Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C66964242C11F0AE5FCCF6DAE4EC9C.roa
File: F6C66964242C11F0AE5FCCF6DAE4EC9C.roa (raw, json)
Hash identifier: wpUFWQEy+FUZn8SEKl7/Qfx8NX6caGGi+8uG/JSLmfM=
Subject key identifier: 11:E3:D5:51:B9:A5:8E:D4:D8:2B:3D:EF:AB:6A:45:22:0C:16:36:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017BAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C66964242C11F0AE5FCCF6DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 12:33:19 +0000
ROA not before: Mon 28 Apr 2025 12:33:13 +0000
ROA not after: Sat 21 Mar 2026 12:33:13 +0000
asID: 984
IP address blocks: 154.89.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97194 (0x17baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 12:33:13 2025 GMT
Not After : Mar 21 12:33:13 2026 GMT
Subject: CN=680f758f-8070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:d0:82:65:c2:07:ed:71:c2:c6:fb:6b:47:
62:a1:96:11:28:6d:20:b3:74:1d:27:b0:5b:be:e4:
d5:62:24:f5:e4:09:62:93:84:44:b2:7c:e8:4f:e7:
94:bb:cf:75:71:47:5b:5e:89:b3:b2:7f:74:ec:59:
8d:5d:12:a8:38:2d:89:5c:54:0f:da:d9:d3:b9:c9:
90:85:a0:01:c2:b7:0a:77:12:0c:db:9a:f7:66:fe:
bf:66:2a:10:53:7b:9b:39:96:25:22:01:91:48:5b:
ba:58:84:d8:79:1b:a6:05:d2:92:35:06:c8:7f:b4:
8a:a9:a3:5f:70:d6:ac:00:08:ee:a0:90:61:ac:f5:
3b:16:b4:29:1c:dd:b3:a8:f0:11:27:34:c7:7c:79:
6f:ae:e4:d9:1d:c5:f2:d5:34:3a:2d:ff:0a:6a:83:
b5:57:59:eb:1b:aa:9a:ef:25:5b:6b:5d:f9:41:58:
87:f7:9c:11:80:28:62:ec:df:d5:32:8e:7a:b1:46:
87:e7:35:d4:7e:db:ab:b0:83:87:42:03:d3:cd:de:
93:36:12:58:1a:24:e0:fd:b9:1f:ee:6b:61:a8:33:
b6:80:aa:63:39:d6:34:bd:c4:43:f2:3b:72:d0:74:
74:1f:ca:0f:19:29:65:25:92:a3:9c:3e:31:55:36:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:D5:51:B9:A5:8E:D4:D8:2B:3D:EF:AB:6A:45:22:0C:16:36:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6C66964242C11F0AE5FCCF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.11.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:18:74:7b:3e:a1:82:5f:40:01:ec:fb:97:d0:3e:02:73:16:
92:ee:9c:8c:d9:f2:cd:0b:91:c4:3a:53:03:dd:6e:3b:13:ed:
67:e9:52:44:72:1d:a1:6c:39:88:14:7a:82:4c:84:5d:bb:03:
4a:7f:f8:b4:74:50:5a:63:b1:32:8c:48:22:f1:01:71:bd:48:
5b:ec:6f:b1:3e:d7:d4:09:c0:42:7a:e3:f9:64:69:5c:30:cf:
fe:3a:dd:91:41:64:9f:17:ac:b5:bc:ff:5a:ab:b2:28:df:d1:
d7:ed:b7:26:40:e6:0a:9c:58:41:5e:10:e5:7d:f6:d7:f0:05:
7a:93:78:83:cb:e4:b4:61:e6:e2:5f:22:cb:44:17:6f:3e:d3:
50:b7:93:d4:a0:aa:2e:f5:36:b7:40:e1:b7:71:22:22:d2:c9:
fd:b6:f8:95:29:c0:67:d1:38:05:33:5a:9d:ad:9f:21:86:0c:
e4:f8:0a:d3:f3:a1:e4:fe:78:6d:1d:76:d6:78:2d:a0:2f:25:
54:43:9e:97:37:25:69:18:65:02:c9:bb:35:a3:47:9f:1b:c2:
2a:a7:c4:3c:c9:16:b1:0f:b4:d3:b7:35:28:10:fe:68:3c:02:
60:ba:b1:fc:a4:0d:56:e7:b2:54:4d:01:c6:5d:83:25:fa:73:
80:0f:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:14:42 2025 by rpki-client