Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4EFBAB01E8311F0A46F08A0DAE4EC9C.roa
File: D4EFBAB01E8311F0A46F08A0DAE4EC9C.roa (raw, json)
Hash identifier: Ayhhkh4lB+jKkcFntXGCBikGZlmNyvYgwyDb4rS51p4=
Subject key identifier: 9E:09:05:DD:8A:0B:BB:F6:6F:14:01:C2:1F:2E:70:45:5D:0E:C6:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4EFBAB01E8311F0A46F08A0DAE4EC9C.roa
Signing time: Mon 21 Apr 2025 07:40:01 +0000
ROA not before: Mon 21 Apr 2025 07:39:56 +0000
ROA not after: Sat 10 May 2025 07:39:56 +0000
asID: 53808
IP address blocks: 154.94.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96840 (0x17a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 21 07:39:56 2025 GMT
Not After : May 10 07:39:56 2025 GMT
Subject: CN=6805f651-2ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:0c:d3:cc:a9:d4:b3:69:fd:b8:b9:93:46:
ec:83:22:e4:fe:0a:5f:c4:3d:dc:f5:f4:43:ae:31:
c8:8d:7c:a0:91:e2:1b:d8:a4:aa:25:e6:56:bd:6c:
93:9a:2c:0f:47:99:a7:bf:38:c1:7d:b9:3c:e2:6d:
5a:21:11:14:7e:d8:89:d5:31:d6:11:c5:19:99:d8:
81:84:2c:2a:6e:41:d8:18:81:d7:ae:e5:22:f1:20:
0c:c3:ff:f6:0e:8e:e0:31:3c:32:e6:7d:9b:37:88:
3e:2d:59:d6:18:18:48:83:72:2e:55:1c:aa:f7:77:
6a:61:05:4d:f4:cc:3c:87:04:5e:60:bd:8c:9e:89:
ae:d7:db:74:66:5f:16:43:8d:bf:38:e4:1e:6e:2d:
77:6c:24:4a:1b:9c:97:75:00:dc:9c:a9:eb:88:4e:
2f:ef:39:f3:af:5e:4c:be:20:f2:47:af:97:9e:7d:
d2:59:28:b8:8d:0d:0a:c6:4d:7b:78:f3:fe:4a:d4:
2c:23:21:3d:2d:67:5d:c9:5e:b5:09:73:1d:4f:3d:
c2:a5:a1:7b:5b:df:b3:37:9d:13:50:74:c3:25:7e:
6c:fb:04:37:47:87:7e:ce:0b:9f:44:1b:5d:fb:d9:
d6:1a:1e:2a:c8:03:d8:6b:6e:fa:c0:d0:85:43:55:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:05:DD:8A:0B:BB:F6:6F:14:01:C2:1F:2E:70:45:5D:0E:C6:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4EFBAB01E8311F0A46F08A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.226.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:16:82:2b:81:2e:9b:f4:7f:7c:cc:4b:ab:ee:40:34:d0:91:
19:8b:ef:b0:a0:42:2f:1b:8f:30:8a:c3:25:b6:84:26:49:d4:
6d:be:b2:66:5f:22:93:b0:7c:cf:3b:6d:26:84:65:7a:a0:d1:
58:d1:88:77:95:79:09:ba:7e:33:fd:2c:9a:03:b6:25:65:5a:
46:db:24:70:7b:57:f1:1e:e1:b8:03:ff:84:4d:31:55:a3:ae:
de:d6:03:67:d4:9e:c7:55:f6:32:01:1d:f3:d2:ed:4a:f0:b9:
92:9b:1c:a1:d2:1d:1c:cf:03:9d:fc:0c:0f:df:d2:5a:72:b2:
18:83:c4:db:5a:b4:79:4e:a1:53:34:b3:03:f8:b2:e6:d3:b0:
e5:60:ca:12:00:22:e2:3e:6c:9f:15:f8:ed:f4:5c:96:1e:0b:
8e:30:c4:ac:af:1c:b2:60:24:d2:32:b7:65:15:97:05:e2:7c:
dc:2e:94:0d:e7:b8:aa:e9:8d:f1:cb:34:f5:69:2f:bd:73:b9:
d1:29:ed:4d:a3:49:dd:88:61:c0:60:08:f7:0e:a3:96:ed:8c:
5f:cd:8b:21:03:10:80:24:1a:f1:64:75:37:45:45:03:05:da:
64:c1:11:85:d0:8f:80:4f:c4:18:ee:4f:22:b9:1d:09:6f:f7:
86:90:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:21:21 2025 by rpki-client