Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE526462242311F0AADDC5BBDAE4EC9C.roa
File: EE526462242311F0AADDC5BBDAE4EC9C.roa (raw, json)
Hash identifier: HTg1yYdNllOZ8hV8O7ZWAE8inAENC2aw+fBzc/1Gslw=
Subject key identifier: 52:0C:92:81:73:14:50:48:3A:0A:D9:DD:B4:19:D8:A4:D8:6B:76:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE526462242311F0AADDC5BBDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:28:39 +0000
ROA not before: Mon 28 Apr 2025 11:28:35 +0000
ROA not after: Wed 15 Mar 2028 11:28:35 +0000
asID: 17561
IP address blocks: 154.94.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 01:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97157 (0x17b85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 11:28:35 2025 GMT
Not After : Mar 15 11:28:35 2028 GMT
Subject: CN=680f6667-930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:1d:75:80:2f:88:06:04:b4:2d:f3:ab:3f:
ef:89:de:9a:af:38:67:89:53:7e:88:54:8f:ee:62:
77:b2:9f:7e:90:51:c4:22:4d:0c:1b:39:12:1e:a2:
46:76:da:fe:7d:92:7e:5c:ef:bf:0c:84:c7:bf:f6:
2a:52:f0:33:40:78:ac:2d:bf:d7:b7:f8:93:2c:29:
ec:59:21:6c:1a:3d:b3:01:7f:d2:14:1c:a9:b5:75:
9e:1c:02:af:28:2e:69:0c:00:e8:7f:8a:f5:83:9a:
34:cc:35:b2:95:bc:6d:3a:f6:26:f5:c5:c7:da:e7:
b9:71:70:2e:cf:6c:0e:ef:f8:5a:af:f3:4d:da:9a:
52:4d:5e:75:16:62:9e:30:7c:03:6c:7c:72:e9:c1:
58:f8:da:5c:70:f7:05:d0:db:51:9e:81:e1:f7:02:
3d:75:c0:c1:76:a9:46:30:64:65:0f:f9:43:5f:07:
d5:1b:2d:22:c2:fe:76:79:55:bc:5c:4d:46:64:a5:
70:4e:da:e0:c0:67:c4:e3:c8:ee:d6:c7:16:55:c7:
90:c7:ca:11:9f:87:3a:ad:17:25:4e:54:56:54:c3:
91:3a:7a:d6:26:4d:43:22:f7:12:14:8d:66:e6:f8:
1b:02:c2:1b:5f:11:00:7e:74:51:17:e8:3e:5b:eb:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0C:92:81:73:14:50:48:3A:0A:D9:DD:B4:19:D8:A4:D8:6B:76:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE526462242311F0AADDC5BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.29.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cf:d4:7e:ff:69:35:c5:4c:27:56:f8:8d:87:4b:6d:78:a6:
70:a6:76:bb:29:da:7e:f5:2e:30:c5:6c:31:23:ed:a1:8b:73:
fa:58:79:08:7e:e1:a9:7b:d2:a8:e2:15:1d:7a:18:58:56:1d:
74:9f:20:da:75:0c:ef:49:3f:8f:bb:f3:e3:33:e6:8c:c8:17:
15:da:98:3f:cc:a3:36:2a:45:7a:a0:10:a1:a2:33:5a:cf:29:
a0:3b:71:f2:ca:af:5e:c3:d1:ff:d8:d3:ed:f8:0c:62:b5:3f:
7f:76:ac:a8:3c:90:7e:2a:9a:f8:66:3a:37:a0:97:dd:38:0c:
cf:06:b7:f6:c3:6a:f5:bf:8e:5c:69:55:6b:72:66:e3:d4:4d:
9a:f7:c6:d0:1b:0e:05:68:9b:2b:b5:4b:61:17:76:9d:c1:5a:
16:48:88:5f:be:54:0b:72:83:2d:4f:4f:99:88:27:e7:6d:cc:
dd:84:5a:96:4b:d4:22:d5:66:25:ca:c0:6c:52:99:3d:2f:81:
2d:30:67:a3:bd:ff:35:c5:46:2e:0a:34:9f:29:22:63:49:14:
61:79:bc:58:a9:b5:72:23:83:38:41:61:84:0b:96:b4:c8:41:
59:f9:61:f0:a5:3f:2b:06:c4:a7:23:5a:cf:d2:57:6c:dc:73:
2e:39:18:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:09:06 2025 by rpki-client