Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23A444E4413B11F0B913DC7DDAE4EC9C.roa
File: 23A444E4413B11F0B913DC7DDAE4EC9C.roa (raw, json)
Hash identifier: ABis5ZsHwgjh/9OiHWPi/AZfjLq7COh3WSBhfo2goKc=
Subject key identifier: B0:3A:39:C2:32:0D:9E:09:D3:6C:FB:F0:4D:42:62:1D:B3:EE:1B:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23A444E4413B11F0B913DC7DDAE4EC9C.roa
Signing time: Wed 04 Jun 2025 11:57:51 +0000
ROA not before: Wed 04 Jun 2025 11:57:38 +0000
ROA not after: Fri 11 Jul 2025 11:57:38 +0000
asID: 214143
IP address blocks: 154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99538 (0x184d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 11:57:38 2025 GMT
Not After : Jul 11 11:57:38 2025 GMT
Subject: CN=684034bf-9fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fe:73:94:46:d0:aa:5c:f7:bd:4f:02:ae:a6:
bd:34:34:14:3d:c0:2f:34:6d:0e:61:bb:41:3a:e3:
50:ed:8d:1e:92:48:89:ef:70:be:c3:d9:85:38:6d:
15:a0:f8:19:70:51:12:04:be:5f:89:16:46:da:92:
ca:cf:ec:47:81:37:fc:a2:93:c8:56:67:1c:a7:b9:
fc:ab:4d:5d:54:1a:1d:22:ad:0e:1b:c8:5e:11:05:
84:a7:e9:e2:ef:6b:53:9b:07:16:72:d2:34:21:f9:
d1:31:e1:ca:2d:6e:6f:5a:c7:31:9d:7b:4c:98:86:
f2:9f:56:5b:1a:d6:9e:12:b3:45:df:8f:2d:7c:f2:
68:96:fc:70:5a:d3:19:c8:08:fa:43:38:55:5c:e0:
b5:91:51:f0:51:95:6f:ed:4e:a9:ff:df:b6:1c:98:
e6:06:0e:76:d8:70:2a:ae:8a:6e:89:15:4d:9a:e0:
bd:ee:1e:53:a6:8f:ee:d4:dd:11:32:79:ed:e3:18:
95:1b:6a:c2:c0:4b:c2:15:c7:a0:d9:ff:25:fb:c2:
e0:4e:1f:26:5a:2c:f2:c9:1b:f2:83:e8:7f:1c:fb:
96:e5:bb:81:88:ae:9e:67:7e:76:cf:a8:cf:99:15:
16:83:46:e3:e4:40:1f:91:97:d5:38:9d:c7:8d:96:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:39:C2:32:0D:9E:09:D3:6C:FB:F0:4D:42:62:1D:B3:EE:1B:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23A444E4413B11F0B913DC7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.60.0/23
154.197.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:19:9d:69:94:21:20:49:dc:45:b9:b6:5b:a0:5a:c3:0a:1f:
5e:53:5f:ec:cf:7b:22:87:cb:ec:7e:78:7f:b2:b5:7d:2a:95:
56:49:62:96:18:7d:da:e4:67:e7:21:38:77:b4:f8:8a:bd:f3:
79:82:e1:a1:fe:ff:ea:30:22:21:1a:83:f9:5c:20:4d:77:9a:
eb:1d:19:9e:e6:22:40:c0:eb:92:ad:70:00:0e:3b:a0:ed:fb:
e7:42:6c:53:5b:d8:44:98:cd:43:7e:0e:ad:17:72:14:d1:cf:
9b:f0:38:2f:be:99:72:69:34:40:32:9d:d7:d3:ff:f5:63:e0:
be:0d:0e:1c:05:bd:62:1f:dd:b6:b0:10:fa:41:42:5e:73:bc:
5a:16:c7:5e:08:88:a3:a0:f4:52:24:a4:9c:bf:d2:94:80:1b:
40:f6:2f:3c:41:10:f0:19:19:4f:d8:c7:1f:c5:31:b7:0a:f2:
e6:07:fe:d2:52:a9:8d:49:32:5c:55:1c:71:10:81:75:fd:db:
fa:6e:b5:2d:08:2d:c9:da:6e:d9:3e:79:c1:5c:f5:9c:ab:7d:
33:ac:c0:a8:13:3d:58:74:55:a1:6b:47:a7:a0:6c:3b:8a:e0:
99:75:f1:fc:3d:7a:9f:fc:6f:11:61:4e:fd:9d:74:05:83:fa:
04:bb:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:09:52 2025 by rpki-client