Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08088AA30B611F0BB422CE2DAE4EC9C.roa
File: F08088AA30B611F0BB422CE2DAE4EC9C.roa (raw, json)
Hash identifier: qbGmjtFUqMFGJ93nq32UYpLOUMYD7EWKRyVDlZf9JD0=
Subject key identifier: B3:21:34:53:E4:2A:2C:F6:63:E6:E5:2A:AC:64:18:70:7A:53:C7:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0180A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08088AA30B611F0BB422CE2DAE4EC9C.roa
Signing time: Wed 14 May 2025 11:31:13 +0000
ROA not before: Wed 14 May 2025 11:31:08 +0000
ROA not after: Sat 24 May 2025 11:31:08 +0000
asID: 139880
IP address blocks: 154.194.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98467 (0x180a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 11:31:08 2025 GMT
Not After : May 24 11:31:08 2025 GMT
Subject: CN=68247f01-b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:ac:35:df:f6:9b:c3:dc:29:80:e5:f0:9e:
e0:76:01:16:11:f0:45:66:6b:0e:9b:33:2a:cc:3d:
72:a5:57:13:e9:f4:b8:5e:81:9f:f0:6e:44:8a:20:
3c:10:0f:e3:85:cf:f2:70:4f:99:84:49:37:7e:91:
77:45:53:c5:df:1f:c3:88:d4:8f:f6:32:17:e0:34:
e5:40:12:0d:e7:1b:1a:d3:ff:a0:5b:57:4e:aa:cb:
60:76:4d:eb:d1:18:a1:fe:04:e8:25:5b:7f:83:c5:
05:03:43:c7:5d:57:b3:58:9e:60:ef:92:6b:ff:64:
ce:22:f1:5b:2e:a8:48:ec:31:d8:8b:5f:82:ec:08:
e1:cb:12:ab:d1:17:4e:b3:52:94:45:3a:ed:d3:3b:
4b:39:36:34:14:bf:8a:03:0c:d0:a2:1f:b8:4a:89:
5b:97:5c:c1:c9:33:d5:b6:d6:c4:25:1a:44:0b:b6:
37:37:5a:70:65:40:29:6e:b8:b0:27:d8:28:5f:36:
4a:fb:e8:da:3d:4b:e9:e8:0c:7b:af:60:0d:f7:6a:
89:02:01:e4:0f:45:7a:08:be:65:66:eb:94:96:2c:
9c:21:91:a7:85:bb:b3:02:8d:e5:cb:72:d6:a7:01:
7d:7d:e5:6c:99:6c:d9:75:85:c4:b6:52:bd:58:2e:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:34:53:E4:2A:2C:F6:63:E6:E5:2A:AC:64:18:70:7A:53:C7:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F08088AA30B611F0BB422CE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
154.209.160.0/19
154.214.64.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
89:a6:7f:2e:75:b3:db:b2:9d:f1:f5:65:4b:9a:a8:c3:36:4d:
3b:f8:09:26:31:f1:5e:ae:49:11:7e:1f:81:7a:fe:dc:b8:31:
c4:04:18:51:33:92:26:0f:d8:86:35:89:2c:1f:e7:63:7d:f3:
3e:11:00:d7:ef:d5:9f:02:7f:22:8a:d7:2c:cc:90:1b:71:43:
04:44:6f:97:3d:bb:50:f6:48:a1:c2:34:23:c9:7e:d3:55:cf:
46:57:4e:e3:4d:aa:d0:f3:08:1a:48:2e:d7:de:be:d3:43:7e:
3e:5d:f8:0b:26:0f:61:77:d2:1b:c4:5a:aa:fe:20:81:0e:81:
d3:6b:1d:83:4e:b6:0c:8d:f9:e3:98:d2:0a:da:ce:79:82:dc:
e8:70:f3:5e:2a:dc:96:66:5d:be:fa:c8:54:31:74:17:f5:70:
12:67:d3:df:8e:8d:d9:f9:54:a1:f9:b6:b8:c5:06:8c:6b:c4:
d1:a5:dc:55:02:5d:9e:99:69:3e:64:d5:40:de:78:e2:9f:6c:
e1:22:7f:df:27:33:57:cd:69:c6:80:1a:49:27:b2:5e:30:2b:
2c:c7:c7:07:63:85:ce:db:f0:fa:54:56:80:2b:d7:69:c8:d0:
11:a4:47:09:7b:f7:b0:23:41:90:c7:94:5e:29:6a:9a:36:ef:
8d:57:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:11 2025 by rpki-client