Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA90D56355511F0A53813CCDAE4EC9C.roa
File: 1CA90D56355511F0A53813CCDAE4EC9C.roa (raw, json)
Hash identifier: YEcfRyBKx09YYUvOPKma+/dSJ28LBB9y4YwMeskpcPI=
Subject key identifier: E6:9D:8A:1E:E6:D8:19:B8:5A:03:75:FD:21:33:24:28:D3:B8:D2:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018191
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA90D56355511F0A53813CCDAE4EC9C.roa
Signing time: Tue 20 May 2025 08:33:32 +0000
ROA not before: Tue 20 May 2025 08:33:27 +0000
ROA not after: Thu 26 Jun 2025 08:33:27 +0000
asID: 9009
IP address blocks: 154.199.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98705 (0x18191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 08:33:27 2025 GMT
Not After : Jun 26 08:33:27 2025 GMT
Subject: CN=682c3e5c-9be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ce:ef:96:aa:81:cd:13:4d:01:18:c0:b5:8d:
d9:a8:2b:ea:2d:ec:be:ee:b6:46:24:26:eb:c7:7c:
6f:97:be:a1:80:27:12:b3:06:a5:17:0c:4b:60:94:
b2:99:a6:b1:2d:ed:15:b5:d8:53:78:93:5a:f9:4f:
aa:b6:9f:ea:a4:f3:88:ad:25:f6:5c:7d:80:97:e5:
7f:5e:c4:b8:d1:0c:80:ce:88:36:ec:22:31:1d:35:
85:64:a6:c9:bc:ce:79:3b:bd:7f:dc:f3:a6:19:94:
b1:50:0f:ac:33:f2:7e:cf:57:ca:e9:af:1e:17:78:
44:ce:39:38:ce:00:1a:26:cc:33:1c:da:29:02:ee:
6a:60:4d:5a:d8:72:35:8b:b2:ce:b2:c8:78:af:57:
d0:c7:b9:66:6c:b2:f6:6c:5a:e6:c7:aa:48:b7:ac:
94:1a:0a:5f:8b:50:ed:1d:34:aa:86:a7:27:20:f7:
9b:c7:02:70:bf:88:65:40:34:cf:99:c9:b8:78:af:
e1:df:f9:b6:11:e5:43:68:88:0c:37:97:f1:dc:0e:
82:7f:b7:3e:a7:1c:0e:23:b5:3e:91:93:26:66:1e:
e9:43:de:40:3d:45:18:99:7a:48:fc:dc:21:cf:f0:
e9:c5:cf:9c:76:a4:56:9e:d2:3f:37:da:0d:f4:aa:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:8A:1E:E6:D8:19:B8:5A:03:75:FD:21:33:24:28:D3:B8:D2:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA90D56355511F0A53813CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.160.0/19
Signature Algorithm: sha256WithRSAEncryption
42:ac:f4:ba:83:4f:21:2f:de:02:1a:ec:97:8b:09:66:27:22:
81:c1:a7:65:c0:53:dd:bd:10:47:48:2e:a2:3b:3e:f2:bb:ad:
1c:70:88:c0:90:21:79:29:12:c3:f0:ea:e1:40:58:13:68:14:
65:80:97:63:0f:26:2d:47:14:74:89:95:7e:15:1a:9f:ef:05:
90:c2:9b:f1:54:18:c8:8d:8a:99:68:f9:45:dc:08:26:5d:dc:
ba:47:a0:d8:10:13:99:df:b5:c0:34:65:02:ff:dc:d6:04:f9:
10:bd:bd:87:fa:7a:10:b4:38:6c:31:1b:46:55:27:48:c3:fb:
42:87:2f:da:7f:29:88:78:93:73:a7:94:d7:61:03:bf:9a:a9:
61:d3:7e:fb:ba:79:d2:3e:17:f3:01:e6:62:41:b4:b0:68:ab:
f6:23:85:9e:d3:fb:23:14:fb:c4:f9:89:44:83:a1:0a:53:79:
ff:df:8c:47:30:0d:a2:61:4d:98:04:04:34:ed:29:cd:9e:62:
d6:9d:36:7b:b2:c1:72:41:1d:8a:f7:55:75:3b:1f:73:56:14:
18:29:f6:b3:e9:d4:57:45:69:a5:83:5c:7a:27:d8:93:f2:2a:
08:a6:5b:2c:43:fb:e2:59:7b:3e:1f:8f:0e:6d:7f:97:9e:e0:
02:b7:ad:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:20:22 2025 by rpki-client