Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1739F074484211F09C6921BFDAE4EC9C.roa
File: 1739F074484211F09C6921BFDAE4EC9C.roa (raw, json)
Hash identifier: LwXARrvau4ssUy/FzNG6UgWXar98wwWhBFqPAJLonXA=
Subject key identifier: 89:F0:FF:49:F2:AF:D8:9C:A0:15:0D:BA:07:3A:4A:5A:09:B5:36:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018668
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1739F074484211F09C6921BFDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 10:35:15 +0000
ROA not before: Fri 13 Jun 2025 10:35:10 +0000
ROA not after: Tue 22 Jul 2025 10:35:10 +0000
asID: 25198
IP address blocks: 154.197.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99944 (0x18668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 10:35:10 2025 GMT
Not After : Jul 22 10:35:10 2025 GMT
Subject: CN=684bfee3-5d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:b1:82:b0:06:99:0c:75:da:64:a8:ce:f3:
b3:bc:4d:c2:f3:61:b3:11:be:e1:df:ad:fa:4f:d3:
98:a2:c6:ea:ae:9d:2e:59:92:ec:25:b9:21:bf:34:
c0:6b:be:46:3a:fc:2b:c7:ed:8c:ab:35:55:d7:49:
b6:fc:c5:58:b9:60:f1:5c:b9:8a:c9:50:56:d7:4d:
09:ef:ee:17:85:33:c5:20:4e:2b:e8:51:ca:1e:9e:
9b:79:c6:75:05:67:07:3d:21:c0:dd:22:48:55:4a:
ef:dd:1f:dd:31:b3:44:a5:ae:48:4f:01:5e:76:32:
fb:05:af:27:98:2b:63:43:62:c2:2c:5e:af:a6:2e:
79:64:f8:10:4e:39:63:6f:07:4d:6e:72:ff:cf:7d:
17:8e:1a:53:e2:ba:c4:c6:5d:77:ec:16:90:3f:f2:
2e:34:2d:c0:03:44:d3:9b:b1:e8:60:69:0b:8e:5b:
f5:43:8b:e4:55:46:20:c9:e1:da:63:22:4b:9b:43:
59:2d:a5:ed:e7:74:cc:c8:b2:36:26:33:e0:97:85:
81:08:9f:af:84:74:31:b1:25:a3:58:82:a7:ae:f3:
df:f1:9a:1e:d9:70:84:fe:a4:a0:d4:3a:2d:e0:de:
48:e2:58:76:21:4f:29:d5:08:cc:a8:77:8a:12:91:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F0:FF:49:F2:AF:D8:9C:A0:15:0D:BA:07:3A:4A:5A:09:B5:36:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1739F074484211F09C6921BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7e:2c:65:1a:7e:07:72:c0:cf:88:ab:9c:59:d8:f8:17:66:
dd:e3:dc:9a:63:db:7e:fc:13:db:5d:0a:19:21:5d:e8:61:ae:
a8:ea:37:7b:6d:8d:4b:53:82:38:2e:ce:63:22:95:88:6e:f1:
a3:e0:34:22:d7:54:8a:2b:3f:78:0c:8e:73:d0:14:b1:06:15:
15:f0:78:e9:d6:e2:65:9e:a3:5b:a8:9f:23:2c:64:d7:3d:d8:
57:b5:7d:c5:e4:08:c3:ae:67:34:e3:03:c2:2d:b2:1b:0d:0d:
f2:10:07:fe:79:3e:51:34:f2:87:3a:fe:a4:11:7b:2c:f7:05:
26:fe:90:3c:70:2d:22:cf:1e:d9:ca:c8:d9:48:8b:2b:62:90:
41:ae:ec:02:c4:61:26:e6:cd:a1:df:d8:31:ac:08:70:83:16:
b1:ad:ae:f9:bd:72:b8:32:17:25:44:9c:f3:54:d3:c5:26:03:
00:cb:8f:13:b3:d1:51:13:fd:c8:02:7a:21:a2:2d:e9:40:68:
92:6c:b7:d6:c5:1c:0c:1f:61:04:c9:bc:37:9e:71:87:a9:be:
5d:28:f9:83:2f:98:75:7d:73:7f:82:bf:03:ab:c8:b5:c6:03:
9b:23:fb:29:ef:dd:b8:34:94:dd:8b:de:58:7c:a6:70:25:36:
9e:23:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:01:59 2025 by rpki-client