B:23:17:A7:F8:64:70:54:D4:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E703C1B2240D11F0AE3E67AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
41:63:6d:82:3e:d5:74:6b:74:50:f7:55:90:81:01:bb:51:dc:
92:b2:65:1e:d1:67:9e:84:29:c3:d1:4b:16:cb:69:e1:08:f0:
e3:05:9c:c9:9d:2e:ab:86:ec:69:51:b1:3e:8a:3d:17:4e:ad:
67:03:dd:ed:fe:01:01:44:6b:25:51:26:e0:78:2c:f8:85:9a:
14:c0:50:1e:44:64:29:54:0c:df:ef:46:23:a9:32:62:8a:fa:
d8:46:04:32:9c:ed:69:1f:d0:74:13:60:f5:c0:b0:f2:d5:c0:
68:5b:fd:78:90:c5:55:6e:a8:47:03:0a:62:e0:72:e3:7a:30:
36:d3:e0:3d:03:82:f7:33:02:11:b0:40:9a:c2:1e:60:fe:10:
84:46:9f:42:af:63:46:34:34:87:1c:85:0b:41:f2:61:25:b7:
3b:de:ac:06:e9:1f:3d:49:f6:6c:5b:e8:3f:c2:f3:a2:77:47:
90:9e:db:46:93:9a:7a:2b:1e:8c:a2:dd:ac:37:d2:b4:4e:61:
6d:59:e0:81:ee:67:6d:33:48:d4:a6:20:4f:07:26:38:a7:da:
8e:4d:f3:60:4b:a9:1b:89:e6:95:cb:72:52:fd:53:fa:4f:3d:
84:3c:93:a2:17:8c:1a:5d:ee:8e:e8:79:8b:19:8a:4f:23:eb:
d2:8e:b3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:31:54 2025 by rpki-client