Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B046AF36355B11F08F4EBE78DAE4EC9C.roa
File: B046AF36355B11F08F4EBE78DAE4EC9C.roa (raw, json)
Hash identifier: Gs9XwsVJmISUOpqwV+1hXe3yrYRtGYS99ESKATJEapE=
Subject key identifier: 0D:73:26:01:BA:3B:A1:39:36:D0:1C:7F:3F:C5:DE:9C:76:84:37:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01819D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B046AF36355B11F08F4EBE78DAE4EC9C.roa
Signing time: Tue 20 May 2025 09:20:37 +0000
ROA not before: Tue 20 May 2025 09:20:32 +0000
ROA not after: Tue 17 Jun 2025 09:20:32 +0000
asID: 20473
IP address blocks: 154.200.168.0/21 maxlen: 24
154.200.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 09:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98717 (0x1819d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 09:20:32 2025 GMT
Not After : Jun 17 09:20:32 2025 GMT
Subject: CN=682c4965-254b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:7b:75:97:45:27:4b:a1:74:a1:25:57:24:
fe:13:be:bd:d2:46:cb:98:89:38:14:10:78:2b:6b:
42:96:79:c4:e2:ae:68:0b:0b:d4:23:37:c1:b0:a4:
42:25:9d:c7:5a:82:4d:ea:c6:ab:09:a8:cc:f5:7c:
fa:c4:df:b6:2e:b8:cf:bb:7b:8b:f4:2c:04:44:0e:
64:42:10:76:ff:50:db:eb:02:6d:ad:79:c7:a9:8b:
91:67:73:87:b8:2e:c5:e9:bc:ab:72:1a:75:f5:5b:
70:73:ff:16:ed:17:fe:7b:49:2f:0d:0d:90:aa:e4:
5e:34:e5:c1:e8:d3:ad:d4:ce:08:51:37:a2:b3:de:
f2:4b:70:8f:74:73:01:e6:d4:e6:09:91:a9:7d:e1:
7b:6a:51:22:54:c2:41:13:79:95:3d:d5:56:6c:a8:
76:e8:63:68:2a:1b:b6:0a:1f:19:f4:1b:b9:21:aa:
95:1d:3e:38:a8:74:d9:cb:26:49:67:64:9d:86:a9:
0e:33:b5:7a:e4:ad:f2:da:b4:64:a7:46:8f:63:1f:
c3:b1:08:60:70:81:15:44:d3:32:6c:87:3d:d8:ff:
8c:c1:0b:e2:03:de:ed:cb:58:6a:a2:5b:fb:73:53:
9c:94:a6:4f:89:dc:88:34:ec:cd:90:79:a9:0c:cd:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:73:26:01:BA:3B:A1:39:36:D0:1C:7F:3F:C5:DE:9C:76:84:37:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B046AF36355B11F08F4EBE78DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.168.0-154.200.183.255
Signature Algorithm: sha256WithRSAEncryption
c0:1f:ef:f5:71:8e:d9:9d:f2:ee:60:a9:0c:39:49:5d:1b:1d:
d1:5d:3b:20:66:69:20:71:53:99:84:ad:5f:9a:58:fa:e4:86:
c3:af:f3:ee:34:03:cb:60:46:37:bd:3a:60:c1:5e:45:30:97:
95:06:1a:1b:98:a9:23:fd:81:9a:c1:c4:f7:37:40:63:9f:45:
a0:36:81:70:0c:a6:af:7d:b0:24:cb:66:83:fc:8a:3a:14:af:
9b:69:c6:dc:cf:e1:9b:02:da:2d:03:73:ff:0f:a8:66:94:07:
49:2a:a9:af:81:07:03:47:3d:48:09:20:9c:de:0c:d0:e6:e0:
64:f5:6b:f8:88:40:35:43:78:d9:27:bd:99:a8:cd:7c:10:dc:
25:34:6c:7d:a9:39:ce:9f:4a:76:07:d0:ae:ca:c9:63:11:f7:
78:e7:da:6e:fe:d5:9f:ba:ac:2d:9c:1f:be:41:d9:aa:50:ee:
d8:bc:98:c5:30:70:fc:e8:8c:b9:15:eb:4f:5a:7c:77:20:a8:
f0:c1:79:d7:df:a8:61:3f:51:2d:d8:f1:7d:03:0d:14:1b:99:
88:dd:d7:ae:f9:da:3c:86:58:3e:c6:12:05:d7:57:b1:9e:ae:
5e:00:93:ab:29:08:3e:31:a6:5d:30:69:98:03:8e:f5:38:cb:
b8:ae:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:09:12 2025 by rpki-client