Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA0B5F821B711F0802D2C8DDAE4EC9C.roa
File: FEA0B5F821B711F0802D2C8DDAE4EC9C.roa (raw, json)
Hash identifier: +XCZ6jReZmhPy8kzPmSNBOaCfd3JsY6FVG7c/kAATOs=
Subject key identifier: 66:55:DD:67:FA:00:CA:9F:38:DC:68:F0:99:54:1E:65:24:98:C6:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017B0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA0B5F821B711F0802D2C8DDAE4EC9C.roa
Signing time: Fri 25 Apr 2025 09:30:59 +0000
ROA not before: Fri 25 Apr 2025 09:30:54 +0000
ROA not after: Mon 25 May 2026 09:30:54 +0000
asID: 984
IP address blocks: 154.213.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97035 (0x17b0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 25 09:30:54 2025 GMT
Not After : May 25 09:30:54 2026 GMT
Subject: CN=680b5653-309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:b5:44:8a:a8:d9:5a:f0:c0:24:91:15:4c:
ec:2e:24:e3:08:ab:a2:42:fa:bf:e1:8e:52:4d:f1:
c9:29:07:41:d6:f4:0b:7a:cc:1e:43:55:38:2c:f0:
80:8d:fd:8a:07:78:67:a5:4e:4b:33:30:d3:14:80:
38:cf:89:83:97:82:b2:1d:a0:e9:ba:31:72:d2:61:
2f:22:d2:53:99:be:1a:7d:4f:df:a6:ac:ef:e8:ef:
94:37:1a:48:e7:0a:29:18:d8:71:88:86:ca:2b:ad:
17:32:dc:ce:6a:2a:32:74:88:71:39:ae:03:10:e1:
8a:f8:79:c5:ce:b9:b7:ef:2a:97:56:75:99:5e:4f:
38:5e:85:dc:4a:5a:5c:15:3e:5c:db:94:50:45:93:
8f:3a:f0:e6:ba:a5:6d:5a:f3:c4:9e:19:9f:d0:56:
40:dc:c5:36:71:ac:73:67:81:f5:34:ae:09:e8:c7:
66:f2:88:78:b2:18:b4:0c:57:1f:12:f9:4e:0a:9f:
92:a2:51:d0:5d:e8:86:b2:97:2f:b9:97:1f:10:49:
02:30:7b:b4:0b:a6:4c:ec:0e:79:cd:e5:a4:54:0d:
ad:d4:96:d2:26:7d:56:44:0e:88:db:21:d7:31:65:
dd:b2:ca:91:c5:ab:43:56:01:0b:2e:b3:33:d2:b5:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:DD:67:FA:00:CA:9F:38:DC:68:F0:99:54:1E:65:24:98:C6:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEA0B5F821B711F0802D2C8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.220.0/24
Signature Algorithm: sha256WithRSAEncryption
16:71:9b:14:0c:8c:e4:85:5a:27:31:f8:86:aa:18:4a:61:1b:
9f:72:97:d5:ce:e3:02:f8:54:25:6b:a7:ad:3a:b7:21:5b:1b:
df:ed:2a:fb:9b:6b:6c:5e:73:7a:2d:67:e9:09:f4:13:07:f3:
84:4e:c6:2b:65:f1:66:46:12:4a:cc:ce:e4:32:7e:20:14:bd:
61:1c:d9:13:f9:1f:99:ec:20:bf:79:a9:6e:1d:d5:03:f5:8b:
6c:98:a3:f9:df:89:4b:04:b6:96:ab:88:45:36:71:c3:5f:c1:
47:aa:cb:5b:80:3a:29:9a:b6:61:b1:0e:78:54:82:44:27:22:
1c:45:e9:c2:8c:60:a5:b0:98:c0:2b:83:87:e4:32:62:7e:94:
ac:de:0b:d9:fb:11:cb:ec:91:62:fb:df:a3:ba:8f:a8:34:ec:
0e:e9:bc:83:59:3d:20:df:62:9a:45:0f:2c:bb:c1:2c:14:12:
c4:dc:a0:86:7a:98:e7:d0:b2:16:47:8a:79:fe:11:24:e6:ae:
ea:90:3e:80:39:38:11:a5:9e:3f:44:d8:9b:dc:b1:07:d4:63:
d7:03:84:46:38:b0:9b:2e:f1:6a:93:09:d2:0e:f2:eb:90:93:
29:ad:d6:88:98:8e:dd:2e:ae:82:ac:07:1b:09:97:1e:42:75:
d8:54:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:18 2025 by rpki-client