Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E956D443AD311F0868DFCD8DAE4EC9C.roa
File: 5E956D443AD311F0868DFCD8DAE4EC9C.roa (raw, json)
Hash identifier: eEfmxgKt48X6qU17vG36VxVsrm4JqMmyf2WHUREcGHo=
Subject key identifier: 97:9A:E3:63:A3:BA:C5:FA:7C:9C:26:44:F4:51:19:63:A5:33:73:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0182DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E956D443AD311F0868DFCD8DAE4EC9C.roa
Signing time: Tue 27 May 2025 08:19:55 +0000
ROA not before: Tue 27 May 2025 08:19:50 +0000
ROA not after: Thu 03 Jul 2025 08:19:50 +0000
asID: 20326
IP address blocks: 154.193.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99035 (0x182db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 08:19:50 2025 GMT
Not After : Jul 3 08:19:50 2025 GMT
Subject: CN=683575ab-09cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:ff:be:65:24:fb:18:f2:71:bf:6e:66:e3:
a7:1e:4d:89:df:36:54:67:7d:6a:1d:86:e8:ac:0f:
43:4a:eb:9e:ef:55:0a:16:d6:b0:ca:54:8f:d4:12:
ea:89:f2:b3:98:c3:dd:b4:b6:7e:c9:7b:90:24:bd:
1f:c1:12:98:f7:c3:e8:51:3a:da:a9:10:18:2d:ca:
28:bb:95:eb:31:f1:a6:05:c5:b0:ee:5b:23:7d:e3:
2d:c7:6d:a9:37:4e:64:00:f5:14:66:13:e5:10:30:
59:1b:cd:48:ee:ba:67:17:e5:fa:ba:0e:13:74:94:
6e:02:1d:e0:a9:42:a0:d0:05:ea:be:b9:f4:4c:d7:
3d:24:19:ce:03:1d:83:44:9a:45:df:26:c9:5b:f2:
1f:3f:68:38:06:45:4a:ad:24:2e:d4:ac:05:2b:bf:
b3:82:64:d0:49:03:cd:5a:2f:f2:d4:3e:cc:a3:43:
80:7d:a3:6c:b0:a3:43:a5:7f:7a:d1:b9:aa:bc:69:
5a:64:77:05:f6:44:9f:4e:86:84:2e:94:21:3d:6e:
73:09:08:ae:b6:ed:a8:7c:61:16:20:84:ef:52:69:
ac:c7:4f:97:b3:01:9f:d3:63:36:3d:9e:18:fa:db:
36:7d:30:58:aa:ca:02:ce:64:da:ae:19:36:c3:c7:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9A:E3:63:A3:BA:C5:FA:7C:9C:26:44:F4:51:19:63:A5:33:73:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E956D443AD311F0868DFCD8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:39:9a:0c:df:5b:70:39:69:e0:eb:92:d2:b7:60:36:70:33:
ad:ee:6f:ff:8d:db:cd:de:5e:cd:4e:04:54:b1:9d:74:42:d5:
19:0b:20:5c:83:d8:29:f7:fe:25:c6:1c:0d:8f:7b:8b:5e:92:
83:66:1b:05:2f:4c:cb:1f:b7:9b:81:35:ed:b7:43:1e:66:8b:
d3:50:f5:cf:f2:cb:f3:f0:94:32:36:f8:0d:ca:72:3a:13:cd:
11:5f:a1:96:8a:f2:55:1a:5c:4b:95:44:1d:a8:a6:f9:9d:2c:
90:3e:25:97:6f:d5:4b:28:c9:17:38:00:23:14:00:c5:fc:ce:
e9:bd:ca:91:83:75:3b:32:4c:b9:9c:fb:c1:34:f4:89:ca:37:
f6:2f:0a:d6:56:3c:ee:64:27:05:4d:1a:c6:0f:2f:c4:9a:94:
3e:1a:71:2e:1a:e3:2e:cf:56:f6:46:3e:6a:c3:a4:b8:fb:b0:
cf:67:59:4a:e0:89:46:2c:bd:04:1f:1a:9a:0c:56:b7:dd:15:
04:7a:14:11:9e:e4:cb:35:ab:9f:1d:b8:44:78:5e:76:29:27:
68:5c:91:7f:1b:89:a0:26:f7:c7:74:b6:de:82:d0:39:45:7c:
54:61:6c:43:95:5f:9c:33:02:db:ba:72:8a:7a:f2:3c:4f:6a:
6c:36:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:14 2025 by rpki-client