Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883B13D437CB11F0954EBA99DAE4EC9C.roa
File: 883B13D437CB11F0954EBA99DAE4EC9C.roa (raw, json)
Hash identifier: e3jOWrjJCimCSkJud0jkNd5uHlDazbh5PUTr88tTelo=
Subject key identifier: 30:83:F5:7F:7D:0E:E4:DB:22:67:1F:CE:A8:BE:F6:F6:CE:A2:49:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0181F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883B13D437CB11F0954EBA99DAE4EC9C.roa
Signing time: Fri 23 May 2025 11:46:16 +0000
ROA not before: Fri 23 May 2025 11:46:11 +0000
ROA not after: Sun 28 Sep 2025 11:46:11 +0000
asID: 26617
IP address blocks: 154.202.6.0/24 maxlen: 24
154.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98808 (0x181f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 11:46:11 2025 GMT
Not After : Sep 28 11:46:11 2025 GMT
Subject: CN=68306007-5968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:2c:63:4e:00:14:14:93:0c:4a:5b:48:b6:
85:32:d2:69:16:8a:de:03:43:04:00:24:14:99:cd:
05:38:06:0e:89:e5:a0:d4:dd:82:a7:90:a9:96:09:
18:a8:58:a8:25:5f:86:8a:de:63:93:08:09:52:2c:
50:11:47:af:8b:bb:25:20:ff:b9:f6:b1:a8:0d:12:
dd:5f:9b:58:ad:a9:2d:c1:1c:22:d2:e5:26:31:a3:
a0:bc:1b:c7:df:5a:a0:68:cd:ea:91:a6:42:f3:0a:
35:6f:e7:eb:4b:36:4b:71:08:7c:63:ea:11:37:2c:
f5:ec:f9:aa:9b:a9:a5:1e:01:f7:fe:a1:b4:1c:c3:
00:5d:70:3a:e1:33:b0:9c:3d:a3:0e:e6:b0:18:89:
35:ce:1d:57:34:cb:0e:c4:7d:b7:c2:f1:ca:5f:78:
67:56:29:24:bb:37:c2:d1:83:cd:0b:ab:9c:76:87:
4d:16:9d:f0:1b:05:8c:f2:4d:15:36:2c:9c:23:6e:
52:31:47:8f:31:03:9e:86:91:a5:dc:83:37:ff:7c:
2e:f7:0f:6b:7a:b5:68:7a:87:38:cb:17:8c:8d:ac:
77:06:73:e2:82:c9:74:43:93:c9:46:2a:fb:78:7a:
09:d7:e9:b6:c1:88:bb:2c:40:cf:87:ce:9a:5c:84:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:83:F5:7F:7D:0E:E4:DB:22:67:1F:CE:A8:BE:F6:F6:CE:A2:49:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883B13D437CB11F0954EBA99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.6.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:a0:f7:a6:b4:55:b9:02:69:df:bd:be:0b:a1:52:6f:75:92:
a0:33:02:9f:a1:0c:f4:0f:af:8a:f8:e5:79:f6:39:e8:65:81:
25:f8:bb:a0:c6:8e:f5:6e:00:0a:a5:08:94:e6:ae:3a:be:38:
ae:8e:86:a9:11:c3:81:d4:23:58:1f:42:73:45:84:4b:29:8a:
e5:c1:25:cc:fe:44:a4:78:26:26:2b:83:87:e8:1c:d7:0a:c2:
05:59:c0:e8:43:81:08:21:5a:7f:10:bc:55:e8:f4:8a:3d:6f:
61:b3:fa:66:8d:e3:83:fc:2f:21:85:3f:af:5f:c7:40:f8:57:
a0:e1:09:c3:cb:52:12:ac:43:06:9a:2f:85:e2:b4:b7:fc:36:
a4:40:49:24:e7:de:92:86:ef:b0:6a:ed:2e:3b:fd:72:bd:f5:
67:bc:aa:c6:e3:03:68:f1:58:b1:d8:dd:d3:6f:8f:0c:79:03:
5b:24:37:4f:da:6d:a5:b5:eb:21:e6:6f:ee:e3:f2:6c:61:7d:
82:86:2a:c7:cd:31:0c:5a:a9:8e:5f:5b:cd:74:ef:23:91:e0:
f9:54:d3:5e:b5:58:6c:13:c3:43:18:d2:0f:50:12:c2:d9:51:
95:f6:0d:c7:7e:b8:c2:aa:2a:c6:60:44:9e:86:cc:85:b0:45:
10:38:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:35:40 2025 by rpki-client