Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF878BA439311F09388FDBCDAE4EC9C.roa
File: BFF878BA439311F09388FDBCDAE4EC9C.roa (raw, json)
Hash identifier: aZTzzAgwa2ahge8wlw0N7ZHHNEjnJBbM6dfa/7LI408=
Subject key identifier: F6:7E:AE:2A:A6:43:AD:98:83:91:3D:10:00:F9:C4:4A:DC:C1:B0:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018558
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF878BA439311F09388FDBCDAE4EC9C.roa
Signing time: Sat 07 Jun 2025 11:37:11 +0000
ROA not before: Sat 07 Jun 2025 11:37:06 +0000
ROA not after: Sun 31 Aug 2025 11:37:06 +0000
asID: 399077
IP address blocks: 154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99672 (0x18558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 11:37:06 2025 GMT
Not After : Aug 31 11:37:06 2025 GMT
Subject: CN=68442467-0455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:fc:dd:ad:31:38:de:7c:e6:3a:5f:bd:e2:
d8:af:52:6f:45:0d:a7:5d:5b:fd:97:65:7a:4d:9e:
f2:39:21:f6:a5:3e:5d:86:67:2d:e4:6f:ac:3f:69:
8c:43:a1:3c:6b:ed:97:3c:fc:7f:83:79:a7:54:bc:
6b:db:d9:ae:f6:56:80:c4:a8:00:bc:88:12:3b:57:
30:02:2e:7e:93:81:12:12:8a:03:8b:94:5f:1d:aa:
bc:ac:c5:d6:48:2b:be:eb:d9:b3:43:5e:5a:96:4e:
08:c6:73:0a:b9:6a:73:83:97:81:82:5f:52:a2:02:
27:b1:b4:b3:42:78:44:a5:42:3a:b2:20:a2:ad:77:
76:47:23:a0:32:c1:03:42:ce:41:4f:da:36:43:7d:
6b:bc:2a:d7:1b:6b:1f:4b:b8:97:89:0c:0d:e7:6c:
52:b5:f1:70:d0:8a:94:fc:68:c8:50:30:15:78:c2:
0b:b7:cc:8d:48:00:6f:15:62:3a:98:f6:3c:e8:94:
f9:92:e0:78:2b:59:6a:a3:30:5d:e6:85:ac:a8:3d:
99:eb:f4:9c:7e:9e:9a:75:d4:68:d1:65:7b:c2:79:
13:b6:68:a6:5e:07:b1:95:cc:24:80:0b:b0:6c:8b:
88:00:85:aa:59:d5:13:b2:c6:df:6a:49:99:4f:68:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:AE:2A:A6:43:AD:98:83:91:3D:10:00:F9:C4:4A:DC:C1:B0:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF878BA439311F09388FDBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.67.0-154.91.76.255
Signature Algorithm: sha256WithRSAEncryption
02:42:19:cc:70:37:b9:28:a1:da:40:73:78:88:ff:b6:8a:bf:
ba:dc:e1:a5:2f:dd:70:fd:22:ab:ee:84:9d:0f:da:b4:a7:0f:
25:9c:3a:d3:f2:d4:bb:4e:75:a6:f3:ea:b2:89:b6:08:70:bd:
eb:d1:db:48:b9:e1:d2:42:92:02:db:cf:8a:30:d0:18:11:3e:
07:57:39:06:65:31:08:17:ba:56:a8:6e:fc:2b:09:ca:89:53:
4f:80:0a:f0:64:e4:b3:c2:e0:9f:59:58:1b:36:03:c1:53:46:
b8:67:ee:31:d2:ab:85:d2:e6:fb:c4:cf:82:1d:5d:8d:ea:40:
dd:87:58:f3:9a:58:b4:17:dc:a1:87:0e:db:b7:77:9f:79:20:
58:e1:cc:03:9d:aa:79:1c:75:d6:25:c3:39:68:68:77:ae:5c:
61:05:c1:e8:de:85:61:6f:08:c9:22:03:7b:51:68:4c:21:da:
99:ac:7b:69:45:f0:d7:56:db:23:aa:b6:de:c0:bc:5f:d9:7e:
2b:95:49:63:1c:e4:b5:18:6e:92:c0:95:55:47:76:4c:bf:b3:
50:f9:93:58:9e:c7:26:ab:25:3c:57:3e:f7:da:2c:3b:39:52:
23:a8:71:04:7e:06:d7:06:2a:5c:da:5d:50:fc:14:4e:50:b3:
44:f0:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:17:00 2025 by rpki-client