Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B72CE849E111F0B92A9CC8DAE4EC9C.roa
File: 20B72CE849E111F0B92A9CC8DAE4EC9C.roa (raw, json)
Hash identifier: p3jYc94R6YEW6fEh2RyNAGj9JarzjUP9JZgtQdZhpOk=
Subject key identifier: E5:D5:C2:6B:B8:42:3E:4B:36:21:C4:F5:04:16:1B:02:13:FE:A2:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B72CE849E111F0B92A9CC8DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 12:06:12 +0000
ROA not before: Sun 15 Jun 2025 12:06:06 +0000
ROA not after: Wed 08 Jul 2026 12:06:06 +0000
asID: 139065
IP address blocks: 154.194.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100051 (0x186d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 12:06:06 2025 GMT
Not After : Jul 8 12:06:06 2026 GMT
Subject: CN=684eb734-c127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:8b:e0:a0:d7:80:8e:e5:a8:62:c8:fc:76:
ba:cc:7b:94:31:8d:09:39:ff:0f:2b:7b:63:04:b7:
f8:a0:13:f1:76:87:bc:b0:76:59:43:f0:c5:ad:58:
cc:ff:41:68:47:3d:df:d0:bb:52:ad:3f:d1:b8:5b:
4b:86:03:a1:06:d6:6a:1d:7d:69:65:7f:ab:0a:c7:
27:31:c7:08:0c:02:0c:33:d7:d5:66:2f:dc:98:a0:
0f:9b:74:5b:2b:45:0d:16:9f:a0:4a:dc:fc:06:98:
46:47:66:91:20:de:e9:e2:f1:9a:93:77:c8:2e:ff:
2b:2c:02:5c:ec:a5:f5:bd:47:3d:e0:1d:80:4c:fe:
58:e3:ba:31:d7:fb:9f:4c:9d:4c:ac:c6:69:00:ed:
81:3f:ee:63:e6:28:01:9b:08:30:43:db:94:ac:c8:
10:47:d1:42:57:b9:51:97:32:00:8a:05:f0:db:72:
5e:fd:b7:a2:fa:02:e9:de:91:e3:6b:a7:2b:a3:ab:
d9:ac:78:4b:3b:82:e7:0a:8f:e8:a1:54:08:96:8e:
c6:ed:c2:fc:6e:c9:34:63:ad:70:c4:c0:85:f4:78:
11:17:ec:32:ed:58:06:7d:c8:77:70:c7:13:d2:b8:
20:74:2d:34:97:d9:ea:a5:40:f4:81:55:4b:af:ba:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:C2:6B:B8:42:3E:4B:36:21:C4:F5:04:16:1B:02:13:FE:A2:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20B72CE849E111F0B92A9CC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.28.0/22
Signature Algorithm: sha256WithRSAEncryption
33:20:86:d8:04:72:17:15:96:db:64:96:03:d3:65:dc:50:20:
4b:93:89:1a:93:45:86:87:0f:00:03:6f:30:d5:66:e7:95:91:
6f:72:45:5b:c7:13:56:66:e6:14:d1:0a:4b:1b:85:f5:db:dc:
49:b5:4d:ff:0a:02:36:3d:f2:fc:d6:73:38:6e:3d:59:44:bd:
95:c6:92:9c:92:04:db:92:a0:c4:d4:0d:27:ee:11:52:5d:f1:
6f:e9:b4:12:57:5b:66:da:f9:68:ae:6b:99:fd:d5:8c:40:3c:
df:73:73:b1:05:ba:1e:9b:eb:2c:89:37:77:eb:ad:b7:1b:9a:
30:8a:c5:c5:f7:71:04:58:a6:f3:dc:47:be:a9:a8:4c:f0:d6:
15:88:23:30:77:0f:98:6a:df:f4:e9:72:7a:e3:b6:74:80:74:
bd:5f:ed:f0:19:2a:c8:27:b9:f2:31:28:f0:6b:57:98:f2:43:
38:6d:7b:c7:45:d8:c6:ab:17:99:ca:50:d2:2a:ca:52:fa:f0:
57:29:7c:25:d2:7a:3e:7d:df:7c:91:5e:dc:eb:3a:b1:1e:94:
fb:1c:fc:87:32:5a:ca:4b:a0:f2:05:50:41:36:a2:b9:6a:f8:
1c:d4:5d:d0:c9:26:d2:18:9d:ba:07:bc:86:ab:a6:1d:68:63:
7a:d1:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:56:44 2025 by rpki-client