Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8990199016BB11F0B21635BB6DB8BCC6.roa
File: 8990199016BB11F0B21635BB6DB8BCC6.roa (raw, json)
Hash identifier: DFJq5Bc7sN5vO5Piq2SSDY59eg0iWDRvzKhkaaoaXTs=
Subject key identifier: 72:0B:BE:EC:A5:29:5E:E4:51:7D:06:3C:E9:34:12:69:D7:97:39:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0178EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8990199016BB11F0B21635BB6DB8BCC6.roa
Signing time: Fri 11 Apr 2025 09:58:37 +0000
ROA not before: Fri 11 Apr 2025 09:58:33 +0000
ROA not after: Sun 18 May 2025 09:58:33 +0000
asID: 57043
IP address blocks: 154.193.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96495 (0x178ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 09:58:33 2025 GMT
Not After : May 18 09:58:33 2025 GMT
Subject: CN=67f8e7cd-e733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:e4:f9:09:50:38:66:03:a7:cc:0d:44:bb:
4e:66:48:9b:50:49:be:0f:37:85:d3:09:a5:f4:73:
5b:09:4c:fc:9f:c0:99:99:00:6a:b2:6f:43:a1:6b:
ea:01:0f:0f:05:ee:8b:85:8d:29:88:78:55:84:b8:
ca:a5:f2:17:c4:44:70:41:37:ea:57:00:7b:9b:ff:
21:5c:f7:fe:d0:6a:31:7b:e9:b1:be:83:de:93:25:
17:4f:bd:47:06:35:54:e9:77:4b:f6:4d:83:d1:7d:
f0:08:f8:19:e2:b2:73:cd:a1:9c:b2:a1:a4:1b:b5:
0f:1d:6e:15:e9:44:61:bd:3d:b6:05:2e:f4:71:ae:
e8:cb:75:8d:47:ad:f7:8b:5c:bf:25:e8:f0:2b:a6:
64:26:09:4e:1b:3e:2f:9c:f1:60:9f:d7:f3:70:2d:
e6:ed:cc:e4:2d:f4:59:aa:48:73:25:fc:84:35:be:
10:4f:4d:24:43:3b:13:5d:78:d8:84:5f:30:68:7e:
67:eb:80:df:78:b1:7a:43:64:d0:96:c4:b2:7b:45:
01:28:bf:18:90:1b:85:f5:39:b0:84:4f:79:bc:be:
93:28:66:00:a5:b2:08:36:1b:9b:c3:39:d8:bc:27:
64:db:4d:eb:ed:a6:58:76:a1:b8:23:c6:26:99:33:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:BE:EC:A5:29:5E:E4:51:7D:06:3C:E9:34:12:69:D7:97:39:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8990199016BB11F0B21635BB6DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a4:ac:7f:4e:63:4a:57:43:f5:f0:96:00:30:95:eb:6e:2e:
ce:4e:1d:53:a4:9f:0d:9e:53:7f:20:e6:5c:02:bd:c9:30:7d:
93:b2:43:87:c4:41:0c:35:54:a3:4a:bd:ea:9a:51:b1:d2:2d:
c8:90:e6:23:01:23:d7:85:c1:57:fb:43:d9:fb:73:7d:fd:7c:
f3:31:24:ef:7e:99:bf:7b:bf:4b:44:a0:4e:aa:42:d9:8a:b3:
f0:88:40:6c:f8:3d:02:4a:1e:09:d5:6d:e9:39:fb:3d:36:7e:
ff:19:2c:a3:64:5d:3b:80:79:33:b6:71:a6:e0:a5:ef:fd:c6:
38:af:77:91:e5:56:a6:47:2d:9c:27:83:b3:df:18:66:00:96:
92:9e:1d:7d:43:1e:01:34:ec:66:71:a7:5b:d2:c2:96:3d:64:
23:a5:66:20:cb:68:a5:62:95:6e:07:4d:83:39:b5:97:cf:67:
e0:c7:3b:19:bd:69:8b:d7:60:78:80:28:cb:db:e1:f6:7d:f3:
42:d0:e3:57:00:27:4f:99:c2:27:41:03:7b:f6:aa:c4:80:f4:
84:f5:55:4e:bf:54:27:bd:42:35:18:a1:0d:24:22:b6:ce:2e:
05:b8:c6:26:f0:c1:54:2a:5e:fc:60:59:8e:f1:8c:5c:ea:85:
20:68:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:04 2025 by rpki-client