Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A023C596483711F0B950A27CDAE4EC9C.roa
File: A023C596483711F0B950A27CDAE4EC9C.roa (raw, json)
Hash identifier: vgnBVmeFUhKcz/iWiQoaeA4kT30MuwzpQUBuiVsuNAE=
Subject key identifier: 11:F2:84:A5:0E:45:07:80:CD:98:B6:4A:F6:2A:D6:23:60:8D:78:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01865C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A023C596483711F0B950A27CDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 09:20:20 +0000
ROA not before: Fri 13 Jun 2025 09:20:13 +0000
ROA not after: Fri 18 Jul 2025 09:20:13 +0000
asID: 57043
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99932 (0x1865c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 09:20:13 2025 GMT
Not After : Jul 18 09:20:13 2025 GMT
Subject: CN=684bed54-f9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:ee:2d:1a:08:98:d5:62:ae:7e:1e:1c:fd:
2f:ab:98:6b:01:b4:9a:21:03:58:30:8e:ba:57:54:
d2:12:8a:76:16:b7:ac:ca:7a:ff:eb:c8:97:13:f5:
fa:26:cd:4d:50:27:9f:11:8e:9e:4d:43:fa:f5:a9:
f1:39:61:26:e5:75:24:49:4e:1d:e9:4e:cb:11:cd:
44:0f:89:9a:17:08:0a:7e:c0:e4:a4:d7:76:ac:6e:
ab:ed:bf:65:3f:6d:3b:2e:52:33:95:6c:2d:b6:e9:
f9:6a:46:00:31:4a:c1:c5:7f:3d:09:88:9b:77:07:
f8:51:ec:c1:9d:90:41:4f:61:2c:01:74:43:04:ed:
be:55:d7:33:96:a0:7b:9f:e3:17:be:5b:f2:59:60:
99:22:b1:9d:b5:c5:cf:43:00:97:e3:d0:3b:68:4b:
c3:b4:40:69:bf:91:40:e8:9f:26:a0:30:87:18:32:
86:b4:84:45:e0:a3:b1:76:bf:56:80:7d:05:10:47:
89:d8:79:47:7d:a8:36:ac:9f:82:80:27:e3:e8:47:
47:09:27:ea:24:6c:fc:a6:18:28:2f:f8:e8:7d:3f:
97:c7:3b:77:4c:1d:df:90:e3:42:0d:30:52:95:dc:
5b:36:ad:ad:c0:39:cb:cf:c4:e0:96:88:16:9e:f2:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:84:A5:0E:45:07:80:CD:98:B6:4A:F6:2A:D6:23:60:8D:78:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A023C596483711F0B950A27CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a1:3b:fa:a4:87:c7:65:86:ba:f1:51:5d:7f:43:7e:4c:2d:
91:35:23:75:b6:a7:5a:77:bf:c9:a9:fc:03:f7:4a:6b:68:12:
e8:8c:70:9e:df:7b:40:16:30:37:d8:4b:49:db:af:33:84:0b:
ef:05:7b:17:e2:4e:97:77:44:4d:3d:3c:0a:2b:49:28:c0:4e:
82:a0:72:16:18:d6:64:b7:31:5b:6d:9f:9d:7a:48:9f:27:83:
cc:39:5f:a6:09:74:31:ff:90:6a:60:bd:bb:87:85:e1:3b:2d:
63:09:47:72:d2:65:81:78:c9:b1:bb:09:99:74:df:90:4c:e6:
b4:cc:ee:28:96:2a:0f:e0:2b:35:42:23:b1:6e:da:12:45:3e:
45:66:80:85:cb:25:18:ad:78:37:fd:f9:69:82:67:d1:d6:fe:
3c:2b:68:dd:71:e8:21:2f:61:18:5b:c5:50:fa:c1:6c:8f:d0:
3c:db:f8:f9:84:c5:cc:74:f4:24:13:87:d3:52:9e:d0:0f:1a:
b1:f2:88:64:0a:0f:b7:41:fc:e2:2c:ff:20:f3:47:44:8c:98:
6a:af:1a:a3:cb:a4:21:55:f4:3b:68:d0:2b:3a:12:45:0a:3a:
19:c3:99:03:5e:52:3c:a2:bd:46:b6:15:5e:bb:7b:b1:34:0e:
f8:91:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:03:59 2025 by rpki-client