Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE9FAE641FA11F0A91BCCD7DAE4EC9C.roa
File: 5BE9FAE641FA11F0A91BCCD7DAE4EC9C.roa (raw, json)
Hash identifier: JyF0T05ZB4MvsUiu9HtmByTyzxqNcoCMGLyR1i07qmY=
Subject key identifier: 93:D5:D8:F4:83:AF:29:70:6E:45:47:19:5B:9A:C6:0F:B8:7C:F7:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01850E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE9FAE641FA11F0A91BCCD7DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 10:46:39 +0000
ROA not before: Thu 05 Jun 2025 10:46:34 +0000
ROA not after: Sun 10 Aug 2025 10:46:34 +0000
asID: 30781
IP address blocks: 154.217.176.0/23 maxlen: 24
154.217.184.0/21 maxlen: 24
154.217.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99598 (0x1850e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 10:46:34 2025 GMT
Not After : Aug 10 10:46:34 2025 GMT
Subject: CN=6841758f-8f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:d5:03:fd:13:27:ea:65:ee:8e:d2:c4:b2:
da:19:95:9f:21:5a:15:e9:4a:1b:75:af:8d:54:7b:
ff:0c:37:f0:9b:d7:2d:6f:fa:04:d8:46:ba:46:e5:
54:35:ea:a6:75:07:3e:41:29:ca:d4:f3:a9:52:8a:
47:6a:94:76:43:b9:7c:ef:dc:69:8d:41:ba:33:8b:
cd:06:83:fb:af:1b:b6:a2:76:9b:f7:08:f4:c0:41:
bf:42:f3:ec:ff:d5:f9:63:64:85:76:70:b1:84:0f:
f0:b4:c2:99:70:1b:81:57:44:64:ea:72:34:d1:2e:
c6:1f:e0:f7:79:94:68:ea:9e:b7:f1:2f:b4:94:d4:
0c:49:6e:95:81:40:0b:fc:c5:cb:ad:a6:74:36:14:
4b:55:7f:3b:88:4c:95:b9:91:66:60:0b:02:f9:c8:
d9:bb:b8:7a:42:6e:4f:29:38:ba:55:bc:d2:fd:4c:
53:f8:5b:11:22:0d:a5:3a:b6:dc:7d:14:74:42:ec:
ec:5c:51:33:76:49:30:f2:e9:b2:dc:5e:97:6b:18:
96:88:ae:d1:29:d5:83:22:fd:8a:66:83:f7:93:a6:
bd:24:99:4c:ef:45:92:57:8b:b2:2f:46:86:dc:e6:
ae:37:27:49:3f:0d:4e:96:e9:ba:b4:59:da:fc:43:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:D8:F4:83:AF:29:70:6E:45:47:19:5B:9A:C6:0F:B8:7C:F7:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BE9FAE641FA11F0A91BCCD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.176.0/23
154.217.184.0-154.217.223.255
Signature Algorithm: sha256WithRSAEncryption
13:c4:e1:a3:15:2d:d5:18:9c:97:4f:0f:b9:e1:22:26:35:97:
85:a3:75:7a:c8:c6:b7:01:4a:ff:be:51:ef:65:b6:5b:33:74:
08:ee:c8:d3:33:c6:64:62:bf:0b:9c:2a:44:f4:86:63:1e:bd:
ed:a6:d6:21:60:c4:dd:82:5c:e8:34:26:a8:65:6b:a6:ee:56:
6d:55:2d:34:07:ec:9d:d4:8c:60:e5:97:a9:84:8a:10:7c:0d:
05:95:e7:10:ad:79:b5:82:09:b9:0c:03:88:a5:56:7d:7e:e6:
3e:a7:50:4b:73:11:3c:09:12:0f:cf:68:e4:cd:6a:c3:04:dc:
69:ea:b8:8d:16:f9:32:c1:4b:f6:17:30:77:99:6a:7a:df:1f:
45:0d:0c:f3:d2:34:ba:ac:4d:e3:00:9f:97:0a:bf:d6:0f:44:
25:59:a8:b0:24:73:2d:1f:97:a1:a0:cd:bc:5f:b4:7e:ac:60:
4c:f8:ea:fa:9a:8e:75:7a:57:69:a5:f9:84:dc:1c:9e:b2:f4:
bd:16:b2:5a:9f:90:87:c3:0d:8b:da:58:81:b4:ac:eb:b9:31:
90:52:81:2f:b7:18:ae:b3:12:7c:42:a8:27:b6:d9:d8:48:1a:
7d:be:65:94:2b:10:f0:03:33:0d:9b:37:b9:91:98:eb:3a:d8:
4b:9a:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:21:04 2025 by rpki-client