Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3D58C4483511F0A6C29CEBDAE4EC9C.roa
File: 4A3D58C4483511F0A6C29CEBDAE4EC9C.roa (raw, json)
Hash identifier: JJO9Zr9d9ersf9FFsipv7XmsmtbevHg3BgZQoqoteYw=
Subject key identifier: 64:25:F9:25:F5:A5:64:19:D2:13:E8:6D:2B:D7:7C:EB:AF:CB:E1:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018656
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3D58C4483511F0A6C29CEBDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 09:03:37 +0000
ROA not before: Fri 13 Jun 2025 09:03:32 +0000
ROA not after: Thu 17 Jul 2025 09:03:32 +0000
asID: 6079
IP address blocks: 154.210.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99926 (0x18656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 09:03:32 2025 GMT
Not After : Jul 17 09:03:32 2025 GMT
Subject: CN=684be969-65d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:19:4a:e6:29:0b:c1:89:3a:e2:1f:c4:66:
9e:06:8b:28:c6:b9:91:3a:d5:c4:8d:d0:a9:37:35:
b0:54:07:7c:db:ab:26:b9:0e:79:be:2a:71:60:0e:
89:af:62:8f:c2:65:3c:22:88:98:d4:8e:59:b6:84:
4d:fd:95:f8:af:16:c4:97:b3:9e:3c:c4:0a:c5:98:
7c:83:07:d1:2d:dc:fd:7a:a6:bc:d0:5e:77:4c:a8:
63:c7:f1:20:28:44:6f:2c:8c:df:e7:48:2e:dc:97:
d8:f4:53:26:77:15:3a:24:1d:d3:dc:09:17:d3:31:
f0:c5:d6:93:cf:c7:76:7f:1c:d8:50:a5:24:6b:c2:
0e:d3:9e:97:e3:58:29:04:ab:be:e2:ea:c0:88:05:
1f:ae:63:6e:f7:92:28:d6:53:a0:b9:96:86:1a:04:
d2:33:6b:f7:47:65:9e:54:8c:dc:84:92:b3:b7:ba:
5d:dc:ab:f6:69:aa:68:b8:e6:c6:4c:c1:c1:46:47:
76:c6:87:97:67:e0:cc:4e:e5:af:5c:8f:34:f7:12:
d9:41:8e:0a:9d:b6:b6:67:32:cf:02:b2:71:ae:17:
f3:ca:7c:29:7f:07:d2:4c:bd:13:d8:44:7e:4b:f2:
02:83:54:b3:1c:2b:1d:1f:b5:a8:36:81:be:d3:13:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:F9:25:F5:A5:64:19:D2:13:E8:6D:2B:D7:7C:EB:AF:CB:E1:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3D58C4483511F0A6C29CEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/19
Signature Algorithm: sha256WithRSAEncryption
43:26:1b:37:dd:a7:9e:b5:75:c5:75:25:99:bf:37:51:ac:aa:
c2:e5:66:ce:e0:bf:05:4b:5d:e8:cf:e0:63:3c:c9:87:3b:3b:
1c:c1:82:58:67:43:7d:b4:d8:14:5f:5a:48:a6:57:09:0f:be:
e5:b9:6d:d3:6e:25:d3:52:b2:bc:21:78:ba:e4:94:ce:cf:5b:
3a:7e:2b:17:5e:da:1a:f8:4e:36:34:b9:1f:46:2e:3e:0c:7c:
19:2c:49:e9:84:27:47:63:c7:80:cf:3e:31:64:f5:d9:1b:9b:
c0:f3:c4:6d:6c:23:e1:cf:ba:90:8b:33:e3:36:d9:3d:a7:bf:
c5:28:15:ff:0d:16:c0:5b:f6:ca:7e:48:9d:7d:43:3e:72:19:
73:0d:cd:cb:d2:d0:81:90:d3:3c:01:33:ec:37:d4:e3:d1:f8:
aa:84:04:05:77:84:31:cd:25:25:14:48:ba:6f:df:7c:b4:c1:
0b:9b:fb:02:ef:3b:05:38:b0:65:cf:12:76:9b:c0:8d:19:3f:
6d:59:03:70:7d:77:07:d7:01:18:ae:db:ca:c0:5d:60:d9:2a:
cf:45:1a:17:5a:06:e1:e3:1d:79:ba:29:d5:4b:05:66:65:80:
4c:3b:b2:a3:66:3a:37:d5:84:06:a4:a0:63:d9:2d:59:39:29:
16:f3:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:32:01 2025 by rpki-client