Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5851F2B641F111F0BD93A9A0DAE4EC9C.roa
File: 5851F2B641F111F0BD93A9A0DAE4EC9C.roa (raw, json)
Hash identifier: TCq9XzvHp9q4XX0cP53hu3rEEiVm/nwy/8UHPaSdjDg=
Subject key identifier: 4C:91:F2:B5:ED:BF:EB:0C:D1:B3:13:B4:B7:3A:8B:AD:61:1A:54:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5851F2B641F111F0BD93A9A0DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 09:42:08 +0000
ROA not before: Thu 05 Jun 2025 09:42:03 +0000
ROA not after: Sun 13 Jul 2025 09:42:03 +0000
asID: 57043
IP address blocks: 154.222.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99582 (0x184fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 09:42:03 2025 GMT
Not After : Jul 13 09:42:03 2025 GMT
Subject: CN=68416670-f7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:3e:77:c8:f1:80:1d:15:ff:40:0a:90:fd:
b9:3c:2a:cf:c4:85:97:a9:03:fe:ae:77:04:19:a2:
1f:39:c4:73:3e:d2:a0:a8:c0:1c:02:a9:d2:f8:3d:
64:78:2c:6e:ce:d2:c9:21:75:3f:91:24:18:3f:a0:
a8:08:ec:2d:eb:6f:41:ce:d3:d5:1e:f2:53:9e:3d:
9e:68:37:b2:53:74:59:43:70:36:c4:c9:3f:e2:53:
d5:ef:65:00:78:a1:4b:01:f9:f8:1c:b2:62:d5:ec:
f3:f5:a0:c5:e9:9e:b3:8d:1d:a6:51:46:ea:6c:3b:
95:d9:26:83:4e:fa:2e:d7:c6:8a:37:fa:13:b8:0a:
1c:9b:50:94:2e:b1:07:13:90:ee:e3:96:c6:5e:9b:
0b:02:d6:41:6f:00:17:0b:e7:30:b6:88:d9:1d:eb:
05:47:47:56:50:21:97:8b:32:08:9d:2a:58:c7:aa:
03:4f:5c:e5:6e:b7:1f:f4:6b:35:20:6b:df:7a:20:
f0:18:27:28:94:ea:e9:56:a2:9c:21:cb:c8:90:36:
75:da:89:d2:74:63:5c:8b:97:2a:78:2c:c3:f4:7a:
10:ed:3d:33:a1:07:22:08:a1:2d:8d:04:b6:cc:64:
05:24:83:84:a7:18:69:fa:17:53:df:37:7d:cd:34:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:91:F2:B5:ED:BF:EB:0C:D1:B3:13:B4:B7:3A:8B:AD:61:1A:54:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5851F2B641F111F0BD93A9A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6a:b6:59:3e:c9:0a:1e:fc:cd:f7:85:aa:41:7a:e2:d9:1c:
85:42:b1:bf:1e:07:34:dd:59:63:5c:5c:e1:dd:00:c2:4f:32:
31:48:64:ca:92:3c:dc:0c:36:74:6a:2c:04:ed:38:98:0f:6a:
fc:58:5b:fa:b9:12:08:c8:85:1d:46:5f:af:72:65:7d:f5:b5:
55:da:98:f4:e8:4b:26:28:1f:77:a9:bd:59:aa:65:75:0e:53:
43:26:9b:96:cb:64:50:14:92:4f:91:ca:6c:97:c8:64:d9:df:
08:60:8e:43:1b:15:13:16:ab:00:88:2f:f5:eb:13:d4:7d:4c:
e3:6a:49:86:66:bd:78:be:37:38:0d:e9:d8:40:19:9c:cf:72:
9a:85:35:f0:38:9b:05:7d:80:ab:3c:6e:41:3b:61:77:0f:ff:
50:d2:6c:4f:96:dc:ba:7c:a0:03:12:6a:3e:b7:f7:d6:ff:7f:
15:95:71:a6:dd:92:ae:8e:4e:e6:6b:53:6b:b9:b7:8f:3c:16:
60:ba:d9:f2:12:4e:55:6f:b3:6a:15:6d:6a:56:8e:e5:08:13:
a0:cd:21:f4:63:e7:62:56:15:13:15:4f:91:c8:7d:4b:c8:84:
c0:a6:96:0d:a4:5a:31:1f:3f:ec:f7:dc:58:88:b8:a2:34:1c:
db:62:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:50:14 2025 by rpki-client