Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4582BE02FF811F0856FC0E9DAE4EC9C.roa
File: F4582BE02FF811F0856FC0E9DAE4EC9C.roa (raw, json)
Hash identifier: n5NYm4dbsaFVP8zQugkci40N6cEnMH3KWKr/uokJLbc=
Subject key identifier: E2:5D:EC:27:4C:9F:40:5F:7F:26:A9:D7:14:1F:9C:35:3B:F1:13:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01806E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4582BE02FF811F0856FC0E9DAE4EC9C.roa
Signing time: Tue 13 May 2025 12:51:15 +0000
ROA not before: Tue 13 May 2025 12:51:10 +0000
ROA not after: Thu 19 Jun 2025 12:51:10 +0000
asID: 136501
IP address blocks: 154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98414 (0x1806e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 12:51:10 2025 GMT
Not After : Jun 19 12:51:10 2025 GMT
Subject: CN=68234043-bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:66:44:2c:3f:a3:ec:a4:56:5d:23:5c:29:20:
c3:bc:83:5a:5d:82:75:6a:12:cc:24:6f:67:1f:d1:
31:69:ed:e1:ab:53:cc:d5:29:83:85:e1:a6:11:3c:
dd:f3:7a:9c:e9:0d:ed:c8:ab:e6:ed:a7:e5:af:da:
a5:f4:a2:1b:15:75:ed:cf:02:8d:f6:96:fe:29:62:
52:6d:16:98:f8:43:5b:28:45:5e:83:af:98:26:5d:
4d:10:88:ab:de:8b:29:43:ac:23:c2:dd:1c:42:d2:
40:5b:28:ab:9b:c1:66:91:f2:c5:87:97:db:d4:b2:
ca:d0:f4:de:51:8f:98:99:8d:dc:d0:1b:33:24:f3:
a0:6b:11:b2:94:a8:80:33:d3:ac:ff:63:8f:e4:fc:
c1:5a:93:43:13:31:0f:cb:89:f5:a3:9e:8a:d6:ce:
a5:4d:b4:2a:b4:0c:f4:e6:a3:86:7c:0a:c2:d5:d7:
0b:83:b2:ea:e8:11:79:09:09:bd:6e:ee:27:ba:4f:
24:03:65:57:eb:fd:5a:63:46:e3:1b:86:0d:0e:64:
85:55:28:1d:36:f9:e5:83:ad:56:b0:aa:50:65:db:
8f:a1:1c:06:cd:00:92:3c:b1:b1:86:55:e5:c9:f0:
d2:4d:e8:53:40:91:49:c4:6c:7e:b8:64:42:f7:11:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5D:EC:27:4C:9F:40:5F:7F:26:A9:D7:14:1F:9C:35:3B:F1:13:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4582BE02FF811F0856FC0E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.206.0/24
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
90:47:96:1a:ae:d6:f1:36:fb:1c:84:c2:d2:ee:b2:77:21:47:
3c:a1:98:69:5e:ff:44:6a:d3:9e:ea:a6:de:7a:3d:b7:55:4e:
a3:4e:ce:63:d7:e1:71:ad:94:23:dd:c9:63:69:90:44:32:f5:
5a:d0:cc:23:00:ad:de:13:98:fa:52:e3:d1:1a:47:7f:1e:97:
b6:2f:25:35:6d:b9:6e:65:32:a7:e5:3a:56:a4:82:5a:50:f2:
1e:d2:8a:64:9f:b0:d9:18:7e:d3:97:5a:b8:e4:62:09:98:b4:
10:6b:81:f2:05:c3:0d:03:34:cf:75:4c:5f:8d:58:18:47:b9:
a5:f9:44:f1:b1:a4:0a:7e:ca:70:45:70:75:13:54:db:6e:7d:
7b:8b:bf:c5:b6:b7:37:f3:69:79:74:9a:15:4f:e9:b6:15:08:
20:b2:59:d3:4b:e0:e3:f6:86:c9:a4:db:5d:fc:2a:4e:6d:0e:
00:dc:8c:60:85:fb:c7:18:01:1a:cc:d4:2d:03:d8:b2:b1:5d:
b4:1b:96:57:34:74:4a:28:4f:6e:7a:7f:d8:97:77:39:6e:bc:
96:40:e8:a7:86:c6:c2:ad:8d:6a:53:46:8d:14:d9:13:6c:e8:
e5:06:42:ed:e4:5e:fc:69:58:79:41:17:63:2b:73:74:ee:a1:
db:d1:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:08 2025 by rpki-client