Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC65AA72477711F08922288ADAE4EC9C.roa
File: CC65AA72477711F08922288ADAE4EC9C.roa (raw, json)
Hash identifier: q6YzhRqPhRK+sHbySC611cH4ZomLIzC8/RUP107zFO8=
Subject key identifier: 76:A6:C0:27:F3:FF:65:B8:33:95:2E:DD:5B:45:D9:3C:7A:24:39:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01860F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC65AA72477711F08922288ADAE4EC9C.roa
Signing time: Thu 12 Jun 2025 10:27:11 +0000
ROA not before: Thu 12 Jun 2025 10:27:06 +0000
ROA not after: Tue 07 Jul 2026 10:27:06 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99855 (0x1860f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 10:27:06 2025 GMT
Not After : Jul 7 10:27:06 2026 GMT
Subject: CN=684aab7f-7155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:f3:53:2c:1b:b9:f2:9a:40:61:33:5c:ff:
ef:fd:35:f6:c8:3a:0d:95:9a:f8:e6:b2:76:b3:13:
cf:6b:28:2a:bc:d1:69:b7:4c:0f:ed:43:fa:2e:b7:
a7:c0:fa:d7:b1:25:bc:19:aa:a8:0a:1c:1d:93:43:
aa:5c:01:aa:10:a2:fb:f9:18:8b:96:e5:7d:29:52:
95:29:73:55:76:5c:27:ed:bf:e3:f8:9f:11:4d:e1:
fa:11:4c:68:7d:39:db:fb:34:c7:75:67:90:d4:92:
94:67:44:0f:6d:e8:18:27:77:16:ae:3d:17:08:b6:
c2:58:8e:79:69:81:5f:f5:16:46:cf:9c:91:b8:3d:
f0:ae:0a:fd:b8:e0:c0:e4:30:38:2c:45:50:db:11:
23:b4:b1:36:bc:9d:bc:a7:9d:36:c3:fb:a3:78:44:
e6:55:a4:47:bc:f9:93:7e:62:80:f2:02:d5:3b:40:
97:a2:52:63:01:c2:a6:40:16:22:37:7c:44:96:99:
93:9a:df:cc:0d:0c:a8:62:24:03:be:9f:4b:be:95:
0a:a1:29:1b:48:6b:7c:24:3f:10:40:cc:de:91:91:
59:d6:39:89:38:59:b0:46:65:a0:20:78:47:06:c8:
0e:1f:75:37:c9:ce:77:76:ea:58:4a:98:36:75:7c:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:C0:27:F3:FF:65:B8:33:95:2E:DD:5B:45:D9:3C:7A:24:39:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC65AA72477711F08922288ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c0:2d:7c:12:d4:00:4b:d2:7c:cc:67:71:c0:4e:1e:c6:52:
b0:38:2b:f3:27:02:e2:91:e1:b4:82:cb:d3:e8:40:fe:34:66:
16:d0:05:28:f3:65:23:b7:88:a8:ad:66:88:bb:ea:92:c5:4f:
cf:04:7b:2a:fb:0e:fc:ca:4e:1b:04:81:3e:85:55:5d:2a:e2:
6c:97:43:3d:79:c0:c1:a1:ea:03:0b:a6:cd:c2:07:62:65:e3:
43:34:bf:da:3e:c4:d0:5e:c3:b3:83:98:13:a1:e0:02:bd:64:
a8:8a:96:d0:bc:a2:67:bc:9b:34:34:43:37:16:2d:ec:c2:cb:
35:35:eb:4c:9a:6f:42:5b:b9:9d:b1:9c:f8:f8:5f:dc:b9:2a:
2a:3b:f9:93:47:ef:ad:08:4b:91:cb:10:78:ba:7f:26:59:b1:
3a:10:a0:e4:54:3e:25:9e:19:e5:34:0c:55:f6:a6:be:b1:6c:
96:93:28:99:8a:15:17:41:51:b8:59:4b:ed:94:e6:15:5f:aa:
b7:6e:2b:d3:7d:fd:97:96:29:e2:bc:a4:fd:06:40:06:dd:34:
3f:73:17:7a:33:c5:09:09:5f:a1:5d:a1:22:5a:1f:08:9f:8b:
64:75:2b:59:ef:5e:63:8f:c4:63:1c:3f:ff:0b:f3:ae:9f:6a:
c7:8b:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:25:28 2025 by rpki-client