Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3B6BDA41EC11F092AB0F82DAE4EC9C.roa
File: AE3B6BDA41EC11F092AB0F82DAE4EC9C.roa (raw, json)
Hash identifier: Sio5DrheJed0qwNo09aZYua4is7waDvshqvIQYphgVo=
Subject key identifier: EC:51:AB:48:5F:38:3E:ED:06:07:3D:1E:B5:F4:FC:0D:9A:6F:A9:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3B6BDA41EC11F092AB0F82DAE4EC9C.roa
Signing time: Thu 05 Jun 2025 09:08:44 +0000
ROA not before: Thu 05 Jun 2025 09:08:40 +0000
ROA not after: Tue 08 Jul 2025 09:08:40 +0000
asID: 57043
IP address blocks: 154.82.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99572 (0x184f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 09:08:40 2025 GMT
Not After : Jul 8 09:08:40 2025 GMT
Subject: CN=68415e9c-55b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:7e:fd:3c:fa:15:71:ba:2f:98:be:e9:70:
83:29:22:27:08:4f:e2:b1:87:0a:2d:37:28:24:68:
1f:8b:7b:4e:5c:f0:c0:f0:89:4a:88:0b:11:2a:45:
0b:38:1e:a3:02:5b:d9:1d:3f:80:be:a0:bd:f5:83:
25:3f:26:d5:f5:bd:8d:17:63:49:95:cc:fb:35:67:
11:8e:46:5e:29:b2:eb:48:00:c7:11:f6:a1:2e:72:
62:0a:cf:6d:80:36:77:4e:c5:51:7a:54:31:e5:7f:
09:35:8f:ab:e0:a5:7a:a3:38:bf:ac:37:7c:5a:d3:
8f:89:f7:bd:6e:bd:f7:32:cb:68:ea:69:2c:1e:0f:
29:86:7d:01:0d:bb:a8:f6:3d:10:6c:81:40:a8:99:
9c:ae:30:e1:34:7a:90:2a:bd:30:de:35:72:e8:ed:
dc:53:d6:72:40:c2:42:1a:7e:53:67:24:ef:eb:0f:
02:cc:fe:75:53:fd:54:16:3c:0a:cb:26:e5:4a:0c:
66:aa:b1:e9:25:f1:d0:78:e5:70:1a:77:dd:6f:74:
fd:d6:8a:6c:a0:bd:8b:0a:63:d4:ee:87:61:3c:78:
66:90:f9:2a:72:1d:b3:af:03:65:2b:a6:77:e3:78:
59:60:3a:42:b7:9a:2b:b9:b3:a1:9f:d3:93:c6:01:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:AB:48:5F:38:3E:ED:06:07:3D:1E:B5:F4:FC:0D:9A:6F:A9:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3B6BDA41EC11F092AB0F82DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9b:63:bb:a1:67:4a:b8:6b:f8:c1:cf:d5:16:41:cb:93:0f:
a3:08:ba:96:2d:59:5a:ee:7f:09:4d:e4:cb:3e:f4:6d:71:f7:
26:0b:a4:b3:ab:d0:6f:87:29:e3:bb:01:7a:1e:71:cb:94:90:
b8:f7:30:be:77:db:dd:41:f2:0a:44:e2:4c:05:3a:5e:28:a9:
52:03:5a:89:98:1c:5d:71:a8:c1:e5:59:64:94:5f:1f:32:71:
ea:f8:e0:e9:12:06:10:4f:3f:81:42:a7:a2:60:74:57:75:d4:
74:51:5d:20:be:d6:02:9d:99:2a:9b:ab:19:29:31:42:91:d2:
8b:d5:ac:d2:58:61:02:e4:c3:b0:21:c7:0e:31:c3:99:8c:7e:
e6:7e:0e:12:2e:99:87:51:7a:c1:21:a8:d8:b4:4f:74:35:b3:
fa:e3:ed:94:d9:62:a0:ae:21:85:26:19:53:06:6e:5c:41:80:
ae:43:72:8e:27:0d:44:d5:31:ab:78:34:9a:80:68:4d:37:2c:
07:49:52:43:97:48:08:a8:1e:63:60:c1:f1:48:5b:8a:0b:d7:
fc:8f:3d:a0:84:cc:5b:2f:c3:35:15:53:6b:af:b9:25:e6:86:
14:71:28:b0:a6:b8:72:73:97:d6:8e:c7:36:51:fb:a7:df:6a:
05:16:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:06:04 2025 by rpki-client