Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BD47456226A11F08F203BB9DAE4EC9C.roa
File: 9BD47456226A11F08F203BB9DAE4EC9C.roa (raw, json)
Hash identifier: e4u1XYJxMEw61dB41KUH8ryfBF2PqXBkn0cz2Z9sIKk=
Subject key identifier: 3A:C9:34:5E:C9:60:6F:65:AC:1A:76:A4:AC:30:13:05:A7:02:5B:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BD47456226A11F08F203BB9DAE4EC9C.roa
Signing time: Sat 26 Apr 2025 06:49:33 +0000
ROA not before: Sat 26 Apr 2025 06:49:27 +0000
ROA not after: Mon 02 Jun 2025 06:49:27 +0000
asID: 57043
IP address blocks: 154.84.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97086 (0x17b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 06:49:27 2025 GMT
Not After : Jun 2 06:49:27 2025 GMT
Subject: CN=680c81fd-971f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:45:32:78:fc:f2:46:25:dc:64:ef:3f:63:
45:99:e5:45:1e:03:c1:53:3d:45:c3:c4:06:09:c0:
b7:94:27:af:fc:5e:11:9c:4f:9b:19:2a:18:a0:6f:
e8:cd:03:23:16:23:9a:c5:fe:55:92:42:68:bc:01:
10:34:c9:5f:60:24:32:3d:ab:99:1a:e8:7b:c5:ed:
dd:18:61:db:c2:a5:8e:df:66:5e:f6:d6:5d:13:1d:
b7:ed:ba:4c:8e:b7:43:4d:fd:23:ac:f5:98:19:46:
57:69:51:b8:72:fb:ef:6d:1d:dc:cc:4a:5f:fc:1a:
36:47:6e:ad:c4:70:3d:ee:54:9a:69:8b:ca:d5:9a:
68:f5:38:8a:02:8e:6d:62:6e:76:68:9e:c3:94:68:
b1:78:b6:51:9f:22:c3:9b:1b:2a:78:a5:89:35:47:
c1:63:77:38:84:eb:ea:78:1b:e4:30:0d:1b:51:6e:
b8:a0:83:76:5b:4b:08:3d:4e:8c:2e:b7:9f:30:7c:
96:be:57:0d:50:04:fc:9f:26:13:63:31:10:ff:ae:
f0:4b:c6:73:03:76:14:64:07:c7:32:d8:4b:94:59:
f9:62:4a:6b:a6:77:31:7e:42:34:78:96:e3:0b:bd:
f2:b2:89:a1:5e:29:0f:e7:e4:cb:b5:d4:be:b1:93:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:34:5E:C9:60:6F:65:AC:1A:76:A4:AC:30:13:05:A7:02:5B:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BD47456226A11F08F203BB9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.136.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b2:d3:6b:ca:ec:77:c6:6c:b0:5a:8a:bc:45:51:85:38:ff:
db:88:a1:87:dc:4d:c3:ba:87:9b:1f:3b:a1:de:35:20:90:85:
b7:35:c1:8b:f4:31:8b:27:8b:a4:98:2f:f0:26:d8:03:9d:69:
5e:20:69:dd:0f:58:e9:1b:30:f8:0c:54:de:17:de:61:74:12:
98:f6:3b:f8:ee:ed:f3:cf:a0:41:cb:40:f8:bc:30:dc:b7:22:
7f:f9:3b:85:2d:99:28:16:da:a6:01:eb:1d:80:4a:c3:91:e1:
3a:84:fa:d4:1c:14:d3:6f:02:04:a3:ff:31:9f:04:21:59:80:
ca:a8:93:27:22:85:bd:f1:a1:41:2b:41:21:fb:e9:8c:c9:31:
8c:21:11:cd:20:17:4f:7d:8f:c1:f8:be:82:bd:7a:99:24:76:
ad:11:58:ee:e6:4e:8d:3d:97:90:3e:37:02:74:a6:cd:d6:dc:
c9:46:5b:e7:1a:27:be:59:04:d6:86:1d:df:05:fc:10:7f:4f:
3c:ff:05:56:4a:81:b2:77:39:3f:66:c2:ff:bb:d0:da:06:44:
49:7d:7b:69:73:6b:6d:d2:0f:d2:e0:f9:0f:6a:9d:ae:81:18:
90:f2:a5:80:38:b9:3e:1a:14:ab:17:ce:47:53:b0:20:07:c5:
04:c2:13:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:32:48 2025 by rpki-client