Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46AAB736450811F0A14038B5DAE4EC9C.roa
File: 46AAB736450811F0A14038B5DAE4EC9C.roa (raw, json)
Hash identifier: ETnmwp5u5kq1QGvpIqzoVdxign/wJPpQQjeg3HOh4tM=
Subject key identifier: A9:AB:29:3E:CD:38:C0:CF:C9:D7:29:AC:F9:56:5F:09:A8:D1:00:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018584
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46AAB736450811F0A14038B5DAE4EC9C.roa
Signing time: Mon 09 Jun 2025 08:03:50 +0000
ROA not before: Mon 09 Jun 2025 08:03:45 +0000
ROA not after: Mon 14 Jul 2025 08:03:45 +0000
asID: 17557
IP address blocks: 154.81.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99716 (0x18584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 08:03:45 2025 GMT
Not After : Jul 14 08:03:45 2025 GMT
Subject: CN=68469566-2d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bc:3a:34:04:84:84:39:2d:14:49:8d:4a:2c:
0e:34:fd:72:c9:53:6b:f5:a8:e3:e7:aa:a9:e5:c8:
17:e1:68:01:f0:7f:56:f7:94:4a:a3:69:b2:80:8c:
42:4b:72:e5:79:65:f3:7b:d9:23:7d:f9:29:c1:3d:
d0:ac:27:6f:75:96:e2:3e:ca:87:c1:a7:db:f1:c2:
2c:fe:a7:69:21:0c:63:5c:3b:fd:2b:8f:69:25:2d:
01:c8:05:60:e5:60:ff:e4:e9:c1:a1:0f:0a:f7:81:
67:0f:1d:5b:d9:79:5d:04:3f:71:14:6c:9a:d7:f5:
f2:1d:61:94:08:69:c4:46:a1:04:a2:2b:47:90:c5:
a2:bd:53:cb:80:52:c8:5d:77:46:69:1c:c8:c5:7c:
8e:fe:4a:93:b6:52:c3:a2:98:ac:10:d3:76:24:ff:
98:70:30:ac:6f:ba:e8:32:76:ab:d1:83:30:f7:23:
ce:24:6f:67:82:f8:d8:fc:ea:10:12:6f:85:5d:ce:
26:55:2b:c4:81:99:07:7d:e0:31:bc:b6:6a:ad:c9:
81:73:0e:4c:70:70:5a:5c:c1:4f:26:98:d7:80:fa:
7b:60:7d:b8:38:26:ef:68:95:e9:0f:38:64:7e:0f:
72:28:16:31:1e:a4:41:e6:73:d2:44:71:6e:3f:15:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AB:29:3E:CD:38:C0:CF:C9:D7:29:AC:F9:56:5F:09:A8:D1:00:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46AAB736450811F0A14038B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.11.0/24
Signature Algorithm: sha256WithRSAEncryption
11:23:ce:32:e2:ec:23:65:dd:bf:5a:8e:87:25:4b:70:06:23:
c3:f2:b2:f4:99:2f:89:94:9c:f7:c6:33:79:d2:fa:97:b0:90:
70:af:50:e0:46:48:12:81:d8:80:9b:5b:4f:8f:a8:04:18:40:
95:84:a5:76:1f:79:f2:b8:e4:ce:44:01:b1:55:ca:f7:08:ad:
d3:58:93:7e:d0:a4:09:83:b4:bb:6c:87:f3:e9:08:1f:f0:7e:
5d:fa:18:6e:fc:e4:2d:da:7a:b9:85:d1:17:df:6f:95:88:b0:
f1:03:3b:98:58:a4:2d:db:70:68:56:df:a5:57:6d:f9:ea:30:
b6:70:80:b4:74:1b:3c:93:43:5a:40:59:e4:ed:89:f5:9b:f7:
3f:d9:de:41:62:b0:f5:b7:0e:2d:38:73:94:f6:17:f3:c7:90:
92:dd:ef:3c:96:e4:73:85:6e:be:9c:81:d3:18:d5:dd:63:72:
68:51:64:8f:46:10:8a:89:1c:20:03:99:29:9b:45:e1:b5:9a:
7e:5e:4b:1c:0c:d9:0e:cd:46:4b:ea:3b:ee:55:70:d3:7a:ab:
1a:91:a9:1a:a3:1e:f5:3d:ed:9e:c1:ea:a8:5c:66:4a:56:93:
86:7c:45:ad:4a:4a:f5:72:26:5b:a3:19:c7:fa:e7:0e:80:13:
58:f2:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:09:28 2025 by rpki-client