Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5598CE01D0211F0ACB2C690DAE4EC9C.roa
File: F5598CE01D0211F0ACB2C690DAE4EC9C.roa (raw, json)
Hash identifier: +w1HVL7vUgfMt/UP9MemFH7kDLl/k9rRvBW5rvHepJ4=
Subject key identifier: F7:4F:6E:48:11:87:F7:EB:AA:53:5D:64:74:15:9A:00:52:2C:1E:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017A19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5598CE01D0211F0ACB2C690DAE4EC9C.roa
Signing time: Sat 19 Apr 2025 09:45:00 +0000
ROA not before: Sat 19 Apr 2025 09:44:55 +0000
ROA not after: Mon 28 Apr 2025 09:44:55 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96793 (0x17a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 09:44:55 2025 GMT
Not After : Apr 28 09:44:55 2025 GMT
Subject: CN=6803709b-4dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:81:10:0e:b1:c7:68:d1:47:5b:d7:28:e8:
43:37:b5:e9:57:01:57:79:7b:ef:ca:56:4a:99:1b:
8c:04:70:c5:47:4d:68:8d:0d:b9:80:5d:ab:31:a1:
55:72:71:21:8c:f4:09:03:2c:49:7e:d9:ee:f9:62:
22:3e:75:27:34:43:bf:11:86:cf:f3:dd:ca:1e:ff:
96:86:81:e1:c9:e5:f5:bc:61:ad:95:8d:ea:f2:bc:
18:87:eb:da:9e:55:b0:8f:17:5c:29:f8:2e:16:a1:
f7:11:d1:09:57:7d:ce:9f:0f:2f:ad:6a:3c:c1:7d:
8d:eb:cf:89:ff:c6:c0:21:9e:d6:4d:1e:3a:85:78:
03:55:ab:cc:6a:0e:ae:1c:14:00:50:01:b6:d3:00:
4f:70:0d:09:c4:f2:d4:98:e1:97:69:03:dd:9d:2f:
0c:16:36:97:5a:53:2e:1e:d2:5a:37:40:62:20:da:
68:8d:3e:d3:e5:d4:f2:e3:c8:9a:d3:f1:5d:16:77:
f4:71:35:45:7a:27:dd:6b:bb:5a:1f:63:8a:a3:50:
70:b4:98:6d:e2:ef:79:eb:72:68:f1:08:4b:21:cf:
ba:f2:0b:7e:43:8d:d1:39:29:fc:5c:4e:b3:fa:cd:
36:63:06:5b:56:f8:91:a6:15:4a:6d:8f:10:ab:0f:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:6E:48:11:87:F7:EB:AA:53:5D:64:74:15:9A:00:52:2C:1E:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5598CE01D0211F0ACB2C690DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:7c:e9:69:2b:5b:ac:57:d3:10:98:5e:f5:44:37:70:82:eb:
99:b1:54:e6:8d:8f:c2:96:ad:2e:9c:d6:b8:46:bd:f6:d5:fd:
54:5a:60:96:cc:16:cd:a4:d4:ca:03:14:e7:2e:42:b5:b4:3c:
59:01:cf:65:55:b8:4a:8c:13:19:a7:74:ce:4a:50:4b:a4:2d:
39:3b:a2:73:f6:57:17:16:64:f4:1c:07:40:f0:4b:a0:06:c2:
b1:f1:6f:ec:34:3f:9a:5c:70:6c:01:09:9f:1e:e9:f3:51:c5:
84:b5:a0:3e:37:fc:52:1d:7d:d5:05:4b:41:2a:1d:55:b1:ae:
64:b5:ab:69:76:9a:1f:b0:4d:1e:9d:be:d3:44:b4:8c:fd:78:
d4:81:55:08:53:9d:bb:41:a2:e9:b5:2a:94:ba:e0:e3:21:99:
46:a1:d6:90:91:fc:3c:b8:d8:f2:c1:9b:39:29:b7:41:68:09:
30:7e:45:90:17:86:0e:a2:de:b3:c7:a9:3a:68:6b:15:18:cf:
89:46:6c:8f:91:f2:85:3b:4b:75:69:90:62:3d:a9:ad:10:e6:
c2:e3:15:3f:d3:ab:5e:93:f1:3a:2b:8b:02:1c:c0:5b:34:a4:
5e:23:a5:4a:f4:cd:43:32:62:74:e5:96:3a:fe:9f:c2:dc:10:
28:c5:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:55 2025 by rpki-client