Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7E07930316F11F08D3181BBDAE4EC9C.roa
File: E7E07930316F11F08D3181BBDAE4EC9C.roa (raw, json)
Hash identifier: dvP/Rkf81bvDzLjDF5PHcNuVzDk18tk+Kb7qP++M56Q=
Subject key identifier: 36:0F:F1:32:22:0E:42:ED:14:D2:00:54:3D:97:28:1F:27:12:A1:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7E07930316F11F08D3181BBDAE4EC9C.roa
Signing time: Thu 15 May 2025 09:35:15 +0000
ROA not before: Thu 15 May 2025 09:35:10 +0000
ROA not after: Tue 24 Jun 2025 09:35:10 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98504 (0x180c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 09:35:10 2025 GMT
Not After : Jun 24 09:35:10 2025 GMT
Subject: CN=6825b553-6c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:9b:52:33:e6:9c:2f:2b:25:f1:5c:0e:53:
1b:3e:e8:82:9d:df:e2:bf:68:bc:d9:f2:67:46:cf:
19:9c:15:8d:74:ca:57:7a:e4:38:5d:e4:f8:bd:c9:
e3:2e:6e:e8:e0:1b:58:4c:3c:04:75:41:5e:14:49:
27:7b:f0:b1:17:c8:b5:81:5f:c6:78:fc:84:30:50:
a5:8c:94:fc:b0:0b:9e:83:5f:19:58:87:37:db:22:
39:3b:5f:52:c2:3f:78:59:be:81:21:78:5e:54:3c:
19:69:10:8b:51:38:85:33:72:9f:a6:a7:61:34:ac:
70:5b:37:d6:6f:92:8b:7e:e2:a0:fe:19:45:06:ad:
59:d6:9c:48:27:56:02:47:f7:7d:db:df:0a:0c:2e:
62:a7:76:5f:d9:e4:bd:4f:2b:36:39:39:29:63:fa:
7f:28:96:ce:41:76:25:37:20:ab:5a:b2:73:63:f4:
df:5a:f3:30:7b:9d:04:ad:e7:47:fd:c1:5b:fc:92:
f8:f6:b3:2d:8f:a2:32:12:9e:c7:40:28:59:64:61:
e5:b6:40:64:95:b6:35:5b:ad:7b:c1:84:6c:4a:5c:
1d:88:60:0b:e7:6e:85:a4:24:43:b4:39:7a:10:6d:
21:85:2f:7a:9e:70:e7:e8:7e:58:6a:5e:1a:3c:48:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0F:F1:32:22:0E:42:ED:14:D2:00:54:3D:97:28:1F:27:12:A1:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7E07930316F11F08D3181BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:88:90:1f:1c:c1:36:91:a9:e7:8c:d4:35:82:e8:bd:cb:f5:
e4:3f:00:ad:a0:3d:c3:a9:85:99:69:6e:9c:b3:ff:f3:13:68:
a9:ab:8e:f3:07:66:34:30:6e:b3:c4:96:59:41:20:8e:d8:19:
5a:4d:d7:a3:d0:bc:be:d2:c1:2c:06:bd:d9:0c:20:d1:e7:53:
7c:7a:c4:1a:5d:bc:d8:6b:e7:0e:26:73:d2:9d:1f:0c:a3:74:
39:9e:20:98:45:91:67:02:14:0c:8d:db:af:8f:b5:9d:d4:51:
bd:af:bd:a4:ef:2c:2c:eb:09:2c:ef:b2:4e:7a:6a:17:03:42:
a4:52:ba:ea:7b:f8:1c:f8:6a:7f:b4:33:45:cf:f8:a3:7c:f8:
52:d6:13:7d:d7:6b:3c:f4:c4:01:ff:29:b4:d1:10:e1:75:f4:
71:2f:dd:8a:59:56:2b:66:88:d8:a3:9d:90:f6:90:63:be:11:
eb:0e:9b:3c:f3:2c:e6:66:f5:02:ce:2d:a0:fc:34:83:8a:c2:
05:36:d9:26:7a:3d:f8:a2:f1:b8:8a:d9:96:89:87:48:9d:6c:
5e:55:8a:21:64:d7:00:cb:9b:8e:08:b2:c5:90:30:ef:2f:ce:
65:48:4b:3f:ed:50:27:57:f3:52:e6:cd:4a:4d:9c:0f:75:53:
10:31:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:45:03 2025 by rpki-client