Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5DE3301E8111F0BD463C90DAE4EC9C.roa
File: 8E5DE3301E8111F0BD463C90DAE4EC9C.roa (raw, json)
Hash identifier: 2N8uly04dN3YaLDB9K02Rf8TjGpY9Gf6Zlgm8tk4Iek=
Subject key identifier: E9:7A:79:BB:C1:52:2B:9D:57:EF:1E:D0:D2:EA:03:8F:B7:82:5A:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5DE3301E8111F0BD463C90DAE4EC9C.roa
Signing time: Mon 21 Apr 2025 07:23:44 +0000
ROA not before: Mon 21 Apr 2025 07:23:39 +0000
ROA not after: Wed 30 Apr 2025 07:23:39 +0000
asID: 54801
IP address blocks: 154.213.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 07:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96833 (0x17a41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 07:23:39 2025 GMT
Not After : Apr 30 07:23:39 2025 GMT
Subject: CN=6805f280-302a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:38:ad:5a:83:df:f7:37:ac:15:c3:51:fc:
16:1a:b2:d8:40:33:2e:e9:e3:60:63:ba:2d:89:c9:
d8:57:a4:e0:aa:70:36:75:40:60:56:f3:a1:a5:22:
12:2f:43:c0:60:69:02:87:dd:f8:e8:6a:83:3b:93:
dc:89:5b:60:aa:79:dd:69:3a:83:27:a5:44:1d:cd:
a7:e7:8c:59:c6:3f:bd:75:e2:c0:90:59:dc:21:74:
3d:05:31:b1:a9:d6:3c:95:13:ce:3d:e0:12:60:41:
ba:53:14:79:d6:de:43:db:cd:12:93:f1:e5:51:7d:
bd:bf:17:a8:a6:5f:76:73:fd:9a:26:f1:a6:2c:da:
15:a5:d3:60:a4:42:e5:d0:23:01:bd:b9:48:17:ce:
9c:fc:50:dd:e3:7b:52:aa:23:e3:8f:6e:12:2f:83:
a3:fe:06:21:76:da:1b:0e:bd:eb:e6:5a:c1:3b:aa:
f7:43:c4:a0:fc:17:15:dd:37:1c:e3:9b:1e:16:69:
9b:a8:4b:03:21:a3:dd:cc:9b:cc:c1:3f:9f:fa:e7:
1b:fc:7d:95:8b:93:47:15:dc:c9:4a:95:10:85:b9:
52:80:ce:e0:4b:73:53:fe:3c:e8:00:a1:9b:35:4f:
18:e2:e1:0a:5e:fd:9c:4f:e0:36:b0:6b:4b:c0:72:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7A:79:BB:C1:52:2B:9D:57:EF:1E:D0:D2:EA:03:8F:B7:82:5A:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E5DE3301E8111F0BD463C90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:76:9d:1d:5e:9e:bd:d4:f6:f1:1f:4f:38:f3:6b:eb:56:e6:
fe:46:da:a8:21:c0:6e:cb:fd:b7:79:3e:33:42:b6:3a:e7:cd:
f7:89:97:de:a4:8a:de:ad:af:60:b5:c9:0f:0f:a4:5d:f8:5b:
1a:f3:e7:90:c9:7e:63:b8:fc:67:a2:d3:d3:1b:ea:b6:f9:90:
5a:9b:20:40:88:88:20:06:ea:7a:f4:1b:48:fb:5b:d0:76:0e:
85:c9:a2:8c:18:f6:27:a8:56:e7:22:b0:6c:4d:74:63:3f:87:
5f:55:d5:74:be:bb:c9:9d:db:00:ac:ad:5e:c2:8a:60:7f:fb:
c2:4d:44:53:1e:92:b2:13:99:c5:f4:38:2f:4b:cc:d4:69:2f:
b3:f6:00:48:ba:d8:22:83:e7:54:48:0a:0c:c5:3e:36:86:8d:
52:51:7d:a9:7c:f1:21:7c:1b:e2:ad:11:d7:08:e5:e1:9d:ac:
ac:fc:87:9c:67:74:2e:7d:ba:5e:83:e4:eb:51:7d:61:fe:58:
fe:85:9d:c2:d1:15:80:20:4f:1b:bc:0e:7e:78:31:1d:c5:1f:
49:8b:bf:0e:44:8d:7c:8f:2c:7d:8c:be:c1:9e:51:6c:4d:48:
1f:a2:94:eb:96:67:6f:52:64:11:a6:c4:55:e0:7c:e6:50:00:
39:fb:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:10:11 2025 by rpki-client