Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5D562C244C11F0988ED0C6DAE4EC9C.roa
File: 1D5D562C244C11F0988ED0C6DAE4EC9C.roa (raw, json)
Hash identifier: 7htDhMcxzy5r2zEUJ3stUuft5qcLve3m0hUP11Y64Ls=
Subject key identifier: 9B:82:1D:49:17:BC:55:20:E1:BC:8F:77:F0:6C:7F:6B:13:02:2D:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017C27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5D562C244C11F0988ED0C6DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 16:16:18 +0000
ROA not before: Mon 28 Apr 2025 16:16:14 +0000
ROA not after: Wed 04 Jun 2025 16:16:14 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97319 (0x17c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 16:16:14 2025 GMT
Not After : Jun 4 16:16:14 2025 GMT
Subject: CN=680fa9d2-2af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:e7:5d:9b:e4:6a:27:20:c5:8e:ee:cf:5d:
74:55:04:62:4e:f1:d6:d9:f4:f6:f9:1e:3d:e6:c7:
f0:84:2a:a9:c6:67:c9:9f:0d:74:3d:d8:0a:5f:9d:
e7:ff:75:b6:80:72:82:fa:49:86:dd:4d:56:89:fb:
65:fa:8f:51:70:d2:20:5d:3c:8d:6a:6c:37:21:81:
74:b2:ca:9b:9a:f0:e4:fc:9e:c0:41:33:4b:30:82:
1c:e9:63:a0:d2:ca:cc:34:55:6d:3b:ff:e6:a4:1f:
dd:3c:0c:30:eb:99:c3:2a:6f:78:c8:7f:3d:00:da:
2d:a4:c9:6c:f5:b3:7a:a3:a1:ce:46:f8:71:8a:13:
d2:69:41:a9:5b:83:2b:99:9e:24:d9:65:bf:0a:a9:
5d:cc:9b:d2:0c:b3:b0:b7:7d:cd:3d:80:d5:99:64:
12:d1:e6:16:c9:7e:f1:86:2b:05:4b:81:fa:e4:c3:
53:8d:c3:54:a9:b1:85:9f:f0:d3:05:88:a6:00:b2:
e9:99:18:c9:ce:08:8c:14:3b:57:76:df:c5:9b:d6:
a1:fe:3d:52:bb:ec:3b:65:64:1c:09:e0:3b:1b:4c:
22:9f:0d:d1:2b:0d:38:05:82:c1:5d:2e:b1:62:64:
13:e7:30:0b:99:6c:a0:63:aa:6f:56:dc:12:2d:5c:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:1D:49:17:BC:55:20:E1:BC:8F:77:F0:6C:7F:6B:13:02:2D:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5D562C244C11F0988ED0C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
be:9b:65:70:79:85:21:55:94:58:bb:d0:46:3f:c7:9e:08:b1:
e1:b4:68:74:24:e7:5a:47:4c:33:d1:a3:05:e9:cc:9d:cb:93:
c1:30:5c:5e:b5:38:03:93:18:c6:66:8b:f4:59:59:80:68:aa:
05:b7:9e:16:4e:f2:a5:2d:16:1f:d6:64:2a:82:10:cf:cc:d3:
20:12:19:15:c3:10:71:cf:b0:5e:70:c4:47:86:7f:2b:e6:17:
87:27:d9:07:93:f2:85:35:d4:16:74:8a:6f:01:6e:69:68:66:
bf:c5:88:30:07:89:4b:87:fc:52:4e:28:72:1f:1e:d1:0d:56:
98:fc:0f:53:b3:b7:44:6c:8a:a3:e0:3b:df:8a:44:5d:b4:03:
e0:6c:ac:35:d9:df:7a:41:49:81:6f:f7:63:2c:1d:a0:3f:2a:
5e:76:13:77:99:09:9c:e8:8f:11:df:a1:0c:73:2f:40:05:a9:
e0:bb:36:d7:65:06:7d:c0:5c:ff:0c:b0:3c:af:8f:51:d7:61:
b9:d4:c0:32:00:d0:d5:aa:c6:ef:3d:43:02:1b:24:89:1c:5c:
ce:26:19:10:9f:82:41:a5:c3:0b:b9:bd:92:d6:89:6d:f8:bc:
27:3e:3f:28:4b:fd:f0:b1:90:c7:91:13:51:e9:86:11:3d:f2:
56:7b:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:50:53 2025 by rpki-client