Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFB9260A3C6F11F0B6D1E2D2DAE4EC9C.roa
File: AFB9260A3C6F11F0B6D1E2D2DAE4EC9C.roa (raw, json)
Hash identifier: jXVHPd34stEpNv1H1V70kohpKVGe1aVCiiuJokZw5nw=
Subject key identifier: D4:C7:FF:83:5B:D3:6A:21:64:7D:02:E4:4B:C9:28:2C:45:7C:56:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFB9260A3C6F11F0B6D1E2D2DAE4EC9C.roa
Signing time: Thu 29 May 2025 09:31:24 +0000
ROA not before: Thu 29 May 2025 09:31:19 +0000
ROA not after: Thu 26 Jun 2025 09:31:19 +0000
asID: 17557
IP address blocks: 154.82.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99242 (0x183aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 09:31:19 2025 GMT
Not After : Jun 26 09:31:19 2025 GMT
Subject: CN=6838296c-9f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:bb:91:08:84:32:32:79:4d:dc:ca:75:e9:
ce:1a:6c:c8:97:85:18:84:c9:fa:df:ac:fe:42:20:
9e:5f:fb:b0:2b:af:2c:0a:25:95:8e:33:92:31:f8:
65:79:88:70:e5:31:58:42:f4:55:2e:c7:28:60:f3:
23:34:97:80:89:9a:ef:02:49:85:ba:5a:ab:a2:fb:
98:7b:55:ba:95:02:53:55:81:a2:f2:ee:d4:6e:76:
7d:ef:96:34:50:5a:29:fb:3c:e5:a7:18:c0:4a:8f:
ef:69:47:2f:bf:9e:ad:51:08:5d:da:20:bf:a7:c4:
a5:bf:df:17:94:29:d2:79:ae:fe:59:30:5e:1d:1b:
06:16:7f:a4:8a:44:56:d7:4a:6b:2d:bd:55:a3:30:
47:e1:8c:1d:c5:d2:a0:1f:b9:ba:22:0c:fe:74:40:
5d:83:00:ae:0d:04:ec:51:12:7d:47:49:e8:94:d4:
72:47:13:2d:d7:10:9a:1f:8f:c3:4b:ff:b3:cd:71:
e1:29:9a:1b:5f:f6:fa:27:89:fe:36:49:0d:7e:a3:
23:66:b4:8d:d0:04:ed:00:26:d9:32:71:42:52:a8:
b5:bd:f8:08:a8:5d:66:e2:bd:71:81:0c:c8:63:5f:
c0:28:67:61:a8:89:6f:74:34:f5:61:d5:44:99:49:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C7:FF:83:5B:D3:6A:21:64:7D:02:E4:4B:C9:28:2C:45:7C:56:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFB9260A3C6F11F0B6D1E2D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3d:9a:69:8d:05:62:da:25:65:04:8e:92:4c:47:4c:f2:5d:
52:3e:28:10:d3:ab:2d:38:f6:66:c8:2f:2b:64:f0:7b:57:b3:
dd:eb:e7:86:bf:26:0b:c8:14:85:af:85:f8:82:da:9f:22:44:
68:92:6b:3e:78:2b:86:c8:2c:1d:54:f0:24:d8:7b:f3:14:32:
3d:4f:ce:35:37:48:25:c8:18:4a:81:8a:d5:24:60:6e:4b:c0:
8d:f2:a2:a8:ba:f0:c1:e6:16:77:c0:bd:57:76:2a:be:53:6f:
a2:15:17:b0:a6:4d:8f:50:9d:e8:36:88:51:a4:e3:2a:62:24:
44:47:e5:69:e8:d1:82:9d:f8:90:a6:91:fc:19:86:c3:cb:7d:
0b:67:2f:82:71:03:d4:67:5a:7f:12:3e:28:eb:56:28:76:3d:
61:e3:21:81:7c:e6:39:5e:ad:59:d1:c9:7c:2e:8f:b0:87:94:
80:ba:49:52:46:f7:e0:b0:a8:fe:26:c1:7f:a7:44:6d:b7:25:
d9:34:b0:c5:11:26:0e:8f:9d:14:36:50:3c:ae:5c:c6:8a:00:
df:be:02:4a:af:d9:4d:54:0d:17:d6:56:a1:4e:72:b4:18:cd:
09:4f:bd:41:89:2e:24:76:25:f4:bb:cc:e7:f7:c3:7c:f4:2f:
a4:97:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:37:02 2025 by rpki-client