Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193332823C3511F0A94144CDDAE4EC9C.roa
File: 193332823C3511F0A94144CDDAE4EC9C.roa (raw, json)
Hash identifier: w8mCMt+Stz4BPvQpDZcIbSZF5DLnZCvF1gA81EqHE7c=
Subject key identifier: 4E:C8:D1:73:D3:5B:55:DF:06:80:1F:19:86:E6:B9:61:A9:34:56:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193332823C3511F0A94144CDDAE4EC9C.roa
Signing time: Thu 29 May 2025 02:32:01 +0000
ROA not before: Thu 29 May 2025 02:31:55 +0000
ROA not after: Wed 18 Jun 2025 02:31:55 +0000
asID: 214143
IP address blocks: 154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
154.93.26.0/24 maxlen: 24
154.94.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99234 (0x183a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 02:31:55 2025 GMT
Not After : Jun 18 02:31:55 2025 GMT
Subject: CN=6837c720-1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:90:6f:e9:7f:48:98:09:3c:9a:57:79:06:
5f:5a:73:3a:d5:89:1e:e4:b5:ca:5e:f0:9f:d6:aa:
85:de:27:00:3b:9e:79:42:9d:eb:59:c9:49:69:ed:
27:02:fb:d2:01:b1:b0:50:bd:c5:94:2b:b8:48:0c:
48:47:9c:c0:be:24:d9:03:e1:46:8a:46:9e:1a:5a:
0c:b7:9d:07:5c:44:a1:89:a8:b0:03:05:e9:7f:27:
ed:54:9e:e2:1b:59:bc:2a:f3:b3:d7:5c:fc:05:07:
e5:42:31:c3:d2:3e:19:58:b9:94:18:85:1d:cd:e2:
4e:8d:7a:b0:c6:2a:50:82:c6:31:cf:67:f4:f0:18:
ea:c5:c3:26:bf:bd:b7:af:4f:14:14:ca:eb:ec:7a:
87:28:4d:3b:73:9d:82:84:fb:8c:d7:49:f3:cd:8e:
e0:97:5c:c5:61:d8:5f:cd:d9:fa:24:88:e0:cf:eb:
ce:c5:83:81:9d:26:dc:43:4c:ab:23:51:ef:24:1b:
9c:ba:5f:5d:2c:ed:64:b3:3e:67:9a:ba:05:6f:f8:
1a:0e:e2:3c:48:f6:83:d2:e7:49:57:82:f7:36:f8:
21:1a:8d:66:fc:48:06:df:fd:bb:b4:24:ed:5f:73:
db:da:7a:3b:76:12:77:90:aa:81:d1:d5:58:c7:75:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:D1:73:D3:5B:55:DF:06:80:1F:19:86:E6:B9:61:A9:34:56:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193332823C3511F0A94144CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.1.0/24
154.93.3.0/24
154.93.26.0/24
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b2:2e:e8:b5:43:ff:bd:4b:73:be:f6:91:b4:90:2e:c7:46:
6f:63:75:94:7f:db:da:7b:29:f6:a7:9d:e3:47:7c:6e:c8:98:
96:2e:7f:46:e5:b0:e5:c0:97:01:dc:3e:23:67:39:65:6a:9c:
e3:79:72:78:fc:b1:0d:ba:5c:73:25:a2:1b:92:7f:88:be:74:
55:53:7e:20:59:98:fa:4e:28:cc:b0:e8:bd:48:20:94:5f:5a:
bf:2c:fb:ec:6a:3e:7c:ac:87:fa:6f:24:2a:a8:5c:44:b5:87:
88:3f:61:91:32:01:d0:73:41:6b:31:e9:d2:07:88:9b:a8:6a:
6e:d9:75:64:4e:d6:59:b9:99:94:4f:d0:5b:b5:85:66:d8:b2:
bd:a6:6a:65:5f:bc:fc:e6:39:e8:85:4d:13:fd:96:e3:0e:57:
23:b6:81:8f:67:6d:12:42:e6:90:f8:46:c4:29:ee:56:a1:d1:
58:45:8f:cc:dc:6d:0d:89:ed:43:17:25:b4:96:33:5d:31:9b:
c5:ef:51:0c:a6:a4:fb:56:7a:c2:04:da:16:d1:e5:fe:1d:a4:
7e:59:dd:75:25:0c:16:96:d3:df:b1:ca:f2:a4:99:34:3b:68:
18:ae:a5:ad:d5:a2:aa:ee:6e:7c:51:6f:85:ae:e8:9a:dc:c4:
39:9d:b1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:27:02 2025 by rpki-client