Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B51488A81CFB11F0B20EB1DFDAE4EC9C.roa
File: B51488A81CFB11F0B20EB1DFDAE4EC9C.roa (raw, json)
Hash identifier: EGBlDBFJkQ8GB/9PCLYU74h/grD1vXrdFu0Eg8aHfbU=
Subject key identifier: 66:48:A0:1A:97:C7:C3:7E:2D:8E:E8:2D:15:C1:99:1C:D3:58:EC:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B51488A81CFB11F0B20EB1DFDAE4EC9C.roa
Signing time: Sat 19 Apr 2025 08:53:05 +0000
ROA not before: Sat 19 Apr 2025 08:53:00 +0000
ROA not after: Mon 28 Apr 2025 08:53:00 +0000
asID: 9465
IP address blocks: 154.212.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 08:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96783 (0x17a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 08:53:00 2025 GMT
Not After : Apr 28 08:53:00 2025 GMT
Subject: CN=68036471-582a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:c8:a1:98:b6:31:71:b3:0c:04:ea:d1:75:
06:04:2a:bf:7b:3b:c8:62:f4:45:eb:f3:f3:50:d7:
55:ca:69:53:af:c1:aa:27:6b:81:7c:1b:3b:aa:03:
18:71:12:7d:69:af:2e:74:54:b3:61:c2:76:83:d2:
98:c0:47:34:82:aa:e7:0f:a0:86:66:15:14:f8:50:
18:8a:5f:bc:f1:ae:50:6f:e2:c6:39:0f:c6:dc:b4:
07:40:28:dd:91:3b:30:fe:5b:11:a2:bf:7d:9d:a5:
b2:ce:55:c0:2f:4c:8d:3e:10:79:b4:7e:8a:3b:4c:
b2:19:1c:8f:24:ef:92:84:ed:67:92:4b:98:1d:38:
d3:af:78:b9:68:a5:09:23:ab:7a:2f:89:41:d3:a6:
40:7b:be:6a:bb:52:40:1e:ca:6e:12:f7:26:06:2d:
93:28:31:bf:4b:5f:83:12:24:a7:b5:1f:ed:9a:13:
d7:43:b8:88:12:da:78:c0:e4:fa:18:d2:08:49:ba:
cb:37:e6:97:fc:c4:b8:52:44:85:89:92:07:67:90:
27:b1:8b:da:67:f8:17:82:33:0c:f7:34:4f:c3:b8:
33:3b:91:37:a9:c2:9b:44:dd:45:b6:d9:71:b5:89:
36:92:b0:60:c4:af:ad:86:50:65:df:ff:cf:15:e7:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:48:A0:1A:97:C7:C3:7E:2D:8E:E8:2D:15:C1:99:1C:D3:58:EC:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B51488A81CFB11F0B20EB1DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:50:81:2b:40:cc:1e:ef:c7:59:3a:7e:18:b3:8a:c5:25:a6:
b9:09:9c:f8:b2:29:56:41:69:5d:9e:2d:9f:3c:17:ac:63:2a:
7b:d4:aa:bd:89:0e:ab:3c:46:54:77:52:aa:3b:8a:90:1f:0b:
66:11:f6:93:46:75:9d:2a:63:ee:77:5c:a5:75:e1:ac:4c:88:
d3:d3:00:32:35:b4:a5:bf:c6:c4:9a:dd:f5:85:a5:96:d6:91:
cd:16:22:a7:00:03:78:8b:ef:3a:d8:b4:f6:24:45:f6:79:f1:
48:db:bd:02:d5:e4:3f:4c:a0:53:cc:1c:8d:a6:d9:a1:94:f9:
f4:60:6f:c9:be:6c:75:fc:aa:62:3d:4d:be:4a:78:d2:41:46:
7a:97:fd:41:e5:ec:a2:07:7b:a8:33:8a:93:8a:d6:3c:69:4d:
a3:94:af:f9:c8:4c:d5:c7:1e:81:ea:d6:e4:df:ac:3f:dd:21:
ef:a6:e5:40:82:42:13:ba:33:e5:fc:6a:63:48:ab:f6:03:3a:
6a:9b:1f:2b:d4:2f:24:18:3a:01:8c:cd:0b:e4:f9:fa:25:ee:
f3:9a:1a:6e:eb:47:e7:e5:df:ad:1f:d4:03:76:41:8b:f7:6b:
7f:58:2c:91:80:09:d2:f5:f6:d7:8f:45:5e:fb:fc:83:a1:a8:
25:72:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:16:12 2025 by rpki-client