Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18E42D6190111F09A24F9F16DB8BCC6.roa
File: F18E42D6190111F09A24F9F16DB8BCC6.roa (raw, json)
Hash identifier: 3Q1l3eqyd9ueydrysnwECuVjCWXYNYuuBKlk6JUccpM=
Subject key identifier: 25:22:B0:6E:1F:16:CB:29:8E:3E:74:DD:71:79:95:6A:EB:46:4F:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01790F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18E42D6190111F09A24F9F16DB8BCC6.roa
Signing time: Mon 14 Apr 2025 07:27:39 +0000
ROA not before: Mon 14 Apr 2025 07:27:34 +0000
ROA not after: Sat 28 Mar 2026 07:27:34 +0000
asID: 132513
IP address blocks: 154.197.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 07:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96527 (0x1790f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 14 07:27:34 2025 GMT
Not After : Mar 28 07:27:34 2026 GMT
Subject: CN=67fcb8eb-624b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:12:23:aa:b0:af:e4:43:b9:81:c5:6c:ba:
10:39:1c:af:8e:ce:55:80:8f:38:71:d5:96:7c:7e:
e7:ad:bf:eb:eb:10:b6:36:c9:fd:b3:a4:f1:2c:4b:
82:16:18:4b:04:dc:93:5f:3d:5a:4f:4b:86:54:c9:
9f:ea:54:9a:3f:8a:c3:12:9d:93:26:3b:a4:10:f0:
46:4b:82:0a:eb:cc:7c:3c:39:58:af:49:d6:05:f7:
5e:2a:ba:d4:71:ea:11:76:28:7c:05:ca:71:a2:11:
88:d1:25:62:1f:0e:bd:df:b3:69:66:6b:e8:19:59:
d2:07:95:39:7a:eb:38:b7:fe:ae:f4:2d:0c:18:ef:
57:3f:d6:a5:99:9d:05:b8:b1:41:aa:ba:a6:62:01:
b1:9f:53:b9:4b:b9:47:be:06:a6:e6:1b:1f:4b:cf:
4d:ae:bc:d6:1b:df:a1:53:74:d6:a0:15:07:61:bc:
8c:f5:84:9c:34:c5:23:e5:35:7a:15:16:57:af:21:
4c:3d:d0:88:fb:aa:a8:06:4b:05:e6:5c:90:5e:b5:
e0:dc:a2:b2:17:b4:56:33:75:bc:84:99:15:7a:14:
3b:61:5d:0f:a4:5f:f1:a0:66:41:af:17:41:95:a5:
4d:74:09:71:70:ba:c9:cb:5f:f4:11:04:e1:c6:e0:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:22:B0:6E:1F:16:CB:29:8E:3E:74:DD:71:79:95:6A:EB:46:4F:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F18E42D6190111F09A24F9F16DB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.44.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ad:bf:46:30:c5:d1:ec:c5:d1:80:ff:eb:cb:d2:b1:3f:4c:
1b:34:e8:bb:0e:83:b6:29:59:5a:c7:01:71:9c:1c:8c:94:e5:
2e:66:3f:31:e4:fe:b5:8e:08:cb:10:b8:fc:5c:d5:19:49:0e:
7b:b9:6c:54:75:3e:9b:c2:75:6e:9b:90:e8:4c:7a:b6:a6:42:
fd:29:c2:5c:d0:77:19:a5:6a:86:64:93:56:01:65:55:24:42:
94:ba:4c:a8:f3:74:fa:fc:97:fa:a5:3e:67:cf:4c:f4:64:c2:
e9:84:3c:af:fb:91:9d:ab:44:1b:c3:53:da:df:ce:4a:54:87:
21:74:e6:bb:24:04:e0:46:a0:0c:f5:3b:07:e3:af:45:be:83:
0e:0b:34:38:8b:2a:3e:79:86:94:92:82:b1:1c:ef:df:d6:e1:
a2:20:d5:39:83:67:97:98:b6:d2:25:22:c3:b1:18:59:c0:4f:
b7:b9:57:4b:e0:8b:48:0c:fd:a8:05:32:61:e1:7f:ed:30:cc:
61:28:d2:77:67:43:e4:9a:7b:99:d8:fd:15:f4:85:1f:65:f9:
33:03:00:89:2c:39:e5:f8:86:e4:9a:b2:91:1f:42:ae:85:35:
cf:10:cb:37:f9:7a:a2:42:f2:a5:a0:63:ac:8b:2f:3a:2f:7b:
ad:5b:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:20:40 2025 by rpki-client