Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB23AF1230A711F0B4D30481DAE4EC9C.roa
File: FB23AF1230A711F0B4D30481DAE4EC9C.roa (raw, json)
Hash identifier: jivi2yCNHjNPBtfLI+VFLQmJXmbVd0+IOYMtuhWCAqM=
Subject key identifier: B3:DF:1C:E1:BE:A4:5A:A7:9A:A5:7B:AD:F6:1E:D3:CF:6B:CF:A1:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018091
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB23AF1230A711F0B4D30481DAE4EC9C.roa
Signing time: Wed 14 May 2025 09:44:08 +0000
ROA not before: Wed 14 May 2025 09:44:04 +0000
ROA not after: Wed 18 Jun 2025 09:44:04 +0000
asID: 20326
IP address blocks: 154.94.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98449 (0x18091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 09:44:04 2025 GMT
Not After : Jun 18 09:44:04 2025 GMT
Subject: CN=682465e8-c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:c8:c1:28:67:3b:c3:6b:fb:30:f1:78:f4:
5c:13:a9:1f:d5:4d:2f:42:b4:cd:d5:5d:a9:b1:6e:
7d:b6:70:bc:81:22:5d:e3:5b:08:17:30:ea:49:3c:
d1:0b:a2:68:ac:af:80:53:e2:4d:7b:1a:49:42:43:
8b:e2:90:b0:97:c3:ac:ee:96:eb:99:b9:83:54:6c:
eb:e0:20:5e:7c:9e:ad:7e:68:8d:a7:4e:e2:ad:db:
b0:e6:bb:8a:4e:3a:d8:e2:0c:1c:6a:55:9a:7c:2b:
d7:f5:41:f8:e5:fe:33:44:3e:d2:1c:d0:83:f8:01:
a4:09:d2:27:32:2d:0a:6b:b3:70:49:df:20:4b:cd:
3a:1a:0e:43:17:4d:26:39:30:4e:c1:02:69:bb:0a:
73:7d:76:78:a0:4b:f0:90:1b:08:c0:70:ec:3d:61:
a1:25:b8:5e:97:a8:40:23:f4:42:e1:e7:72:8b:6d:
47:bc:ff:31:98:e0:11:5c:50:fb:65:47:ae:50:00:
28:2c:0c:b8:c8:3c:a0:cf:c5:5e:82:08:08:1e:81:
65:9b:a1:2c:d7:26:bc:74:13:64:b8:c1:29:0f:a1:
ce:56:30:f4:23:e0:5c:fd:97:e2:c7:66:d5:c2:b8:
89:e2:ae:1d:bf:01:1e:85:e0:1f:c0:91:26:d1:56:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DF:1C:E1:BE:A4:5A:A7:9A:A5:7B:AD:F6:1E:D3:CF:6B:CF:A1:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB23AF1230A711F0B4D30481DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
53:53:6e:a2:dc:53:f3:f0:3c:e4:07:d3:17:f5:d6:6a:52:b2:
d8:8c:68:87:c6:33:e9:c0:c0:4b:c3:e2:96:7f:2a:8e:78:7c:
c9:3a:cd:d1:af:5c:88:c2:c3:61:3f:12:17:fc:13:ba:88:c5:
0c:0b:e7:bf:bf:f6:04:5a:c0:07:b3:61:23:74:7b:7a:bb:41:
25:5d:18:a8:50:cc:c9:f5:68:75:13:f6:34:e6:1a:b6:55:41:
43:56:6e:5f:d2:ae:31:9d:05:a7:78:38:9a:e3:7a:b1:67:9a:
58:dd:96:1b:74:1c:9b:8a:b3:90:30:a0:88:9d:f9:23:e5:cd:
ea:d8:5c:b1:c9:96:2c:f2:f9:49:21:cf:52:98:0a:f9:28:20:
f2:fd:e6:47:5a:1a:3d:63:a9:34:0a:a0:e0:c0:3f:16:23:19:
55:fc:4c:68:11:53:02:61:b2:e1:70:ca:01:23:28:07:f9:b5:
c9:c5:62:54:75:05:2c:26:14:38:02:8c:c4:e0:b4:b5:74:42:
75:5e:36:d7:ac:60:49:67:05:ac:d6:9b:3d:93:8f:f3:31:d0:
6f:c2:51:d2:98:57:60:4d:ef:02:7b:94:00:12:d9:bb:10:1b:
46:b3:fa:f9:b5:17:86:01:36:11:73:0f:f9:f4:84:b2:3b:a6:
e4:33:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:49:05 2025 by rpki-client