Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD5A4D603BA711F0BC690ABFDAE4EC9C.roa
File: CD5A4D603BA711F0BC690ABFDAE4EC9C.roa (raw, json)
Hash identifier: uy1Z2jd2lchdHTtNCEKmPsnw2/Xm3Cs2NpFBOELCLEU=
Subject key identifier: 04:B7:9F:E9:0F:CE:79:B4:0C:21:B0:AA:C9:C2:56:CB:14:29:3F:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018336
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD5A4D603BA711F0BC690ABFDAE4EC9C.roa
Signing time: Wed 28 May 2025 09:40:34 +0000
ROA not before: Wed 28 May 2025 09:40:29 +0000
ROA not after: Sat 09 May 2026 09:40:29 +0000
asID: 209242
IP address blocks: 154.83.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99126 (0x18336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 09:40:29 2025 GMT
Not After : May 9 09:40:29 2026 GMT
Subject: CN=6836da12-d79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:00:66:55:8a:ba:e0:1d:ab:de:f6:02:bf:
8c:61:02:9a:81:65:80:d9:11:67:0d:7e:3a:c8:31:
f5:95:e6:88:bd:ab:66:fc:fd:2e:45:82:4d:69:82:
f5:91:be:37:22:2a:c9:83:b7:5b:c0:86:26:5d:fe:
7b:07:d6:0f:0c:92:b3:81:c4:24:4c:44:5a:59:ed:
9d:ed:25:ff:56:b3:19:d2:ea:60:9f:7c:7e:58:d6:
96:b1:c1:65:1b:64:a9:4f:2f:74:a2:93:2a:f1:ab:
99:88:d7:7d:5d:2c:f9:38:69:48:37:3e:89:f2:a0:
f4:d9:5c:d5:0b:b3:24:d1:b5:dd:4b:f9:0a:72:f1:
67:4f:cc:b4:5c:50:bc:21:6b:fc:8a:83:85:dd:b1:
df:c8:69:5b:9a:75:1c:a0:ff:db:63:ee:96:df:80:
4b:63:93:c0:cc:51:e7:37:b4:8b:94:aa:51:d9:74:
ac:cc:da:38:6a:89:c0:f4:7c:3c:32:92:07:17:ed:
de:a3:b0:c7:87:5f:68:0f:af:49:2a:5f:df:ea:7a:
77:29:80:da:7e:f6:10:12:09:4f:bd:22:a2:ac:be:
81:cd:37:26:09:c3:81:99:aa:fc:a7:c0:b4:16:e6:
a9:cb:51:6c:84:1f:91:ed:93:a8:4a:c8:c0:67:b2:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B7:9F:E9:0F:CE:79:B4:0C:21:B0:AA:C9:C2:56:CB:14:29:3F:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD5A4D603BA711F0BC690ABFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.2.0/24
Signature Algorithm: sha256WithRSAEncryption
89:20:95:e1:fb:c6:e6:b6:72:f1:22:44:f6:e1:3d:e8:5d:1f:
aa:d6:55:0c:5d:a6:33:72:71:3d:f3:b4:4f:e6:fd:77:46:43:
1d:2e:8b:6b:56:ae:ee:16:96:60:76:c7:4c:5b:31:30:6a:22:
22:1f:83:97:6a:fe:b2:0b:ff:7a:ff:81:40:43:fe:43:72:7a:
87:14:54:9c:66:1b:53:8b:98:28:5c:8b:18:de:5d:89:a8:2a:
94:88:1b:cc:f8:77:03:c7:b2:f1:c3:44:74:a4:3c:47:44:e3:
ba:05:1c:e4:e1:68:59:2a:bb:63:3c:4b:27:59:c1:49:0d:84:
5e:3d:15:a5:09:86:5e:49:0f:91:92:9a:62:2d:e8:3c:62:c8:
69:ad:b1:51:49:8c:4d:64:cf:15:92:f3:4d:ca:ec:ce:39:a4:
91:da:b6:f0:74:3a:92:15:28:4a:01:f3:ef:73:ad:df:b2:5e:
17:95:55:14:be:bf:fb:e3:20:04:97:73:24:5a:de:ec:51:68:
03:98:6b:73:d2:62:2b:7d:65:5e:af:cd:21:0d:f0:5d:64:ca:
95:b2:5a:38:0a:9b:8e:e8:bf:bf:a4:40:1e:75:76:88:c8:7b:
cf:50:97:52:48:ff:ff:cb:1e:25:5c:45:b1:9e:bc:af:d2:3a:
0f:1a:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:57:25 2025 by rpki-client