Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3FAB3A2243611F0AF72A1B9DAE4EC9C.roa
File: F3FAB3A2243611F0AF72A1B9DAE4EC9C.roa (raw, json)
Hash identifier: T+2BuHZHqW9rlGUKJGtZGOogIq/VevCH9gI4J5xWfEg=
Subject key identifier: 88:62:65:5D:6B:E7:24:5C:55:1C:93:1B:86:0A:0E:03:4A:18:FC:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BF5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3FAB3A2243611F0AF72A1B9DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 13:44:49 +0000
ROA not before: Mon 28 Apr 2025 13:44:45 +0000
ROA not after: Sat 25 Mar 2028 13:44:45 +0000
asID: 17561
IP address blocks: 154.198.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97269 (0x17bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 13:44:45 2025 GMT
Not After : Mar 25 13:44:45 2028 GMT
Subject: CN=680f8651-536e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:7e:c2:31:05:9f:6c:32:d6:26:27:15:67:
13:fa:0e:0c:e2:98:be:7c:74:9d:23:63:f4:03:9d:
08:41:c2:0f:dd:f0:75:23:3d:ba:b1:90:8f:5f:b9:
de:ea:cd:60:7d:5a:1c:40:05:48:b5:ac:ed:2d:d5:
7a:b2:f1:64:9d:1d:c8:5f:55:62:05:75:50:02:d3:
c9:1e:79:94:ca:5c:02:6f:2e:34:9d:a6:3d:9a:3c:
c0:ed:8e:f0:ae:cc:9a:fc:26:c2:a5:29:ff:db:7a:
3e:d5:10:87:3d:61:59:50:c7:d1:fc:52:b1:e8:94:
9a:b3:be:54:70:f3:63:c1:7a:7b:ea:14:76:53:7e:
a0:d6:3d:bc:61:7d:0a:e0:19:6f:1d:1b:7d:02:67:
6b:06:82:59:b8:d3:0a:38:25:b7:cc:d0:f7:90:93:
b9:a9:ac:61:92:b8:65:e8:89:77:3b:7f:6c:9a:c9:
e7:ab:91:11:8b:9c:6a:dd:e7:1a:03:4b:6d:6c:8a:
ec:3f:ce:8e:31:f9:0c:a5:9b:55:b3:7b:b1:a9:b4:
e8:b2:6a:ba:1b:11:d9:a0:56:18:0d:2e:cf:15:f9:
dd:ae:56:98:1f:1c:e1:b5:84:7d:c0:1a:9f:42:8c:
0a:2a:d4:ea:83:f9:7f:f3:89:ec:7b:5d:c3:ec:34:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:62:65:5D:6B:E7:24:5C:55:1C:93:1B:86:0A:0E:03:4A:18:FC:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3FAB3A2243611F0AF72A1B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.6.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0d:09:be:7a:42:75:7a:76:25:26:ca:29:9d:0b:7d:be:68:
fd:29:3f:77:e0:43:24:38:be:cb:c9:4f:eb:23:37:4b:0c:9b:
c9:0d:b7:37:b2:e0:61:1f:1b:b7:3f:df:31:9e:4f:fe:f1:88:
0a:d1:61:97:7c:30:48:79:85:fc:e3:ea:ea:d2:bb:3c:ef:99:
d1:2c:6b:41:60:f6:5d:5c:2d:16:53:cd:4b:5d:c6:63:9a:dd:
b9:16:64:73:4e:4c:91:0b:3a:71:0f:fc:3f:66:d0:c5:bf:a7:
53:9a:0a:0e:24:97:09:e6:62:15:0d:c7:2b:69:6b:63:27:6a:
7b:4b:ef:54:69:59:ba:0d:59:c6:05:ec:1e:ba:34:1c:87:09:
da:7e:b0:dc:22:75:17:b6:31:08:97:00:d5:fe:32:bb:0a:d3:
cf:81:1d:65:f4:b7:48:56:41:83:e6:b3:8d:93:8f:6a:5d:48:
09:3c:f4:3c:e3:d5:ff:e9:70:66:35:3f:79:a3:a1:a1:96:21:
c7:9e:fe:53:e4:e0:39:01:05:0e:2a:72:6c:5b:81:f5:4d:f3:
92:15:e2:e7:b7:4c:29:ef:90:d2:a4:12:c3:30:b1:58:0d:40:
fd:e9:e5:60:06:b0:73:af:44:18:f2:7c:56:32:a3:d6:2d:94:
61:72:48:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:31:34 2025 by rpki-client