Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A0C6CD61C6111F0A5F6AAD0DAE4EC9C.roa
File: 5A0C6CD61C6111F0A5F6AAD0DAE4EC9C.roa (raw, json)
Hash identifier: wkGIrsvPMFqs038eJ2jkbXhH2DLKISZh6uDXCJpwkdg=
Subject key identifier: 29:94:4C:9C:09:49:AC:FD:02:96:44:4B:B1:18:1F:64:40:95:0A:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0179AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A0C6CD61C6111F0A5F6AAD0DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 14:28:10 +0000
ROA not before: Fri 18 Apr 2025 14:28:02 +0000
ROA not after: Sat 24 May 2025 14:28:02 +0000
asID: 55933
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96687 (0x179af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 14:28:02 2025 GMT
Not After : May 24 14:28:02 2025 GMT
Subject: CN=6802617a-cef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:1e:ac:70:3c:d8:41:d4:ef:9f:13:42:6f:
45:d4:64:4f:bc:f6:fd:a6:95:0b:7a:35:fa:91:08:
59:fc:57:fa:17:66:b1:fa:fa:e1:42:5d:fe:20:ac:
93:57:fd:61:01:49:02:a4:aa:f4:e5:0a:c7:37:6d:
6d:64:1a:6f:f3:d7:3f:31:42:85:d7:56:5d:16:ed:
4e:0d:02:50:26:62:59:4d:64:04:65:2b:35:99:04:
40:c8:2b:ea:f5:3c:dd:65:bf:cc:95:10:db:ed:5d:
6d:c9:82:5f:26:d9:72:33:b3:44:ec:cf:a5:c7:9e:
79:8b:05:d3:21:f2:29:bc:8e:04:9b:00:d9:31:e7:
e4:f1:d9:b1:17:f4:32:96:ce:25:fa:83:39:2a:95:
fe:e3:05:94:e6:40:5f:9c:7f:24:3f:02:dd:10:dd:
f6:b9:b8:ac:61:c8:b6:5b:97:ad:95:99:9f:38:56:
fa:f3:ea:0e:99:73:0d:18:43:b6:71:ce:1c:2c:ff:
33:5d:d1:46:b6:b2:78:fe:4f:ae:05:97:11:a9:16:
a8:c8:72:8b:2d:58:77:4c:e0:de:d0:a9:8e:a0:13:
2e:f4:3a:7f:e0:3d:6b:31:f7:d6:28:6b:aa:36:eb:
1b:04:6f:5c:b8:00:24:ba:44:0e:42:00:78:f7:26:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:4C:9C:09:49:AC:FD:02:96:44:4B:B1:18:1F:64:40:95:0A:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A0C6CD61C6111F0A5F6AAD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
12:24:da:18:3e:b6:72:ca:ab:93:4b:65:94:31:bb:76:cc:6a:
ec:83:7c:5a:82:f1:f1:8c:f0:22:4a:96:8e:56:09:f2:24:0d:
9a:23:d2:41:8d:9a:a0:bf:47:82:5a:40:70:38:a2:07:2e:b3:
13:35:f3:c5:5c:d7:94:cf:f1:c0:cb:33:d2:20:8f:6c:e5:15:
00:01:ad:c1:b0:3d:a9:4d:b3:98:1b:78:2d:d1:bb:05:96:6f:
3d:05:3b:8c:6e:65:cb:d3:dc:07:58:88:56:33:97:2f:78:b8:
ca:0f:80:1f:e0:f0:53:30:85:d6:0a:e6:f8:e2:b9:bd:b1:01:
a9:d8:bf:39:fd:24:06:0b:7c:c1:d8:e7:0f:50:16:32:8e:e8:
3d:11:cc:a1:4e:34:89:c1:7a:99:b0:06:7d:53:f3:5e:1a:37:
47:13:29:7f:f6:4b:31:72:d5:a1:b4:02:47:7f:80:e0:e8:82:
89:b6:f3:82:06:13:47:7d:fb:94:73:c3:0e:a6:26:66:91:fd:
e3:6a:61:b5:1a:d0:84:06:e1:66:e2:7d:88:15:5b:11:64:46:
f3:24:fe:41:e2:b5:ab:b0:65:e5:91:95:f6:cc:63:38:5c:bd:
cb:dd:08:92:ec:42:a9:f3:2c:30:8f:af:ae:a8:04:65:c9:45:
c6:54:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:22:15 2025 by rpki-client