Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24150B72414311F0A36C25B0DAE4EC9C.roa
File: 24150B72414311F0A36C25B0DAE4EC9C.roa (raw, json)
Hash identifier: ffqbIp8eKAp8xa5za1gKTiaCAgIt1pR+yR8xNX3ClZE=
Subject key identifier: 95:85:42:E7:2D:9A:01:C4:9F:68:46:D5:5B:95:DE:8E:6B:C3:5B:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24150B72414311F0A36C25B0DAE4EC9C.roa
Signing time: Wed 04 Jun 2025 12:55:08 +0000
ROA not before: Wed 04 Jun 2025 12:55:03 +0000
ROA not after: Sat 09 Aug 2025 12:55:03 +0000
asID: 395793
IP address blocks: 154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99552 (0x184e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 12:55:03 2025 GMT
Not After : Aug 9 12:55:03 2025 GMT
Subject: CN=6840422b-bd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:b9:f6:7c:b3:22:ea:e5:33:dc:98:ed:40:
d5:8d:46:db:99:83:d6:b3:b7:15:c2:43:90:ba:a3:
cc:0d:44:51:61:77:84:34:f1:61:52:51:4d:15:11:
d5:a5:7e:c1:49:6c:f3:91:1f:49:42:9c:87:c6:e1:
d5:a3:d0:36:18:a4:d0:f3:b7:38:a0:02:ca:d4:d4:
82:e9:2d:38:ad:32:ca:f0:4c:2f:f0:6d:6b:5f:56:
71:b1:be:45:11:ce:9b:2b:e9:cf:26:a4:cf:ff:05:
f6:b7:f7:06:6b:3e:c1:19:e3:96:04:b6:db:fd:72:
45:59:4e:95:35:26:9c:e3:82:e9:46:3c:d9:fd:51:
60:32:a0:5c:0e:b0:9d:c0:f8:89:f5:de:a5:ec:99:
ad:37:c6:f1:6f:b4:52:ec:da:24:3f:03:d4:3a:90:
9b:d5:d8:47:26:f0:8f:22:c2:38:cb:79:74:0b:89:
b1:92:b3:5e:8f:d2:b3:59:63:bc:b8:ec:dd:76:82:
d8:1d:9d:d9:f8:4e:e2:16:98:7c:2e:15:25:8a:41:
d8:96:c4:a6:ac:55:52:ea:b2:4a:9e:3a:cc:df:56:
6c:53:22:d2:19:03:e7:81:f1:f2:23:e3:3d:86:f6:
6f:6f:ca:bd:12:4e:89:40:86:7d:a6:5e:d7:ec:c1:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:42:E7:2D:9A:01:C4:9F:68:46:D5:5B:95:DE:8E:6B:C3:5B:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24150B72414311F0A36C25B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:2e:8c:b3:9a:fd:63:45:cc:33:7d:d5:2a:28:aa:ee:d9:50:
bf:3d:83:8f:3c:0a:d5:03:22:33:82:8a:87:83:61:83:dd:1f:
a2:5b:b5:2c:49:17:b6:55:e1:58:1b:39:a3:43:46:98:59:80:
42:dd:b2:32:38:c1:3e:96:0e:bf:24:78:dc:ec:01:17:7f:51:
cf:90:4c:49:41:ad:d0:aa:16:48:25:a6:78:fb:7f:c1:d4:82:
64:a0:2c:38:f6:00:c0:3c:4c:35:92:0a:20:32:ff:7b:a8:58:
ea:4f:29:26:23:a1:d1:7a:1a:54:22:6d:67:0b:40:ec:68:9a:
bf:e3:b9:be:86:45:b2:dd:8f:bc:85:93:4a:e8:dd:35:2c:47:
95:d8:da:35:59:fc:4f:73:33:d9:be:dd:e2:ce:af:87:b9:33:
5b:b4:89:e4:23:d9:63:60:a4:48:3d:f1:12:aa:1c:ab:fa:de:
a0:91:5b:e1:70:38:46:92:f0:6b:ac:e9:5f:4e:a2:e5:7b:19:
26:66:a1:c9:5e:e3:68:e8:b0:fc:24:52:7c:8d:a0:e3:cd:da:
ca:24:87:a4:2e:fb:ec:4e:2e:8e:fd:ae:78:c5:db:30:29:64:
4f:f9:63:bf:d4:d5:ce:d3:ed:fa:e6:ab:eb:2a:86:6a:4c:53:
c7:e6:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:39:09 2025 by rpki-client