Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F02E8C242211F0980117B7DAE4EC9C.roa
File: F8F02E8C242211F0980117B7DAE4EC9C.roa (raw, json)
Hash identifier: IayaaDVuIag/MWLM6R2y0gdorkemItULORF3PBQXCKo=
Subject key identifier: 86:D7:AE:DC:4A:21:E6:FD:93:45:8F:67:10:D1:16:DB:1C:FF:D4:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F02E8C242211F0980117B7DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:21:48 +0000
ROA not before: Mon 28 Apr 2025 11:21:43 +0000
ROA not after: Wed 15 Mar 2028 11:21:43 +0000
asID: 17561
IP address blocks: 154.94.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 10 May 2025 00:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97149 (0x17b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 11:21:43 2025 GMT
Not After : Mar 15 11:21:43 2028 GMT
Subject: CN=680f64cb-b8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:87:8e:9f:89:5b:f7:2a:50:ef:1b:a5:5d:
4d:85:b0:ad:44:59:53:38:b1:4b:30:7d:f9:30:23:
19:20:ff:8a:71:ce:76:7d:f9:3e:a8:6d:8f:07:f2:
90:26:9e:1c:58:d7:f6:3e:0e:10:2c:c1:64:8a:87:
5e:f4:8e:d7:03:a2:64:fd:e5:6a:a3:be:f2:4a:bf:
f7:1c:76:7c:e5:35:bb:c7:cf:b2:75:5b:d3:1e:f5:
b9:21:f4:fa:1c:a1:c2:79:66:45:c6:6a:4d:3c:75:
d1:a2:10:64:7c:28:a6:74:d2:e2:24:ac:21:d1:c2:
d1:f6:80:ef:e8:36:e8:aa:11:70:6e:10:29:4f:57:
33:54:9d:e2:02:a2:64:8e:9b:ae:c2:7e:5b:f9:d3:
48:a9:90:22:c7:56:8a:67:bb:26:ae:f5:c9:2d:13:
4c:1a:32:f7:6a:69:d5:ea:ce:aa:b0:02:76:f0:6d:
56:c6:bf:9c:b4:0d:a3:1d:10:c2:f0:10:5a:59:e6:
98:06:f1:80:cf:c9:f9:71:c1:e5:58:10:44:f9:82:
df:b8:f8:05:23:ba:5d:07:07:ee:09:fd:d2:fe:a0:
66:e7:cd:d2:81:a7:56:38:80:a4:59:e3:6c:24:9c:
8c:05:1f:52:3d:e6:b5:f8:4d:82:67:cc:eb:78:c1:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D7:AE:DC:4A:21:E6:FD:93:45:8F:67:10:D1:16:DB:1C:FF:D4:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F02E8C242211F0980117B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.26.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7b:bb:79:61:69:8e:18:d1:b0:af:0d:44:11:7e:e9:f9:53:
ac:96:33:a8:87:77:54:e6:24:6a:e3:be:41:f6:7f:6e:ff:81:
47:7b:21:82:a1:d9:4f:3d:a6:28:b3:53:e4:1d:8a:26:a9:5e:
c4:02:31:ab:fc:a3:32:11:86:53:7b:38:93:a4:17:aa:be:36:
ef:b9:56:b1:be:57:19:ae:98:80:94:31:ed:a1:58:29:6e:5a:
d7:0d:b4:d2:d9:0e:4f:75:11:5a:5e:6c:4b:3e:b9:49:9f:c4:
07:e6:b2:5d:2c:15:48:cb:6b:9e:05:05:d7:3c:e8:bf:6c:43:
12:9a:e1:b5:5c:14:1d:72:c0:cd:d6:7f:ba:57:87:ab:c6:a8:
5c:7e:d3:f7:66:95:90:8c:9b:d9:ae:c6:c4:70:5f:73:8f:06:
ad:be:3c:ee:e2:31:bc:18:50:76:eb:ce:56:f1:43:87:4a:e4:
38:8a:55:a4:1a:19:a0:bd:76:e3:a9:37:6d:14:6a:17:02:90:
e7:1a:ea:4a:df:d4:d7:1f:1a:c5:0a:5d:6e:fc:a2:83:48:de:
cf:e6:74:64:e3:19:92:e2:d3:fc:80:98:01:9e:12:b1:f1:1c:
a3:c4:15:c1:98:9e:94:ca:50:89:86:8f:6e:f6:d4:b0:ec:3e:
eb:b8:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:27:03 2025 by rpki-client