Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5BCBA80CDE11F0B7DB4463762E951A.roa
File: 8A5BCBA80CDE11F0B7DB4463762E951A.roa (raw, json)
Hash identifier: 2xFnQxPogF/nqWEbec8AcKYytt6ku6gqioFzpx+lwA0=
Subject key identifier: 95:00:05:83:75:CD:BA:A7:0C:D1:5A:92:DB:08:95:67:80:F3:3A:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0176FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5BCBA80CDE11F0B7DB4463762E951A.roa
Signing time: Sat 29 Mar 2025 20:43:59 +0000
ROA not before: Sat 29 Mar 2025 20:43:55 +0000
ROA not after: Mon 25 May 2026 20:43:55 +0000
asID: 137510
IP address blocks: 154.205.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95994 (0x176fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 20:43:55 2025 GMT
Not After : May 25 20:43:55 2026 GMT
Subject: CN=67e85b8f-7a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:ba:0b:a9:b0:d5:af:0f:ea:13:bc:80:61:
4b:19:9b:49:55:e6:29:45:fc:0f:4a:9d:9a:2a:3e:
93:f5:c2:d7:c3:99:3b:ff:16:79:17:ef:32:00:9f:
6d:97:67:6a:dc:58:db:e1:e3:2c:35:86:ad:6e:71:
e3:56:3d:28:0a:25:25:a9:99:8d:0b:bc:ae:07:7e:
16:c5:c7:ec:4e:be:85:c4:eb:ef:d5:19:1a:c8:85:
49:3c:44:a7:ad:bb:c2:93:fd:22:0b:ee:6e:bd:ca:
61:ed:3b:38:3a:1b:de:86:d1:de:4d:1d:b5:79:fd:
0d:0d:13:a0:0d:b8:83:c9:e6:b7:c9:93:81:ec:e2:
b4:4e:5b:0f:30:47:0e:2f:20:e8:ad:67:e2:67:2b:
85:ed:b7:4c:c4:dd:65:3f:50:7d:29:83:9a:1e:78:
38:84:a7:df:10:e8:f7:7b:05:5c:cb:49:cf:00:e8:
ac:7e:bc:c5:2f:91:d5:0f:58:47:ba:cf:ec:71:e3:
05:8f:12:a5:91:46:a0:82:ea:22:64:18:d7:ba:d9:
c8:b6:b9:7a:b7:a6:d0:ae:6b:45:e1:f3:89:b0:c4:
1a:57:cb:4c:9c:0d:b4:03:4b:45:68:09:7d:5e:6d:
5f:24:07:d5:a4:54:22:b8:f1:16:11:6f:55:95:a5:
27:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:05:83:75:CD:BA:A7:0C:D1:5A:92:DB:08:95:67:80:F3:3A:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A5BCBA80CDE11F0B7DB4463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:51:65:e3:46:c8:fc:36:9a:2f:fe:da:bc:bb:d3:ac:93:27:
eb:d6:67:19:c6:9f:5b:79:c1:e4:dc:8c:9a:ef:9e:7c:b1:fa:
cd:9f:e7:6c:a1:05:97:a0:76:a9:63:85:74:0a:67:db:cd:ae:
6d:f2:96:bf:8c:a9:28:7b:eb:37:e1:2e:53:57:83:e3:ef:61:
31:18:fe:6a:7c:17:7c:4e:d3:f4:d4:78:ca:45:bb:97:9a:1d:
e8:93:fd:a9:06:86:9c:1a:74:b7:5a:39:01:ad:e6:ae:b5:c8:
4b:cd:4c:ee:f3:73:2d:6f:7f:93:14:b4:0b:80:63:c5:a5:c6:
c3:db:08:b6:ab:1d:e9:f1:d3:ce:fa:41:d7:ab:b6:dc:7e:7d:
4b:ed:23:41:6f:60:0d:5d:ec:da:b7:5e:e3:cd:e4:15:7e:3a:
eb:12:4b:e7:86:c4:03:79:43:2d:e2:78:bd:d4:05:de:ad:c8:
67:1f:e6:9d:cd:07:65:8f:09:ea:e8:b5:b5:05:2e:fc:76:aa:
5e:55:d9:b1:18:6d:83:67:00:b3:c0:0d:e4:83:9b:70:49:ad:
da:ab:6a:3f:22:87:6b:b3:7f:f3:25:86:16:a4:d1:a0:7c:ab:
ce:03:14:d4:e3:99:2e:29:44:93:25:36:bc:b5:0f:8f:c5:c4:
a9:c1:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:22 2025 by rpki-client