Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E908F6A3C7411F0898EF8EEDAE4EC9C.roa
File: 1E908F6A3C7411F0898EF8EEDAE4EC9C.roa (raw, json)
Hash identifier: /KCVQmKbFE57eXFJnYIkcctmrCiFvQ5HnB48x+q37QA=
Subject key identifier: D6:CB:22:28:B1:42:53:BB:0A:34:5B:2E:1C:6C:FD:15:9F:D8:23:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E908F6A3C7411F0898EF8EEDAE4EC9C.roa
Signing time: Thu 29 May 2025 10:03:08 +0000
ROA not before: Thu 29 May 2025 10:03:03 +0000
ROA not after: Sun 28 Jun 2026 10:03:03 +0000
asID: 984
IP address blocks: 154.193.13.0/24 maxlen: 24
154.199.24.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99248 (0x183b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 10:03:03 2025 GMT
Not After : Jun 28 10:03:03 2026 GMT
Subject: CN=683830dc-1a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:24:72:87:53:c9:2a:ff:72:33:41:6c:86:b6:
c6:9c:ce:1f:bd:49:c5:1d:00:d0:03:fa:4e:62:ca:
f9:99:15:80:02:ad:69:65:eb:62:84:10:61:36:fe:
3c:25:e1:be:d1:55:5f:53:82:b7:64:4f:e4:96:93:
e5:fb:39:68:2f:0c:ac:65:48:51:0c:2c:1b:52:0c:
4a:68:77:b2:0d:41:5a:41:16:0b:45:cd:4b:4b:19:
33:fc:d6:16:68:23:c2:5c:0b:df:d2:ed:83:dd:65:
00:a8:65:f5:3e:6e:e3:b5:8d:2f:ce:09:8e:bd:f9:
5d:15:fc:28:eb:63:75:6b:e2:24:ed:dc:10:30:a3:
db:22:43:d3:d6:b5:05:c9:48:05:a5:7f:a6:56:54:
81:c0:f6:90:3c:33:ed:d2:45:75:6a:eb:c4:67:6b:
c8:f3:a0:69:5b:43:41:fe:4a:3e:f5:8b:17:f6:57:
71:ec:a8:7d:b0:c7:a3:9b:62:f1:08:57:53:c2:56:
44:d2:72:95:e4:46:95:56:b8:18:23:42:a3:66:2a:
1c:9b:50:85:21:89:d3:77:ba:9d:07:ac:2e:0b:b6:
ee:d1:67:0e:ab:1a:53:d0:3d:bd:e6:13:73:c4:0d:
0a:71:b3:f5:69:3b:72:34:c8:19:76:24:91:8c:b2:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CB:22:28:B1:42:53:BB:0A:34:5B:2E:1C:6C:FD:15:9F:D8:23:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E908F6A3C7411F0898EF8EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.13.0/24
154.199.24.0/24
154.200.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3b:81:eb:e5:c5:d6:52:0f:a5:e1:94:d7:15:c4:9a:ee:d3:
51:e4:23:29:12:d2:19:2b:50:6c:20:b8:6b:bd:48:60:d2:64:
2a:6e:5a:18:a5:7e:2b:ee:59:0e:81:fc:ab:9f:1f:d7:f4:ba:
de:74:ee:65:c7:ba:dd:68:69:65:1d:a4:05:11:75:25:f0:9a:
73:5b:1b:49:a3:23:39:4a:96:d2:b3:82:6f:bb:e3:36:a1:6d:
77:c4:e0:93:30:89:de:3f:25:02:43:9a:18:e4:7b:2d:63:00:
f6:47:1b:a7:b8:50:3d:ea:b0:e2:ce:57:03:4d:56:83:48:5b:
59:6e:06:31:03:e2:01:99:7c:39:71:e5:d6:16:7f:bc:4b:a4:
a3:bd:2e:af:ec:92:e8:55:b4:b3:f5:aa:1d:d0:9e:41:7e:da:
95:34:ec:1b:77:d2:89:b6:e9:19:c3:51:02:3c:44:ea:c0:f6:
4c:69:81:42:ee:1a:e4:1f:ba:5a:09:6b:c4:72:9a:e0:8b:6d:
cc:69:db:09:5c:29:b1:3b:ee:fb:58:00:d1:31:aa:e2:4a:39:
f2:c9:40:27:54:6a:0d:58:f9:b4:5d:df:27:5f:bf:f5:d7:93:
29:d0:ae:81:35:fc:98:92:e7:c5:7e:24:e4:43:f8:de:b8:e3:
30:9d:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:45:36 2025 by rpki-client