Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBB2B690477F11F0B3E735BCDAE4EC9C.roa
File: BBB2B690477F11F0B3E735BCDAE4EC9C.roa (raw, json)
Hash identifier: eaekxv/81Etg+3E6W1eX1RS1+w64Ylxz/q3+fwewfIU=
Subject key identifier: 37:14:32:C6:3C:5F:15:84:28:27:93:71:BA:23:12:AF:7A:F8:45:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018622
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBB2B690477F11F0B3E735BCDAE4EC9C.roa
Signing time: Thu 12 Jun 2025 11:23:59 +0000
ROA not before: Thu 12 Jun 2025 11:23:46 +0000
ROA not after: Mon 16 Jun 2025 11:23:46 +0000
asID: 204721
IP address blocks: 154.215.2.0/23 maxlen: 24
154.221.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 11:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99874 (0x18622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 11:23:46 2025 GMT
Not After : Jun 16 11:23:46 2025 GMT
Subject: CN=684ab8cf-fb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:97:52:9d:a5:86:91:67:dd:80:4d:d8:c8:04:
64:d0:17:b8:9e:ad:18:43:28:72:c0:af:65:cd:17:
8a:48:1c:c4:38:0a:1b:1e:c6:25:a6:f6:ac:07:72:
20:15:47:b6:b2:03:dc:a9:57:9f:ad:2c:bf:52:4f:
2d:0c:98:70:1e:95:ee:52:3c:f1:aa:a4:02:9a:4c:
0d:17:ac:2e:96:23:c0:7e:0a:d0:7b:05:6c:c4:87:
81:d4:88:61:f6:04:7c:6b:a7:8c:bd:cb:5d:0b:3e:
a1:21:e3:27:63:a4:cb:e7:3d:e1:f6:e3:60:de:47:
b0:94:85:d8:09:e9:27:8a:d0:f6:fe:ba:0d:cb:9c:
c8:69:ab:cc:ca:43:ba:e3:d7:dc:d7:4a:79:61:71:
ec:8c:30:3f:dd:7c:5c:ba:1f:7a:d5:47:07:c9:c9:
1d:bf:e5:02:0e:d4:ee:aa:3e:20:95:65:34:43:37:
86:af:e0:e7:df:b8:a4:92:29:b7:04:4e:ea:e5:28:
59:0d:a8:b6:a3:9c:c5:77:c0:d4:0c:1a:aa:3d:62:
9e:f7:36:e6:f9:bb:2e:8c:99:95:3d:bc:99:b9:b8:
a7:fb:df:b2:35:18:59:ef:43:ef:ec:ec:d9:bf:03:
4e:79:17:62:ac:a5:e8:fb:cb:2c:1e:47:6b:6a:d2:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:32:C6:3C:5F:15:84:28:27:93:71:BA:23:12:AF:7A:F8:45:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBB2B690477F11F0B3E735BCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.2.0/23
154.221.2.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a1:8a:6e:33:d2:c1:6d:02:87:e1:63:53:2f:17:c5:2f:c1:
9e:65:73:c4:10:f0:75:f3:4a:c9:59:eb:91:80:8f:58:cd:0b:
fb:43:24:ea:33:ba:e0:f9:0b:1b:21:f3:a8:a2:20:fc:06:46:
db:96:5b:66:58:5e:58:0f:c1:d0:d3:cc:19:2c:bd:15:11:11:
55:e2:2b:0d:c1:8d:fa:d8:32:d5:1c:d7:49:4f:0b:7e:99:08:
6b:c7:3b:6d:2e:31:58:3b:6d:1c:14:28:06:5b:be:4d:db:6d:
62:1e:d4:bf:95:a8:38:f6:8a:03:39:e2:f8:43:51:c2:c0:23:
59:65:34:05:30:ca:21:66:61:87:f1:f6:e8:c0:e0:93:71:7b:
36:4f:20:d9:6b:ce:57:5e:d8:9b:80:95:c3:2a:11:d6:72:91:
88:57:68:4d:cb:01:c4:18:42:b2:3e:b3:03:8d:a3:ef:12:c8:
94:e5:f8:46:d7:ce:3e:86:da:e8:d8:65:18:cc:e0:0e:a7:bc:
6f:98:ce:de:2a:2f:2d:e0:2e:58:dc:38:90:58:56:c3:d6:3d:
75:63:f9:f9:03:61:3e:0c:af:39:e5:ff:af:15:a2:ae:63:2f:
11:69:d5:6b:16:52:0c:e4:72:25:cc:55:d6:f7:b1:f4:a5:fb:
77:e3:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:00:56 2025 by rpki-client