Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CCCED84225611F083B678B2DAE4EC9C.roa
File: 9CCCED84225611F083B678B2DAE4EC9C.roa (raw, json)
Hash identifier: IAay1qjajOYDEsvQHlsGZUVl61BNryWKYGIIMXH57+A=
Subject key identifier: 5B:E2:A8:69:34:C0:3A:D1:94:29:AD:DE:C9:E4:6D:19:E7:8F:83:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CCCED84225611F083B678B2DAE4EC9C.roa
Signing time: Sat 26 Apr 2025 04:26:25 +0000
ROA not before: Sat 26 Apr 2025 04:26:19 +0000
ROA not after: Fri 02 May 2025 04:26:19 +0000
asID: 54801
IP address blocks: 154.200.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97084 (0x17b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 04:26:19 2025 GMT
Not After : May 2 04:26:19 2025 GMT
Subject: CN=680c6070-e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:ea:5e:ad:26:b5:aa:31:4f:6c:d8:7e:67:
ca:b8:f4:c7:3b:f3:0c:a4:25:4e:a1:75:05:68:40:
10:5f:ea:3d:be:64:d1:bd:3a:f6:47:a7:4f:4c:5e:
2d:14:3c:b6:a1:fe:bf:28:b3:36:dd:e9:1c:9c:4e:
81:8b:d5:5f:76:b0:19:f6:0a:53:ba:3f:89:f2:57:
4e:08:e9:bc:5c:21:b9:0f:c9:44:a0:2c:c5:a8:3b:
24:fa:51:c4:b6:b8:ca:a2:44:37:f0:34:4f:51:df:
cb:9d:75:67:b6:c5:c2:ed:d4:56:e2:c8:2a:c8:0e:
11:e8:68:82:38:c8:ac:fa:11:bb:50:2e:60:db:00:
f4:b6:9d:bd:e6:0d:0d:9c:06:cb:3e:34:39:03:ec:
dd:2e:24:f1:06:e2:72:c1:b8:f6:5b:0e:b3:1d:6c:
e5:20:a4:b2:83:ef:04:37:07:ca:71:2f:f9:25:f6:
5c:40:99:2d:bd:f1:00:a9:90:5f:c1:f3:bc:dc:8e:
a9:8a:5d:df:49:5b:85:e7:f4:2a:f0:4a:00:ab:ec:
64:8f:b0:04:0a:84:f2:16:82:5c:52:c9:fe:c3:1c:
ca:83:a0:da:68:1d:87:e1:94:58:ce:ae:6f:72:25:
1c:e2:90:ee:b1:92:2f:b0:c8:af:23:dc:b9:e4:fc:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:A8:69:34:C0:3A:D1:94:29:AD:DE:C9:E4:6D:19:E7:8F:83:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CCCED84225611F083B678B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.248.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:00:b4:dc:d3:c4:47:d9:d7:4a:d1:fe:a8:90:ad:b8:29:5f:
57:2e:e9:a4:1b:37:f1:b6:79:ee:18:21:d4:bc:0d:85:be:86:
97:8f:e9:1d:b3:e2:75:e4:77:9b:f9:51:1b:3a:27:27:02:58:
ed:70:a7:ef:87:86:d8:0c:5a:02:8d:ab:5f:ce:75:3d:27:f4:
6b:ed:1e:20:31:90:1e:c9:0b:7d:53:c0:d8:7a:2f:19:26:31:
7f:cc:d2:c2:1f:cd:71:f6:08:ac:e6:57:c0:b5:46:fe:63:3c:
50:92:57:4d:a5:0e:ce:d2:ef:15:6a:3c:97:57:d7:77:7d:8b:
15:da:ac:d0:3d:48:20:00:ac:03:7a:a6:80:b6:40:16:c5:f2:
eb:a6:de:68:f3:06:d3:6c:af:ac:0e:95:b6:a3:52:9a:b3:ad:
a9:4b:ab:fd:5c:a4:9f:d3:e2:34:48:b9:72:f6:cf:d9:b2:a3:
7a:d4:d6:32:ec:a3:70:4d:42:48:58:a2:ca:cd:47:79:69:ff:
1c:2f:70:ca:d7:6a:6c:16:bc:7a:34:9b:03:a6:3a:5c:cb:66:
74:b7:15:6f:ed:87:7c:59:79:8e:7b:f2:13:bf:e9:25:32:a4:
76:e7:01:c2:d8:07:03:02:ce:db:33:a6:bd:a4:51:06:ed:1c:
5d:7c:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:28 2025 by rpki-client