Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D24A7D643A911F0822028C7DAE4EC9C.roa
File: 8D24A7D643A911F0822028C7DAE4EC9C.roa (raw, json)
Hash identifier: S3HMIImuRFS/e2LooYicjKsSPwFBbYQv3icOZkrUKXA=
Subject key identifier: 50:CA:89:B0:66:7B:82:EE:46:07:4E:E0:88:09:B1:51:7D:89:6F:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01856E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D24A7D643A911F0822028C7DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 14:13:15 +0000
ROA not before: Sat 07 Jun 2025 14:13:10 +0000
ROA not after: Wed 16 Jul 2025 14:13:10 +0000
asID: 57043
IP address blocks: 154.193.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99694 (0x1856e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 14:13:10 2025 GMT
Not After : Jul 16 14:13:10 2025 GMT
Subject: CN=684448fb-8944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:3a:e0:32:18:ea:0d:4e:e2:28:eb:22:7c:
eb:4e:96:e5:1c:18:cc:56:14:72:2d:cf:ff:c0:88:
37:e1:9c:2e:f6:90:7e:49:c9:a1:e0:7e:a5:a3:54:
d7:43:70:6e:c9:f9:60:a3:2b:04:72:fb:55:8d:28:
99:ba:f9:42:36:9b:1e:b7:23:c3:06:0e:1d:ac:37:
7d:75:df:f0:b4:fb:2e:cc:7d:f4:26:f0:3d:84:32:
d3:6f:27:62:18:c5:dd:17:be:bb:77:01:ac:bd:56:
a7:47:17:cf:a7:43:e9:15:3b:ca:eb:9d:dd:b7:23:
56:1d:de:8a:fb:74:ef:1d:3c:f5:0c:51:39:75:cd:
65:a9:d5:bd:88:82:20:84:a0:83:e0:0e:ed:8c:f4:
80:e8:a6:fa:3d:5a:9c:df:26:c9:20:43:f7:79:e1:
5b:fa:18:29:e3:ac:9c:13:a0:64:55:28:13:79:c8:
b6:9e:0e:4d:e3:56:ec:c2:05:da:57:0a:56:c6:71:
c7:47:21:99:e8:58:1d:3b:86:f7:38:05:bb:0c:bd:
0a:40:da:b3:5f:36:53:4e:e6:36:84:68:cc:d3:f0:
5a:ee:0b:19:38:d9:f7:c8:00:c7:97:18:e5:48:2c:
b4:12:ef:73:19:2e:29:7b:61:eb:2c:ae:48:6b:c2:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CA:89:B0:66:7B:82:EE:46:07:4E:E0:88:09:B1:51:7D:89:6F:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D24A7D643A911F0822028C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.184.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:0d:13:4f:03:64:cd:2c:d2:0f:97:ca:4a:dc:03:c3:05:d6:
0c:2e:d6:18:58:df:8d:71:42:23:3e:9a:7d:86:e9:83:be:f6:
2f:39:b8:90:e3:2a:14:4b:84:e5:e1:df:fd:1a:ca:49:b6:99:
8b:02:9f:e0:e3:23:e8:32:c5:2a:f1:d2:48:92:c0:44:ad:ee:
b6:6f:f2:43:3c:a6:6b:97:15:4a:ca:dc:2a:bf:90:a0:eb:61:
36:1b:20:1a:ab:47:2b:bc:0b:9d:a8:60:fc:c9:12:8b:57:be:
fb:7f:ab:a2:ba:ed:44:3c:a4:b0:3f:3a:7c:f5:7a:e0:51:e4:
c2:78:f7:78:bc:b5:28:71:e7:de:bf:e2:63:3e:7e:ba:94:f8:
58:69:e9:e8:6e:55:e3:e8:78:2d:1c:2d:bd:95:cc:85:ba:dd:
8b:06:d7:9f:e4:be:9b:59:91:fc:5d:7d:5b:48:20:a0:5f:98:
c8:3e:e3:76:e9:19:35:41:f7:46:86:b0:aa:5c:a7:92:3d:72:
fb:0b:5b:55:30:b0:3b:ba:9d:2f:53:c4:0e:6e:58:0d:71:13:
79:01:03:72:03:3a:a3:1d:f6:d7:bb:c2:bf:5f:0b:f1:74:31:
7f:7d:f5:00:e5:81:ea:c8:3e:6e:fe:50:ea:3a:33:d9:42:46:
33:bb:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:06:06 2025 by rpki-client