Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B5751A1C5011F0A36F35E1DAE4EC9C.roa
File: 93B5751A1C5011F0A36F35E1DAE4EC9C.roa (raw, json)
Hash identifier: HUuiIxjWlnLjOEcVXWurUujh3co9eGVky1ezre3XR2U=
Subject key identifier: 19:A6:50:45:EC:A1:1D:21:7C:F9:A8:85:AE:68:1C:48:85:69:99:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017977
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B5751A1C5011F0A36F35E1DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 12:28:05 +0000
ROA not before: Fri 18 Apr 2025 12:28:01 +0000
ROA not after: Sat 24 May 2025 12:28:01 +0000
asID: 57043
IP address blocks: 154.83.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96631 (0x17977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 12:28:01 2025 GMT
Not After : May 24 12:28:01 2025 GMT
Subject: CN=68024555-6403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:31:c0:17:ca:de:52:0e:82:c0:b2:d6:90:
12:7f:ed:ba:a9:83:ca:e8:02:c6:58:32:45:f5:98:
e7:bc:c1:2c:e1:5a:84:c4:5d:5d:87:c8:ed:f2:3d:
92:da:45:48:94:99:7c:14:94:56:b5:13:ac:fa:ae:
6d:14:ee:96:d0:e5:09:0a:cc:96:b1:4d:5a:bc:1c:
60:9e:fa:f3:16:42:69:85:38:9d:fc:a9:ff:d0:70:
bd:32:3e:ab:37:1f:36:cd:17:5c:50:cb:9d:6c:1b:
3a:ce:d0:9d:da:cf:b0:c0:ac:89:05:9b:0e:6b:a2:
5c:cc:56:86:f0:3f:06:85:79:fc:a6:79:80:63:9c:
a0:cf:30:02:0e:68:30:6a:ee:51:cb:3f:c4:f9:43:
5e:b9:5f:01:0e:6a:aa:0e:4c:3b:31:27:ab:de:de:
49:66:20:b9:33:af:9c:66:b0:6d:3e:db:6d:36:20:
0a:e9:bf:e2:39:b3:db:fe:bf:43:ce:10:ec:df:2a:
fb:8d:74:0c:d8:3b:bb:ea:18:fd:42:3f:3f:a2:0c:
f8:f2:9a:d7:74:ab:4a:dd:d1:eb:8e:ef:45:35:71:
e6:9c:3b:5f:b0:d6:af:5a:27:92:91:ca:1e:96:aa:
9c:db:4e:10:71:cb:33:fb:1d:a6:67:e3:1c:c7:9d:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A6:50:45:EC:A1:1D:21:7C:F9:A8:85:AE:68:1C:48:85:69:99:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B5751A1C5011F0A36F35E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.156.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:20:bf:16:dc:52:c3:1d:8d:c9:8d:12:ea:21:bc:cb:5e:6b:
7f:b6:5a:a2:5f:75:3b:9a:52:53:76:34:61:31:20:b3:92:4e:
fe:3c:42:d5:7e:de:1d:c0:9d:2c:63:dc:90:34:61:b5:f9:49:
f6:d7:f7:db:34:f9:ed:df:73:72:23:77:50:e9:ed:2d:4b:b2:
8e:1b:31:5b:c6:cf:b2:13:75:77:d7:f4:2b:f9:ab:d5:53:63:
df:be:37:70:0d:53:a1:ed:81:ae:c5:f5:da:eb:c4:16:51:8c:
39:ea:9a:f3:37:48:7f:0e:7b:97:ec:6d:eb:53:4c:b5:df:2e:
87:e2:83:09:9a:09:03:ae:21:28:8a:9f:5f:4b:76:ca:18:b2:
3b:55:a1:55:b3:02:12:1a:0d:64:5a:b9:2e:82:37:e4:d1:5c:
32:55:e9:1a:0c:95:fd:5a:8b:71:2c:a7:78:23:23:4f:18:39:
6c:ab:1e:94:54:a3:55:79:a4:66:47:ed:95:f0:69:cf:5e:04:
d0:57:44:c0:36:0e:f1:97:ee:65:a8:17:a3:1f:9b:41:87:ca:
ee:df:07:36:b3:cf:b9:ee:88:9a:dc:34:cc:e7:a9:57:3f:12:
59:ba:4d:1b:47:ac:45:cd:e2:90:19:18:1f:5e:c8:3b:04:ec:
b6:2c:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:41 2025 by rpki-client