Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52E9CF3E389F11F09442B87DDAE4EC9C.roa
File: 52E9CF3E389F11F09442B87DDAE4EC9C.roa (raw, json)
Hash identifier: mGt5yx6Qb6U/KkJkC2urnWe3of5+10vGr+2hG/3FilI=
Subject key identifier: CC:DA:3A:6E:3D:61:5C:80:D0:CA:D6:A0:F9:E4:31:23:02:60:ED:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018282
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52E9CF3E389F11F09442B87DDAE4EC9C.roa
Signing time: Sat 24 May 2025 13:02:19 +0000
ROA not before: Sat 24 May 2025 13:02:15 +0000
ROA not after: Sat 28 Jun 2025 13:02:15 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98946 (0x18282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 13:02:15 2025 GMT
Not After : Jun 28 13:02:15 2025 GMT
Subject: CN=6831c35b-283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:20:cf:3c:a8:ad:9f:ba:6c:51:7c:c3:58:
a0:e0:cc:71:b5:ee:ae:cd:57:62:e6:90:93:52:b5:
8d:99:d7:c2:dc:c8:f5:e8:bc:39:b5:bd:a1:f6:96:
31:b6:49:93:4c:6a:53:9f:6d:07:36:a2:67:5c:ed:
64:dd:f8:12:e1:3e:18:4c:ad:9b:35:2f:3c:9b:29:
3e:b8:af:74:0e:c6:61:88:43:af:02:a0:eb:11:3c:
5c:32:53:c6:d6:41:ba:02:e9:60:01:35:fa:24:f3:
7b:07:b0:9f:e4:21:b7:6f:1c:51:d5:e4:e6:7d:ff:
d2:56:29:56:22:14:e8:48:d3:75:22:a2:76:71:7c:
fb:ca:0e:5a:f1:1e:9e:92:b0:f5:aa:fb:5a:2a:b2:
b1:83:c7:4d:59:01:8b:7b:92:9c:18:77:a9:68:8f:
e9:5e:01:a8:5c:33:13:6c:2b:b9:85:42:84:a4:e3:
0b:2f:8d:e8:0b:26:69:96:34:e8:1b:05:ca:5a:65:
89:f8:74:17:60:5c:92:11:45:bb:34:74:60:5e:0b:
fb:6c:42:24:2f:7b:b1:34:ec:1e:0b:71:86:73:cf:
5e:64:02:cb:aa:69:74:21:b4:65:a7:93:ea:a0:d1:
62:c2:c3:16:8c:3c:3d:f7:bc:a5:0f:40:29:35:86:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DA:3A:6E:3D:61:5C:80:D0:CA:D6:A0:F9:E4:31:23:02:60:ED:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52E9CF3E389F11F09442B87DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:45:36:6b:78:d9:2f:41:11:51:e3:a6:9d:f0:77:48:97:34:
65:50:08:8a:d0:31:a7:60:b0:d8:c4:28:bc:13:39:0b:39:76:
97:3d:e0:d5:2c:65:66:cf:ae:c9:f9:ad:69:e2:e1:08:c3:b4:
a7:0f:30:b0:fc:4c:a1:4e:f0:7e:34:e4:71:7e:4c:18:81:9f:
47:2a:5b:35:3d:cc:78:bb:6e:b2:91:c9:21:03:14:55:47:65:
28:83:ea:e7:ca:03:13:eb:8b:9d:55:eb:0d:01:c1:4e:b7:99:
a6:dc:af:a5:36:26:47:32:a6:fe:c6:90:cc:4c:a3:64:1e:d5:
f7:9a:5d:7d:bf:fd:37:da:17:80:2e:ad:f6:e9:cb:d4:b0:37:
6a:ed:48:0f:dc:a8:84:67:86:fb:7c:da:91:68:a5:1b:7d:53:
be:5d:9c:0d:5d:34:c8:f5:4b:cd:28:64:90:9d:79:18:b1:d5:
27:25:d5:ff:06:08:77:af:53:96:54:ac:a6:d4:d4:20:b3:6c:
a4:6f:a0:c7:a9:7a:35:cc:e1:d9:f8:15:21:f8:96:31:4c:77:
97:90:b1:b0:0d:b6:c4:49:aa:24:59:aa:18:ba:7b:70:45:3a:
b2:e4:df:07:b9:d5:1b:66:ff:46:4b:9c:94:93:f0:2c:b1:99:
36:53:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:44 2025 by rpki-client