Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04021D234BB11F097B698C3DAE4EC9C.roa
File: D04021D234BB11F097B698C3DAE4EC9C.roa (raw, json)
Hash identifier: FgbkaxcOnHRbQz1/JOLGhzCy/YH4hxlfbIZ0uXAoimw=
Subject key identifier: 40:16:00:D1:FA:3E:63:81:6C:78:15:E0:AC:3E:EA:77:30:AC:47:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01815A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04021D234BB11F097B698C3DAE4EC9C.roa
Signing time: Mon 19 May 2025 14:16:11 +0000
ROA not before: Mon 19 May 2025 14:16:06 +0000
ROA not after: Wed 18 Jun 2025 14:16:06 +0000
asID: 57043
IP address blocks: 154.83.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98650 (0x1815a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 14:16:06 2025 GMT
Not After : Jun 18 14:16:06 2025 GMT
Subject: CN=682b3d2b-335c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:4c:04:47:a1:7c:00:c4:5e:2c:f7:b5:1f:
13:49:ab:cf:81:ce:23:2f:ac:eb:a2:48:4f:5b:ab:
9f:15:8d:4c:9f:92:35:78:c0:01:de:58:bb:24:b8:
03:c1:e9:e5:18:d4:9b:88:b3:fc:58:11:ec:01:20:
2a:59:c7:c1:17:3e:b5:0b:52:db:59:84:d9:21:05:
ac:58:64:49:98:ec:74:ed:d9:98:51:23:58:0d:9a:
f2:f9:cb:1a:af:b8:bc:a5:4d:94:81:5b:79:f5:4c:
45:96:ae:44:6e:13:65:08:a0:5f:26:65:86:6e:54:
81:df:eb:dc:72:ad:17:a3:65:16:17:ce:49:42:67:
de:10:9f:0e:80:f2:d9:d9:7d:ab:00:4b:4b:e6:03:
1a:eb:52:e7:78:43:b3:5a:96:46:0b:f4:73:04:52:
07:b1:e9:3b:08:79:4b:ee:55:14:4d:b5:e2:37:7e:
e1:47:71:aa:85:69:a9:f4:57:10:77:89:b1:ff:de:
e4:da:ec:10:bd:06:c7:db:6c:b5:bb:bd:67:bc:da:
3b:0c:73:58:cd:86:87:4f:a8:af:e5:27:54:9d:13:
e2:d9:a8:5c:04:10:45:52:34:e6:08:a6:e4:25:f5:
74:99:b6:dd:bc:71:1f:72:3e:bc:09:e4:e8:e3:de:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:00:D1:FA:3E:63:81:6C:78:15:E0:AC:3E:EA:77:30:AC:47:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04021D234BB11F097B698C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:58:60:3b:dd:d8:dc:ea:83:5e:18:37:22:58:4f:6b:d9:9a:
1b:a3:19:e8:e1:7a:6e:b4:7e:58:e4:05:bc:58:39:c9:ec:47:
a7:da:db:c7:e7:75:9a:0b:ce:4e:d8:2f:67:ea:c8:d2:fb:36:
09:3f:9b:35:62:53:a7:2f:a6:a9:ac:fa:c6:d7:66:d2:b9:21:
4f:c3:86:61:8c:f0:04:69:41:60:75:95:ea:b2:12:47:6c:07:
a1:4a:dd:0f:a8:08:a9:4b:e3:a0:12:43:6e:19:05:b9:67:11:
05:ef:7f:72:85:84:6e:62:74:47:f9:9b:0e:9a:b4:c1:b4:0f:
58:c4:ea:04:ed:e6:3b:c2:fb:5a:2e:d2:26:17:dc:0c:2d:50:
df:24:6a:4c:ce:68:f0:55:9f:c7:a6:7f:d5:88:ef:5c:b4:e1:
30:ec:6b:d8:1f:70:c4:59:eb:fc:ec:c7:47:e6:87:b5:f9:74:
c1:4d:0d:7c:97:7b:be:8b:1a:31:19:ee:2e:94:10:df:e8:83:
93:b3:2a:4b:11:de:ce:fa:dc:3a:17:42:b0:40:a9:26:be:d7:
98:63:15:58:23:41:7b:0c:16:2b:ef:be:82:60:d3:ba:25:94:
8b:8f:e1:98:00:6a:56:83:dd:8e:84:c1:76:b1:f1:c7:69:f9:
74:f0:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:29:03 2025 by rpki-client