Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72185A2298B11F09A850FF0DAE4EC9C.roa
File: E72185A2298B11F09A850FF0DAE4EC9C.roa (raw, json)
Hash identifier: n8IHGlNmXnCk+H25wUDAuY5aLXeh+GStPieWuZnbhI8=
Subject key identifier: BE:50:7B:38:2B:F3:E1:5F:46:5C:C9:A8:20:B9:31:65:8E:F2:36:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017EEF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72185A2298B11F09A850FF0DAE4EC9C.roa
Signing time: Mon 05 May 2025 08:35:31 +0000
ROA not before: Mon 05 May 2025 08:35:26 +0000
ROA not after: Sun 15 Jun 2025 08:35:26 +0000
asID: 23470
IP address blocks: 154.194.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98031 (0x17eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 08:35:26 2025 GMT
Not After : Jun 15 08:35:26 2025 GMT
Subject: CN=68187853-8246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:6e:35:ce:ef:b0:67:97:c7:ce:3f:63:a5:
26:60:42:01:93:1d:3b:65:64:f5:05:5b:4e:65:3d:
b9:92:34:e9:d3:17:33:83:e8:3c:74:ca:af:66:03:
a6:9d:a1:6e:b1:27:f5:c1:a9:77:f1:41:a3:16:95:
55:bb:0c:3b:46:0f:a1:15:ad:f4:26:a9:aa:bf:74:
e7:48:fe:d7:ec:9c:54:4c:e2:a0:4e:e0:89:11:53:
1c:e7:1c:a2:0c:0c:23:a0:65:c9:4e:d4:e8:33:84:
68:ee:b4:99:a2:9a:28:33:fa:25:a5:07:1e:78:04:
b9:48:c5:40:3a:ea:03:c2:59:4b:98:1e:dd:b7:b6:
0f:5d:cb:08:6e:ec:83:63:e0:96:d6:46:fe:a4:c0:
1b:38:42:b6:d1:5a:6c:7c:0d:0f:59:63:94:4c:d7:
54:1f:62:93:d2:04:74:0e:f6:f3:6e:62:83:3d:e4:
40:c1:22:a8:71:2e:48:cc:d7:64:08:91:4f:a3:12:
b8:01:c6:aa:f4:e4:a0:f0:be:fb:c4:88:2f:73:c2:
d2:4b:48:0d:30:20:35:2b:c4:04:73:9d:bc:44:b2:
67:03:07:8f:aa:ff:71:b0:fc:36:e9:9a:e0:81:a8:
c8:1c:e6:5c:0c:02:aa:32:f3:90:c1:c1:e0:08:97:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:50:7B:38:2B:F3:E1:5F:46:5C:C9:A8:20:B9:31:65:8E:F2:36:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E72185A2298B11F09A850FF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.57.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:da:04:a0:b9:7d:7f:c7:5c:36:31:75:70:1e:a3:5a:d6:3a:
27:19:f2:ed:68:77:47:a6:bb:80:01:f5:bc:d2:0f:03:8f:bd:
77:a4:bc:44:b0:27:57:da:27:19:bf:30:f4:7e:c7:81:22:10:
25:b9:74:be:01:09:fe:5e:73:2e:e7:c5:a6:a1:be:52:9d:36:
c8:fc:c6:17:d9:40:b3:d9:31:1d:fc:ad:16:4d:db:9e:18:c4:
21:60:ff:a4:d9:ed:1c:67:70:44:62:60:01:98:61:35:7a:3a:
e4:fe:72:f4:a3:c9:97:9f:eb:6c:fb:ee:e4:4c:67:bb:d6:4f:
3a:6f:86:ac:aa:ff:f2:a5:67:64:63:a9:e0:ad:ac:36:68:d1:
c6:96:02:f7:33:97:33:4c:5a:9f:e8:5b:33:d8:d8:26:52:71:
3d:d8:e7:82:9b:75:04:9f:7b:b7:c9:c9:bf:b4:2d:6a:5a:5a:
46:0d:27:6d:00:43:8f:3e:a8:fc:d2:37:5b:c3:38:59:d8:c5:
de:cf:85:7c:34:27:49:2b:3c:45:ca:1d:36:3b:2d:ac:da:46:
a1:81:16:18:91:95:7c:e8:80:b1:59:18:6d:0b:c4:ad:98:5d:
f4:d0:a1:49:2d:c3:4a:77:93:e1:92:c9:8b:5c:60:67:49:d8:
4d:e2:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:15 2025 by rpki-client