Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73544FEC483011F09A50FECCDAE4EC9C.roa
File: 73544FEC483011F09A50FECCDAE4EC9C.roa (raw, json)
Hash identifier: R9EqcaIApUts4riaM70xajck23GzsfnAq80WorQugf8=
Subject key identifier: E5:1B:AD:85:46:99:32:7C:82:74:A8:3F:9F:E4:B0:99:47:5E:8B:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01864B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73544FEC483011F09A50FECCDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:28:58 +0000
ROA not before: Fri 13 Jun 2025 08:28:54 +0000
ROA not after: Sun 22 Jun 2025 08:28:54 +0000
asID: 134687
IP address blocks: 154.93.4.0/24 maxlen: 24
154.93.5.0/24 maxlen: 24
154.93.6.0/24 maxlen: 24
154.93.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99915 (0x1864b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 08:28:54 2025 GMT
Not After : Jun 22 08:28:54 2025 GMT
Subject: CN=684be14a-7cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:41:1b:ba:08:cf:b9:2c:e9:14:6a:34:45:
73:9b:c6:2e:59:f1:e9:c5:48:66:17:6f:84:25:f8:
63:9e:f4:58:2d:7f:49:2b:1b:0d:e5:0c:3b:d4:56:
91:e9:78:4f:58:83:ed:77:cb:78:6e:29:f4:9d:7a:
03:74:58:ca:87:84:5f:f4:9e:ea:c8:0d:58:8f:89:
cf:c7:85:53:a5:ce:9b:34:ec:2e:05:ed:07:c7:2b:
a4:52:18:48:0b:9d:f5:28:54:17:a0:8c:78:95:4e:
5f:c1:6f:01:a6:ed:0d:32:d3:1b:52:86:98:67:7a:
c4:cf:9b:9f:71:b0:9f:27:6e:71:2c:13:e4:d5:94:
fa:e3:fb:61:12:c1:90:94:15:18:c4:93:47:68:7b:
7c:dc:91:20:ad:13:8c:0b:cd:01:b7:f5:22:44:f1:
0a:ff:f7:4d:11:9e:54:68:b6:da:2a:89:dd:9f:fb:
bb:8b:70:eb:a1:e0:fc:fd:8b:96:2f:b6:fc:fb:d2:
11:e7:a9:64:a0:f9:92:24:03:4f:b2:3b:e5:c1:4d:
dc:d9:58:5d:e0:6a:ba:c9:25:c5:8a:49:a7:cb:0e:
23:7f:a5:9a:37:3b:6e:57:7a:bf:1a:a9:16:5a:b0:
d8:bf:7e:48:f9:fa:41:e2:77:b5:1a:20:b0:3f:29:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1B:AD:85:46:99:32:7C:82:74:A8:3F:9F:E4:B0:99:47:5E:8B:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73544FEC483011F09A50FECCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.4.0/22
Signature Algorithm: sha256WithRSAEncryption
59:a1:d6:74:1e:90:72:18:62:20:15:24:fa:f9:bf:a9:53:d6:
c1:06:a7:5a:9d:9c:6c:72:b1:de:b1:28:a1:45:0f:e2:1b:95:
0c:36:f9:2d:60:a8:e8:de:52:bd:d9:da:e3:07:ed:a0:bb:9a:
c9:2e:74:84:d9:be:f1:73:4e:ba:7e:97:e1:b3:3b:6c:bf:cb:
75:db:91:52:14:9d:34:e1:d6:f9:2d:e0:90:eb:10:fb:ad:1a:
38:31:91:b3:3e:3f:58:96:27:84:e6:bc:bf:49:9a:67:87:7a:
bb:66:b4:ca:14:2a:b1:2d:7e:c4:07:47:d0:f1:40:9e:d3:a8:
d1:fc:71:7b:9d:83:b6:34:a0:ad:53:fb:89:05:b5:93:39:f7:
d8:a0:9f:7e:dd:fc:7c:97:46:a1:53:f1:a2:08:65:74:6f:4c:
33:1c:a3:e9:11:27:12:30:e6:2a:ee:d1:c8:07:48:b9:3a:cd:
f7:fe:e3:27:51:27:64:3c:64:97:43:ce:a0:df:a3:ff:cf:7e:
13:ee:8f:eb:75:a1:f9:e6:cc:08:a6:f0:03:3e:8f:25:02:ca:
42:99:a5:59:90:27:ad:ac:ec:09:25:a9:1c:c7:6d:d1:40:8e:
a0:06:e5:11:a1:9a:94:ef:2f:a9:6e:dc:e5:12:17:57:73:e7:
b9:3e:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:34:27 2025 by rpki-client