Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E783CFC8243111F08E2E7798DAE4EC9C.roa
File: E783CFC8243111F08E2E7798DAE4EC9C.roa (raw, json)
Hash identifier: 3QZ4/Qg48QohtkR7YX4tsBoBg68R3selC5hbxk1WNB4=
Subject key identifier: A8:4A:F2:5B:E5:2B:25:4C:6A:BF:0F:88:4E:D3:82:24:BE:54:18:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E783CFC8243111F08E2E7798DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:08:41 +0000
ROA not before: Mon 28 Apr 2025 13:08:36 +0000
ROA not after: Thu 23 Mar 2028 13:08:36 +0000
asID: 17561
IP address blocks: 154.205.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97235 (0x17bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:08:36 2025 GMT
Not After : Mar 23 13:08:36 2028 GMT
Subject: CN=680f7dd9-ac57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:f2:e7:e4:1f:94:dc:7b:01:1e:02:7e:ee:
86:ec:a8:e4:26:43:8d:80:3a:fc:12:c6:91:df:3a:
b9:fc:b5:8f:a9:43:6b:0f:45:d7:06:7b:b7:e9:97:
30:60:ce:87:90:3b:e0:7b:e4:b3:8f:50:43:0a:fb:
d5:c0:36:d0:f7:9b:ec:30:97:3b:2f:71:8d:b3:c9:
5a:a0:66:ca:be:81:0c:00:e0:71:a4:85:a1:dd:be:
5e:9b:64:e9:1e:ac:17:e9:aa:c2:44:13:ba:2a:d0:
0d:3c:84:4b:c3:dc:ce:f7:4e:ef:07:65:0c:8d:bf:
92:a2:d6:8d:e3:83:c1:a1:cc:1b:ef:96:2d:b9:db:
4e:85:1d:96:10:47:b6:6e:56:81:49:4c:56:8f:f0:
6a:a6:fd:0f:e0:5d:fd:e2:36:cb:8b:1b:d4:aa:32:
db:45:90:68:4d:ed:57:ef:48:65:f0:c4:21:52:b8:
81:24:d5:7e:4e:b1:13:46:3a:09:54:02:de:6e:2a:
a3:44:78:28:24:22:db:5a:b4:22:cc:b9:33:9e:73:
91:c0:e6:7d:d4:77:75:d4:f3:8f:83:64:40:d4:79:
1b:f2:46:f9:f8:e7:b5:f4:e3:9c:0c:b8:5a:5b:94:
80:03:2c:b4:b0:d8:50:fa:02:6e:2f:d6:19:5e:04:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4A:F2:5B:E5:2B:25:4C:6A:BF:0F:88:4E:D3:82:24:BE:54:18:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E783CFC8243111F08E2E7798DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4c:86:3b:e5:3c:57:30:76:40:75:d9:cf:6d:dd:fc:a2:8c:
89:98:ca:fa:7e:bd:4e:99:c0:54:02:48:a7:eb:f0:59:b0:41:
87:db:80:45:bd:dc:ff:c6:cc:97:c0:4d:5c:2c:8d:6b:5c:44:
a8:e0:7c:0d:10:87:d0:55:be:af:1a:33:ec:32:10:49:b6:69:
d2:aa:89:ca:ab:86:b0:a6:be:4c:7e:e8:09:97:97:42:5f:34:
b2:99:7d:cb:a3:b9:b1:29:58:2e:dd:50:60:da:06:c9:a9:30:
61:2b:15:8a:88:55:03:79:d7:49:eb:63:18:7f:eb:41:9d:54:
5e:68:dc:c1:c4:93:3e:cf:fe:95:28:1f:34:84:b9:06:b1:b6:
63:2a:a6:c1:1b:a2:21:13:36:b3:14:19:58:25:1c:46:d6:67:
c9:b2:21:5c:a9:bd:05:db:81:6d:ea:96:ae:2f:78:91:08:f0:
4e:8d:d7:57:5a:8b:5c:b8:f2:29:8c:33:16:96:19:04:8e:53:
c3:b0:e7:d4:9d:a4:ec:0f:2d:48:49:99:1a:e7:7e:c7:86:32:
14:f6:b8:fe:34:15:ea:4c:c2:87:ff:e1:c6:6c:64:d3:13:5e:
9b:0e:a7:e6:9c:64:40:a1:66:b6:af:32:8b:bd:76:eb:b9:48:
60:81:8e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:11:34 2025 by rpki-client