Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8920A9621A311F0B9F8F089DAE4EC9C.roa
File: E8920A9621A311F0B9F8F089DAE4EC9C.roa (raw, json)
Hash identifier: etwpEsEg8Zc20Q+5uZRf33G8XtIh5DlzRw/VwjtbWwI=
Subject key identifier: 54:9C:FB:7B:E9:AC:B3:51:EA:7F:3D:58:3C:15:35:01:4C:51:A8:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017AEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8920A9621A311F0B9F8F089DAE4EC9C.roa
Signing time: Fri 25 Apr 2025 07:07:12 +0000
ROA not before: Fri 25 Apr 2025 07:07:07 +0000
ROA not after: Fri 09 May 2025 07:07:07 +0000
asID: 135097
IP address blocks: 154.197.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97007 (0x17aef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 07:07:07 2025 GMT
Not After : May 9 07:07:07 2025 GMT
Subject: CN=680b34a0-622f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:5c:28:c0:31:e7:3c:fd:b8:3f:07:ea:53:
c8:84:76:4d:89:65:58:d2:b5:d6:42:4e:86:65:7b:
56:2f:0f:64:bf:a7:dd:af:83:b6:98:77:5f:3e:f5:
16:8c:3b:0a:1b:e8:3e:c4:fb:af:b0:e8:1b:4a:aa:
b6:64:f8:57:99:a7:72:2a:86:69:1f:ce:5f:21:5a:
41:fa:89:0c:ff:73:93:78:f6:53:d5:9f:24:cc:ad:
d1:9a:81:e3:32:25:93:08:34:b0:ef:8d:3b:85:81:
dd:da:59:a8:e5:77:9c:bb:c1:06:da:d7:71:83:43:
a5:47:57:75:f2:73:8e:2e:39:58:d6:f1:06:c4:ff:
52:b5:4b:9c:45:de:09:08:30:e4:05:55:f9:9a:01:
5c:31:21:84:fc:0f:30:0d:5c:c8:cb:f5:e7:a4:72:
dd:85:a9:64:84:85:ae:b8:cc:48:04:48:32:81:ff:
32:f1:ea:ed:36:ec:72:1e:f8:45:55:79:1f:7b:d7:
36:44:92:23:3d:99:09:e1:4f:d9:79:b2:ea:df:ee:
70:16:04:c8:10:b8:34:df:0e:d9:c9:bf:9b:07:94:
b4:5a:f9:80:f0:2b:63:5d:e9:c0:65:e9:7f:98:d2:
10:c4:4e:a8:b2:4e:18:72:b2:21:36:7f:be:08:32:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9C:FB:7B:E9:AC:B3:51:EA:7F:3D:58:3C:15:35:01:4C:51:A8:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8920A9621A311F0B9F8F089DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.128.0/17
Signature Algorithm: sha256WithRSAEncryption
cb:0d:1d:6b:99:88:ba:98:71:be:9f:dd:00:dc:52:99:35:55:
d7:f7:1d:48:95:c8:8f:5f:4e:1f:1e:60:a9:1e:28:50:59:fe:
d2:bf:23:d1:95:d8:69:04:f6:09:c0:06:6b:56:13:01:30:bf:
75:ba:92:c6:4e:ec:d8:cf:bd:27:96:c9:e3:ac:65:d2:dd:f5:
8c:1c:d4:48:69:87:47:b6:fa:70:5c:55:fa:e0:2b:14:e2:7a:
5a:78:a0:4d:6f:d2:2a:c7:00:3c:fe:5e:c4:e6:7a:f7:7b:d8:
32:ca:ba:bd:e6:46:2b:3e:20:bc:11:87:60:57:a1:6c:bb:be:
89:f4:e8:7a:2f:00:c8:bd:c7:e8:67:cf:f4:79:e1:08:69:00:
35:e8:e2:58:69:bb:4d:3a:b8:2d:b2:fc:13:db:e4:36:a5:81:
97:f0:12:08:c3:13:13:d0:f7:41:f7:06:8f:57:ad:f1:5c:8d:
10:4a:55:4b:2c:48:93:1d:b7:95:68:aa:1c:69:dd:dc:37:44:
9e:fa:18:9f:0d:4c:9c:c1:9b:9f:9b:af:fc:cc:46:0c:da:c7:
e8:64:85:87:f6:59:93:24:ea:fa:86:9d:a6:84:ca:90:d7:0d:
81:54:54:17:e4:75:13:a5:50:3e:b4:06:43:d1:ad:0c:8a:7b:
43:3f:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:05 2025 by rpki-client