Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA99DD830A211F0A5507ADEDAE4EC9C.roa
File: FCA99DD830A211F0A5507ADEDAE4EC9C.roa (raw, json)
Hash identifier: dIPoOjrWx7YcA2505Wl5OCX3GC6rHtNGBuagT7BKdNg=
Subject key identifier: CC:6F:95:BD:9C:23:E0:02:08:80:4C:02:9A:60:80:D3:11:01:12:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01808B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA99DD830A211F0A5507ADEDAE4EC9C.roa
Signing time: Wed 14 May 2025 09:08:23 +0000
ROA not before: Wed 14 May 2025 09:08:19 +0000
ROA not after: Wed 06 May 2026 09:08:19 +0000
asID: 135600
IP address blocks: 154.81.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 09:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98443 (0x1808b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 14 09:08:19 2025 GMT
Not After : May 6 09:08:19 2026 GMT
Subject: CN=68245d87-baa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:28:9f:0a:0c:39:9d:fe:b9:18:9c:cf:a5:2e:
f2:7f:b5:51:07:02:91:4d:70:df:e4:80:30:b4:0e:
69:9e:3f:7e:7e:4f:a9:46:96:4b:b0:1c:33:4b:3b:
c8:13:7b:b2:58:73:42:aa:32:cf:0c:54:a3:48:e2:
47:6a:20:24:ca:16:9e:2c:ea:9c:15:cc:e2:dd:5b:
9f:e6:a4:cd:12:dd:99:a2:55:70:ca:53:2a:14:f5:
e8:7f:dc:b6:22:4c:8c:2b:90:40:19:8d:b0:1f:d0:
76:fa:b6:f1:af:21:46:76:fd:89:89:07:bf:a4:c3:
b2:dd:58:80:f2:e8:51:14:70:8b:27:a3:a2:4e:a7:
74:25:e2:99:3d:33:e8:01:b9:ab:45:4b:44:10:a2:
d4:80:a8:2d:9c:f9:63:7b:08:23:29:f0:38:b4:4e:
0e:cc:b1:61:f5:4c:2e:40:f7:8c:04:71:9d:22:08:
9e:1e:6c:47:73:ed:aa:eb:f0:39:ed:41:01:13:6f:
d3:eb:ed:1a:0f:b3:11:dc:27:17:14:9a:ec:30:f1:
e5:6b:1c:08:70:50:f1:8c:57:ae:4f:74:6f:5e:c9:
65:f4:84:a0:ef:26:bc:09:4b:35:d4:46:eb:59:e5:
01:a0:49:5a:09:ba:d9:40:fa:fe:ec:fd:3d:02:6a:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:95:BD:9C:23:E0:02:08:80:4C:02:9A:60:80:D3:11:01:12:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA99DD830A211F0A5507ADEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.144.0/21
Signature Algorithm: sha256WithRSAEncryption
32:7b:75:e0:1f:c5:ee:e1:34:78:1d:ba:90:de:f8:d4:39:59:
e1:35:8f:c7:e0:99:45:d5:a6:01:fc:8f:78:6b:90:2b:1b:d5:
bf:c0:c0:85:49:32:7e:64:2d:2d:7c:4e:d1:6a:f9:cd:43:d1:
8e:f2:12:c5:7e:56:cd:b4:d7:19:91:98:f7:58:87:12:d8:45:
64:e1:c5:d8:d2:57:8a:af:c9:73:3a:a7:16:c9:cd:9d:a1:0f:
be:e1:c3:45:04:77:bf:b7:5e:59:ac:ce:dc:ab:3b:e4:4e:69:
41:57:72:8e:4b:5d:79:2f:94:86:18:2c:68:15:90:ad:a8:a6:
10:e9:8e:97:84:d8:5b:40:90:e5:f6:2f:17:95:93:8e:e0:a2:
6f:a2:6d:e4:1a:04:f7:b9:aa:a1:b9:28:a4:83:72:4c:01:4a:
6c:09:f8:f4:9c:14:71:c1:f7:ca:b8:c0:b1:a3:fd:b5:9d:75:
a7:ed:33:24:fb:0e:30:67:1d:09:35:89:b0:06:fa:34:7f:27:
9d:e5:b9:9e:94:0a:8c:85:f2:6c:0f:53:e6:81:70:fd:58:a8:
7d:78:9d:01:3e:3b:d8:5d:02:d7:f7:d1:0d:af:69:ac:93:43:
22:73:89:f7:11:f5:13:e9:dc:1c:ff:05:9d:95:b9:f5:a8:5d:
3b:5b:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:47:59 2025 by rpki-client