Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4C3DFB2298011F0828B1DAADAE4EC9C.roa
File: F4C3DFB2298011F0828B1DAADAE4EC9C.roa (raw, json)
Hash identifier: kaKosYKk8TerOX7YdeUzswN0eZ/3q8ZMWgP/f84cA4Y=
Subject key identifier: AE:EC:74:F4:9F:7B:37:69:59:32:42:DA:39:9E:D5:00:21:38:D8:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4C3DFB2298011F0828B1DAADAE4EC9C.roa
Signing time: Mon 05 May 2025 07:17:09 +0000
ROA not before: Mon 05 May 2025 07:17:04 +0000
ROA not after: Mon 09 Jun 2025 07:17:04 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98015 (0x17edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 07:17:04 2025 GMT
Not After : Jun 9 07:17:04 2025 GMT
Subject: CN=681865f5-b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:46:5e:98:38:cc:f9:bd:2b:b6:15:2b:f8:1b:
96:39:07:3e:4e:a5:f1:64:0b:6e:88:84:fa:16:0b:
b4:4b:b6:7c:42:f3:73:f1:6a:cb:01:9c:c5:ed:d3:
18:e8:f8:61:76:bc:65:cf:e6:f5:06:c6:42:59:11:
35:d8:47:73:37:c2:99:48:a4:16:2c:32:f4:65:6c:
8c:f1:25:99:1b:14:91:07:39:ba:2c:2a:6c:b1:d5:
fd:01:1e:55:9d:e4:dd:c2:5a:24:c1:4b:bb:2d:d4:
13:3a:71:7f:b8:ee:d4:8d:77:dc:85:c5:79:05:42:
23:42:58:5b:b7:b3:73:f5:1f:62:fd:3e:8d:75:8b:
a8:d8:35:3b:42:8c:8e:f2:75:ca:43:65:00:01:ec:
08:24:fe:4f:ec:f7:c2:fb:bc:c1:8d:ae:d6:f7:73:
7f:69:cc:9c:b0:5f:ee:db:5d:f4:26:d9:8a:3a:5f:
86:93:a4:8d:8e:f7:5f:b4:26:d6:11:dc:cf:1d:4a:
2b:fa:f3:49:32:dc:2d:1f:75:24:42:3c:d1:c1:96:
28:3d:73:76:20:d2:fa:6e:9a:99:d8:8b:93:e2:ff:
60:cf:44:42:eb:f5:cf:04:20:96:98:08:d9:5d:55:
56:5d:16:c0:a7:83:6d:a8:03:ec:ff:c8:58:a8:5f:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:74:F4:9F:7B:37:69:59:32:42:DA:39:9E:D5:00:21:38:D8:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4C3DFB2298011F0828B1DAADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:3f:b1:20:c9:51:1c:30:28:b4:58:cd:d9:50:93:ef:a1:ef:
35:57:55:46:2f:70:c4:75:7a:fc:e8:13:f6:5f:21:1b:b9:aa:
c6:fb:49:4a:36:0a:15:19:35:9b:10:43:1e:4c:06:33:b2:95:
07:3e:c5:7a:f9:1b:22:4c:01:f8:7e:98:b9:d5:39:f5:c6:60:
34:cc:80:b8:fc:53:f3:ed:5b:32:7a:a2:89:37:1d:1b:a8:32:
ea:ff:2e:99:ef:bd:38:75:e2:23:53:7b:ce:1c:31:48:05:d1:
86:8b:ab:67:b8:51:1a:5b:d0:ef:4a:c5:22:cb:82:75:de:d9:
13:c3:0c:be:aa:73:f6:71:6c:2a:01:31:ae:b5:8f:e8:cd:c7:
b1:5a:ad:a0:d4:9f:c6:e0:ac:8d:22:a0:73:d0:96:f6:ec:29:
9b:41:2f:f6:80:6c:13:46:f9:37:29:26:67:92:ad:cc:30:34:
f4:45:b6:ab:a4:9d:37:4d:8d:c4:06:2e:a1:7f:71:d1:f6:87:
1e:7d:8a:3e:2c:39:7a:b6:30:86:ed:f8:39:d6:c2:17:5e:a0:
ab:65:b9:50:c1:1a:9a:64:1d:78:ef:8a:30:e1:cd:55:a3:bd:
6b:3e:bf:9f:f0:60:d6:ec:75:27:ac:57:59:06:f7:d6:20:58:
2e:a5:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:37:21 2025 by rpki-client