Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34CBADDA49D211F09FCE77E8DAE4EC9C.roa
File: 34CBADDA49D211F09FCE77E8DAE4EC9C.roa (raw, json)
Hash identifier: DP5rGHJdE1uPU5R0A/POOzd5g6oJBV9065ECScz/rkc=
Subject key identifier: 33:C3:21:02:22:8E:50:B0:17:69:0B:08:A5:E1:67:7A:7F:5A:59:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0186B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34CBADDA49D211F09FCE77E8DAE4EC9C.roa
Signing time: Sun 15 Jun 2025 10:19:23 +0000
ROA not before: Sun 15 Jun 2025 10:19:17 +0000
ROA not after: Fri 25 Jul 2025 10:19:17 +0000
asID: 54801
IP address blocks: 154.90.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100024 (0x186b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 10:19:17 2025 GMT
Not After : Jul 25 10:19:17 2025 GMT
Subject: CN=684e9e2b-9db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:3d:09:74:ad:bf:9c:2c:f3:0c:2f:c2:1e:
fd:c3:69:51:19:63:0c:1f:63:4f:2c:22:17:6a:51:
2e:14:69:24:39:fc:85:22:bf:67:77:3c:9b:e1:9f:
4c:0f:54:38:33:87:27:96:0c:2c:a5:90:fa:7b:4e:
ec:49:39:54:df:64:9a:16:6b:a1:a5:bb:de:4f:ad:
9b:1b:1b:50:21:e9:82:b9:73:8e:3b:2f:01:99:be:
40:48:b2:0e:1d:fb:11:81:b6:10:47:2e:bd:2e:fd:
e1:eb:6a:9f:86:74:55:3e:7e:7c:72:09:f2:56:15:
f5:4d:1a:e7:17:9a:52:97:c9:17:f3:cf:e1:60:1b:
10:23:85:2e:3c:af:f2:ea:47:71:ea:58:ef:34:0a:
c2:41:e9:2f:2c:0e:19:79:b8:0c:e2:3b:63:6c:8f:
d8:b7:10:3b:68:e6:3f:c4:b1:4c:28:67:8b:1a:60:
67:09:7a:c5:59:3d:3b:fd:79:55:d8:e0:10:4a:77:
7a:66:90:55:64:19:41:3b:53:82:da:dd:03:7f:63:
66:26:06:29:2c:4a:ff:78:97:03:96:5c:bc:52:ba:
2a:32:90:5b:3c:84:9e:b2:be:ce:ee:f9:d8:de:8b:
b4:9a:b0:e1:fd:d3:90:25:ed:c9:94:3d:a5:d8:d6:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:21:02:22:8E:50:B0:17:69:0B:08:A5:E1:67:7A:7F:5A:59:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34CBADDA49D211F09FCE77E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
90:5f:df:e1:8a:e5:6c:c8:37:45:7c:9b:88:3e:85:4d:1e:ed:
5f:41:b4:f1:50:05:b1:da:a8:0d:9a:3d:34:49:81:96:44:fc:
07:06:27:d3:ef:7f:7a:f7:d5:ec:74:94:f7:46:11:2b:30:4c:
98:5f:cd:eb:d5:dc:fe:af:7b:ca:45:c0:79:34:10:4d:6b:58:
c8:ad:ec:b6:28:ac:d7:df:cc:f2:1e:2b:ff:1c:45:0c:38:f2:
0a:db:48:f5:e3:79:50:63:2c:69:cf:39:9d:37:5f:8d:43:f2:
ce:4a:fa:5a:1e:8c:31:79:ad:1a:0f:18:2d:9a:68:60:06:46:
ce:7c:5e:5e:d3:10:2a:fd:ba:93:a4:4b:5b:62:98:81:53:a5:
7e:2d:64:df:5f:7c:8a:18:58:79:1e:25:d8:d7:ec:8a:8d:47:
2b:08:56:28:49:25:c6:8a:cb:b3:fa:df:8a:42:09:ed:7c:df:
46:1c:97:99:f4:1d:72:fd:9d:d6:d3:0a:da:97:5c:1b:bf:bb:
22:a7:81:51:86:b9:bc:5d:de:f7:c3:f2:b4:e2:b6:e1:3f:14:
f1:7d:3f:fd:f8:f3:fd:ad:9f:64:81:ed:cd:8f:4c:52:b1:2a:
36:47:7b:53:a4:55:3b:26:c0:34:fd:18:7b:68:6e:2a:96:68:
91:61:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:19 2025 by rpki-client