Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D8CF5E6211411F09BB724BFDAE4EC9C.roa
File: 3D8CF5E6211411F09BB724BFDAE4EC9C.roa (raw, json)
Hash identifier: l9k6LIlHb4qVEfDXFxs8HafMKy1EjyYv9Y/5Gc6ffV0=
Subject key identifier: ED:ED:58:71:F1:92:48:29:5F:54:36:0B:84:73:6A:9E:04:0B:AF:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AD7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D8CF5E6211411F09BB724BFDAE4EC9C.roa
Signing time: Thu 24 Apr 2025 13:58:47 +0000
ROA not before: Thu 24 Apr 2025 13:58:42 +0000
ROA not after: Sat 31 May 2025 13:58:42 +0000
asID: 57043
IP address blocks: 154.83.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96983 (0x17ad7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 13:58:42 2025 GMT
Not After : May 31 13:58:42 2025 GMT
Subject: CN=680a4397-6e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:13:fd:71:c4:a6:05:5d:5b:b6:c2:f5:f3:
00:92:15:32:24:3b:e6:91:fa:7c:8e:37:4d:de:79:
82:5d:78:87:bb:68:46:14:64:63:ce:95:df:37:e9:
a9:7b:10:7b:e8:7e:c1:97:a0:a9:a8:52:05:e1:34:
de:44:e6:9b:8f:68:54:81:0c:49:3c:a0:2a:d8:7d:
82:71:0e:55:9b:0d:34:a9:72:d7:17:31:96:43:2c:
c1:39:d5:03:c5:ed:e4:ee:28:87:dd:33:17:bc:78:
a3:8b:e7:8e:84:ed:10:7b:3a:50:ce:40:98:99:26:
50:7a:e0:b3:67:c6:db:df:cc:58:bd:c6:fb:6e:4a:
af:cf:2b:98:bf:bb:c3:9a:77:f4:b1:10:ec:3e:25:
0b:81:1e:0f:76:f9:8a:f5:73:f9:ed:29:68:de:5e:
49:18:ce:f8:bf:ba:dd:ed:0c:15:3a:93:3b:03:fc:
3f:bf:29:1a:b2:f9:64:67:85:55:11:af:f2:0c:62:
8b:e3:e6:7a:98:51:cf:77:fd:e6:bf:ce:aa:17:27:
84:7a:7b:18:48:f9:7a:fd:3e:f1:ce:d8:f9:34:24:
21:86:fe:3b:a2:44:e5:c2:c1:fe:d6:56:23:96:dc:
4c:b2:90:a6:74:38:75:18:1b:13:c6:f3:e3:fe:e4:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:ED:58:71:F1:92:48:29:5F:54:36:0B:84:73:6A:9E:04:0B:AF:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D8CF5E6211411F09BB724BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c5:d4:10:71:9a:a8:d0:1b:03:49:b3:f5:50:6c:81:d1:09:
cd:6f:9e:66:38:68:ed:d3:09:38:c8:81:b2:80:3c:fd:63:8f:
a8:b9:32:8c:37:ef:b4:72:6b:d4:b5:f3:30:09:5c:30:74:e2:
6d:53:1e:57:9f:6b:83:19:ec:9c:74:79:7a:83:02:5f:b4:59:
28:6b:91:21:9c:3a:cd:5d:42:3c:21:51:31:e6:19:fc:3e:4b:
3d:1d:f0:17:8c:f9:bb:dc:8a:79:15:5d:fc:2b:41:32:eb:6c:
a5:22:d9:eb:d4:d6:6b:b9:56:88:8f:40:91:e7:06:5d:e7:64:
30:8f:ba:fb:1c:5d:73:e7:29:94:e1:20:74:a0:67:14:f7:18:
11:ce:74:26:31:ba:ad:48:07:56:d8:24:0b:cf:3e:53:89:7a:
9f:7d:da:64:e2:55:36:8b:f7:2c:2a:41:e6:bd:82:c6:d8:2f:
93:16:a1:22:61:09:62:89:ea:f2:ec:24:53:32:90:03:03:63:
85:19:69:43:ba:b2:ac:e6:03:4b:8f:1d:72:fd:d0:96:d3:fa:
a7:d4:32:8f:91:81:fc:2e:fc:34:6a:24:eb:9c:96:81:d9:fb:
05:af:f9:f0:14:4f:72:82:0a:07:f6:6f:c7:78:e4:0c:b1:0e:
89:13:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:09 2025 by rpki-client