Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B28AD643ADF11F09B6230A7DAE4EC9C.roa
File: 4B28AD643ADF11F09B6230A7DAE4EC9C.roa (raw, json)
Hash identifier: mOVQYk/eyHooMKRXF8+nZMVz0HCoEKXlpB/wlBPdriY=
Subject key identifier: ED:D4:F1:30:C8:23:D8:72:E5:DB:E9:25:C7:88:79:FF:61:84:14:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018307
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B28AD643ADF11F09B6230A7DAE4EC9C.roa
Signing time: Tue 27 May 2025 09:45:16 +0000
ROA not before: Tue 27 May 2025 09:45:12 +0000
ROA not after: Thu 03 Jul 2025 09:45:12 +0000
asID: 23470
IP address blocks: 154.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99079 (0x18307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 09:45:12 2025 GMT
Not After : Jul 3 09:45:12 2025 GMT
Subject: CN=683589ac-ea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:bd:76:9b:3a:ec:3d:b4:4b:b4:cf:90:04:
7b:5f:2a:1b:bf:ea:0a:93:20:b8:0e:62:68:a7:59:
97:bf:37:97:1c:b6:bc:33:07:54:76:98:bf:be:a9:
35:95:48:cf:c8:43:94:71:cd:b6:a2:a1:2c:98:63:
c1:66:64:f4:ab:c8:69:1c:5c:25:75:8e:91:12:a8:
2e:33:52:ae:fb:60:e3:a4:05:c2:46:58:10:c3:fc:
77:06:b2:82:8e:2c:aa:1f:c0:8f:aa:d4:d1:ec:f5:
6d:df:6d:87:ff:78:5f:d7:43:90:79:92:a5:d1:f4:
c6:db:ed:33:7b:59:48:11:52:47:49:9d:bf:44:dd:
a5:df:3a:81:28:31:83:fe:d1:96:3d:c7:f5:cc:40:
09:f5:d6:9f:ab:57:21:4c:b7:e8:83:54:69:cc:5e:
49:27:d3:87:43:30:e6:1e:74:6e:29:ce:c4:07:dc:
c4:b8:cb:0b:1e:89:72:8d:b2:af:13:97:a1:1a:ea:
e9:79:66:d1:28:e8:a9:3c:06:f1:aa:39:92:c3:d6:
63:9c:30:28:1c:d2:43:f6:b1:ca:5f:46:8c:7c:3f:
fc:8a:0e:52:c0:13:43:c5:6b:71:19:f2:83:73:3b:
84:51:cf:9a:2b:33:58:a5:9e:d2:3f:ef:b7:26:b9:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:F1:30:C8:23:D8:72:E5:DB:E9:25:C7:88:79:FF:61:84:14:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B28AD643ADF11F09B6230A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:74:05:6c:23:e4:70:0e:a6:4f:9f:9d:2c:17:2c:e8:17:1e:
0a:29:57:e7:bf:11:d3:73:6e:2f:64:9b:8a:a3:28:e4:d6:31:
e5:42:44:e4:7a:88:03:82:23:21:66:2c:82:2b:5c:e1:00:df:
1f:6d:93:61:de:0d:c9:b9:b8:83:ea:65:a5:3a:15:92:08:b0:
fd:be:09:56:e0:5c:f3:6b:1b:ad:86:d5:af:19:dd:ca:38:8f:
c1:b6:15:18:f7:52:07:43:fd:49:46:85:6e:11:fc:d7:88:4b:
31:f4:61:b7:54:16:0f:70:08:59:fc:b8:97:2f:96:c9:be:42:
b3:0b:7a:01:4c:88:cb:cf:59:ca:2b:45:2e:de:8b:90:85:08:
da:4c:1d:cd:a8:15:f7:13:88:b2:c4:b2:ae:2d:b5:69:54:b0:
68:53:5c:a5:1e:8c:a9:ce:42:39:5b:37:bc:94:1b:cb:c1:eb:
db:5c:87:83:44:96:5c:c4:84:fd:4b:5b:26:a0:03:1f:1d:95:
b5:aa:15:a0:d5:73:b2:6d:79:3e:f7:bf:f5:5b:96:bd:3e:32:
07:22:40:b7:b7:4e:0a:2a:cd:7a:72:e0:37:08:9c:ed:07:4d:
44:82:28:4a:57:cf:d8:f6:82:2f:d9:87:ff:a6:3b:34:bc:9b:
e5:95:70:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:50:33 2025 by rpki-client