Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61224AC242D611F085EE5EEBDAE4EC9C.roa
File: 61224AC242D611F085EE5EEBDAE4EC9C.roa (raw, json)
Hash identifier: f39FK93c40augh5M368bzthGS3rD9oUmdhyiF34X0a8=
Subject key identifier: 34:2C:8C:8B:EF:6A:D0:A2:3B:70:1D:65:F7:15:05:BE:4D:DF:BC:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01852A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61224AC242D611F085EE5EEBDAE4EC9C.roa
Signing time: Fri 06 Jun 2025 13:01:37 +0000
ROA not before: Fri 06 Jun 2025 13:01:32 +0000
ROA not after: Fri 11 Jul 2025 13:01:32 +0000
asID: 401664
IP address blocks: 154.81.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99626 (0x1852a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 13:01:32 2025 GMT
Not After : Jul 11 13:01:32 2025 GMT
Subject: CN=6842e6b1-80b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:aa:7a:22:04:73:1f:f0:e3:fa:e2:d4:96:
e5:50:67:9c:06:a4:74:e2:9d:cc:e7:9f:1b:6e:87:
ac:df:66:ca:47:02:ed:55:a6:bd:84:bf:67:cd:7e:
bc:91:33:13:07:9c:7d:88:2e:a0:57:12:c1:bd:e8:
01:17:da:37:35:ed:30:d0:a9:5d:1b:13:dd:a3:1b:
d5:92:6a:71:9e:32:b5:0e:ac:e3:bf:30:c7:b9:63:
d3:3d:c1:5d:c4:84:1a:60:cf:a1:72:3c:70:ec:38:
9b:a9:55:8e:9c:31:02:da:ba:f6:9a:b4:84:0f:14:
69:ee:3e:1c:e7:80:d6:9d:1a:de:60:5f:d0:b2:b5:
52:ca:e4:d5:63:67:9d:05:3f:cf:35:74:97:c0:9c:
f5:3e:26:51:a5:52:cb:12:e0:12:4d:6d:d0:0a:cb:
0b:cd:87:7f:f2:ed:19:f6:58:53:9c:c6:5b:58:7e:
b6:c0:20:e9:75:09:2e:84:c3:ea:b4:f4:5d:2c:52:
0f:29:9c:52:58:ea:50:4d:74:3d:94:87:4d:f5:a0:
47:51:92:be:3e:10:f6:ea:fe:3f:d4:73:95:90:62:
8a:68:87:61:dd:6b:82:5a:3b:48:6d:e0:96:18:48:
ca:15:85:02:11:2a:00:d3:11:8e:01:a1:5c:cc:f6:
2f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:8C:8B:EF:6A:D0:A2:3B:70:1D:65:F7:15:05:BE:4D:DF:BC:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61224AC242D611F085EE5EEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:8c:42:29:5a:7d:cb:9d:80:48:b1:11:ca:80:eb:91:91:c2:
f5:8a:6c:15:71:7f:89:79:d7:a5:31:97:a9:d7:fe:ae:46:c7:
86:80:49:bb:4a:ce:26:3a:98:b8:d4:59:d5:b9:32:75:71:66:
06:50:03:0a:fd:b3:63:1c:f7:15:9c:4f:cd:9b:e4:18:8c:27:
24:af:c1:aa:fb:f1:7b:5a:f6:cb:0f:d3:fb:4c:f2:5d:c9:1d:
a9:ed:f8:d9:10:20:ab:c6:c6:74:af:b7:c6:d2:9e:bc:71:96:
a1:bd:74:76:d2:42:e5:6f:cf:2e:ce:49:82:7e:e8:45:5b:75:
d6:2b:3c:74:00:db:2e:94:33:c1:dd:24:3e:d2:06:b9:f7:c7:
a1:e1:66:3a:92:64:9b:c5:b6:8d:43:7f:fc:be:40:9c:17:21:
91:68:e8:43:bc:85:ee:62:19:b5:32:97:11:2a:ba:02:44:57:
5b:53:f4:99:40:b8:4e:3d:e7:a7:bd:5a:3a:72:5d:c6:66:80:
19:cd:73:a2:bd:52:8b:7d:90:55:6d:bc:50:ff:5b:52:7f:b5:
c2:f0:75:b6:7a:4a:53:28:35:4d:17:b9:4f:03:d6:68:f7:41:
d5:b0:42:6c:c8:86:2b:f7:89:f4:ff:25:0f:b7:2c:6b:dd:2d:
d8:d9:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:35:35 2025 by rpki-client