Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/069D552E43A811F0A60171BEDAE4EC9C.roa
File: 069D552E43A811F0A60171BEDAE4EC9C.roa (raw, json)
Hash identifier: o072xFz1QGqyME6lgLpk80hVxw0AmCEJJTRqv6Z6SSI=
Subject key identifier: 47:35:7C:83:6B:43:D6:17:41:CA:75:F7:67:BD:7B:F1:B9:0F:1F:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01856A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/069D552E43A811F0A60171BEDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 14:02:20 +0000
ROA not before: Sat 07 Jun 2025 14:02:15 +0000
ROA not after: Tue 15 Jul 2025 14:02:15 +0000
asID: 210542
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99690 (0x1856a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 14:02:15 2025 GMT
Not After : Jul 15 14:02:15 2025 GMT
Subject: CN=6844466c-2047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:c9:ac:0f:84:9b:8c:92:40:8a:a4:35:e1:
66:cc:30:a7:50:0f:ae:f9:01:1e:a0:db:86:41:38:
83:58:e5:5c:84:cd:bc:5f:9b:bb:c9:60:ca:77:37:
8c:b9:b9:ac:f6:5a:47:48:73:82:b4:91:66:a6:2b:
fa:60:2a:7c:f9:39:e8:56:33:b4:60:29:f9:03:95:
cf:e9:2c:0e:66:c1:f9:9e:ad:b4:22:b7:e1:63:24:
d0:f3:2b:e0:a1:0a:5a:84:b1:8f:46:7d:14:e3:14:
f6:53:8b:8a:75:c2:2e:b7:e2:77:58:24:77:0e:0e:
b8:00:90:39:89:fe:de:59:9f:84:49:89:2b:33:5d:
27:31:c0:21:c4:35:09:b1:ec:e6:9a:bf:cb:5d:c4:
78:2f:12:b0:38:b4:c7:7e:d7:38:7f:51:c0:ca:71:
d9:a2:7f:a1:89:d7:ba:82:ba:94:d6:11:2b:3d:91:
2a:50:5d:40:a0:34:28:18:22:8c:06:ca:69:e5:b2:
c6:39:ad:b1:9f:93:53:90:4f:a6:2f:7e:3b:3e:94:
c2:6b:ab:cd:e0:7c:54:da:ee:dc:89:8f:72:ac:e4:
7c:5d:5d:14:b8:7c:fb:c8:8f:65:28:56:04:7f:4a:
7d:29:d5:83:6f:8e:e9:10:45:04:bd:0e:5e:79:a0:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:7C:83:6B:43:D6:17:41:CA:75:F7:67:BD:7B:F1:B9:0F:1F:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/069D552E43A811F0A60171BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e0:d8:f0:ba:b2:7b:7f:05:d7:c7:81:89:6d:65:f7:11:f8:
aa:52:e2:68:f1:ef:52:66:67:2a:1b:a4:58:79:50:33:df:61:
73:c5:96:23:ff:10:48:ee:a1:42:c9:b0:0c:cc:d7:73:8e:ed:
cf:56:89:a1:08:b3:58:74:20:22:89:a9:df:b7:88:f7:34:23:
3b:16:4d:07:bc:82:f2:6d:19:e0:8b:e4:11:14:75:26:d1:50:
57:dc:41:98:72:5b:d8:9c:e3:fc:a2:2d:e8:18:cb:4a:12:97:
ea:06:a4:2c:a0:4d:12:fe:2a:22:85:c9:9b:6c:a1:38:f7:89:
0c:02:e4:a7:c4:4f:95:87:ad:08:89:81:26:94:1a:4a:09:dc:
4b:70:4b:c3:b4:3a:8f:90:ae:2a:f9:f3:cd:47:ad:76:d3:11:
a9:b3:4f:02:36:a2:6d:fb:98:52:26:84:d8:d0:d4:8a:1b:e2:
db:8a:0f:10:15:17:2b:62:a8:87:eb:78:79:69:97:d5:62:4b:
68:3c:59:33:51:5a:17:0c:ad:f0:03:91:da:48:09:74:bc:b8:
07:d7:0c:38:a7:b7:21:29:db:97:c2:96:d8:2e:cb:25:51:b9:
5d:6a:87:1a:c8:9e:66:60:c2:07:8d:93:1f:fb:c5:08:ba:28:
24:b2:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:56 2025 by rpki-client