Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693A082015EB11F08234E9CB6DB8BCC6.roa
File: 693A082015EB11F08234E9CB6DB8BCC6.roa (raw, json)
Hash identifier: c0e8Q2BIFILodHlryyQNjI210WtFE5spD4kEv1kAiE4=
Subject key identifier: 9B:91:14:2F:FB:A1:B3:72:DB:0B:B6:D8:80:62:51:98:8C:3D:48:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693A082015EB11F08234E9CB6DB8BCC6.roa
Signing time: Thu 10 Apr 2025 09:08:48 +0000
ROA not before: Thu 10 Apr 2025 09:08:43 +0000
ROA not after: Sat 10 May 2025 09:08:43 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96439 (0x178b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 09:08:43 2025 GMT
Not After : May 10 09:08:43 2025 GMT
Subject: CN=67f78a9f-6be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:67:f3:e3:98:f0:cf:5a:b2:34:87:67:6f:
15:7d:61:0b:88:bf:be:97:15:cc:50:cf:43:17:41:
29:d9:31:41:31:04:a2:7d:fc:d0:36:be:61:5a:91:
da:8f:55:fd:5a:f9:f1:78:e3:f0:58:1f:d7:b4:95:
49:73:02:9a:7c:93:51:93:ba:a5:ff:13:01:77:c0:
d9:52:fc:48:aa:3f:af:b2:a8:72:61:3a:05:cb:fe:
e6:20:33:39:23:ce:e9:30:72:62:ac:63:66:e2:3d:
40:a4:a0:24:3d:61:bb:56:dc:9f:ee:0a:58:d1:c3:
62:20:c0:19:6e:55:8d:e7:1f:5e:5b:e7:3a:dc:b8:
4d:98:12:a0:c0:69:f5:e4:00:f2:d1:0d:80:9c:df:
61:98:33:0d:28:64:64:5a:63:17:c9:41:d5:a1:10:
b7:18:ec:ec:41:69:7b:e2:00:56:5b:f5:d9:33:9f:
ea:b7:a9:32:64:51:01:3f:6b:54:c0:cf:8f:5a:76:
34:1d:ae:3c:c0:8d:65:5b:18:37:ec:9c:6a:26:fe:
94:d8:d2:ba:a6:39:cb:e4:8a:47:9b:4e:e1:e2:cc:
45:85:a9:d9:03:17:39:88:e1:c2:bd:0a:0d:88:a7:
49:23:bd:71:3b:90:7a:45:63:73:9e:de:20:68:6b:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:14:2F:FB:A1:B3:72:DB:0B:B6:D8:80:62:51:98:8C:3D:48:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/693A082015EB11F08234E9CB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
54:22:a2:6a:9f:9e:eb:7e:47:45:5b:c4:c4:bc:4e:1b:0e:80:
46:42:d5:a5:73:ea:ae:44:33:78:a4:da:a1:8e:9b:91:f9:70:
ab:06:43:80:10:7a:7a:ff:d3:6b:e0:e2:2b:fe:96:df:1d:ce:
ec:55:a6:5d:c3:e9:90:a5:ef:30:cb:34:23:d5:a3:49:e6:a2:
88:85:8e:99:81:ac:49:6c:19:53:61:1d:cc:9c:09:5a:03:c4:
a4:c1:45:44:5f:af:0c:3f:df:5d:93:18:9f:e1:26:ef:7a:dc:
f8:e6:d2:69:84:2a:ef:0e:c0:15:a0:b1:b1:24:ea:84:04:6b:
70:59:f4:06:84:cf:65:3b:a4:09:e6:a3:f9:d5:9e:9f:18:76:
4f:44:8e:9a:6b:b1:c7:d6:a1:35:e1:10:4a:f9:1c:2c:b5:f4:
00:6c:cb:a0:af:76:c6:01:b2:27:17:a1:0e:90:06:ed:26:ab:
56:12:9d:45:2c:5f:d9:9b:6e:95:4c:77:c9:df:6f:50:48:26:
14:45:33:e3:c5:64:ee:1d:41:be:2f:3e:b7:f7:e2:dc:7e:10:
92:e6:e5:bf:76:8b:6e:48:b4:62:a5:18:2c:33:1a:00:22:3a:
0c:8c:43:55:b3:b1:92:58:03:02:f1:f8:a8:c8:19:07:1a:51:
bc:75:08:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:31 2025 by rpki-client