Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F8A312482E11F08C4622C4DAE4EC9C.roa
File: D4F8A312482E11F08C4622C4DAE4EC9C.roa (raw, json)
Hash identifier: A9JdP4IN/3gIgH9xzw0t6pCVEOnKhZNniKAgzKwla74=
Subject key identifier: 7B:7A:69:16:92:E3:33:DA:1F:4B:17:3C:10:7C:43:E3:36:A2:9F:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018645
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F8A312482E11F08C4622C4DAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:17:23 +0000
ROA not before: Fri 13 Jun 2025 08:17:18 +0000
ROA not after: Tue 07 Jul 2026 08:17:18 +0000
asID: 984
IP address blocks: 154.83.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99909 (0x18645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 08:17:18 2025 GMT
Not After : Jul 7 08:17:18 2026 GMT
Subject: CN=684bde93-11c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:f2:c1:03:c1:22:06:02:79:d4:d8:be:88:
e6:38:19:85:8f:ce:3b:10:8c:85:9d:6b:57:30:d5:
ed:9d:5c:83:6b:3e:fb:b4:c9:23:9d:c9:98:05:24:
c7:d0:1a:3a:8c:2d:fe:d5:9c:9b:0a:c9:68:30:c7:
85:b4:8f:7b:1a:7d:13:fb:20:3f:fc:d7:6c:ae:4e:
c0:1e:c4:45:30:9b:8b:d8:d0:27:23:e3:21:b2:82:
a9:3d:aa:0a:ec:b5:76:44:c5:ca:33:85:2a:36:ae:
0a:c3:a6:a1:e6:77:8f:37:e1:57:b7:8b:a7:27:27:
f4:2b:4f:eb:51:da:f9:29:54:b7:db:79:68:3c:2d:
4c:de:89:c2:72:20:65:b0:20:13:e5:af:db:a5:f4:
5b:4a:cd:4d:2c:14:70:fd:ce:2c:93:ed:19:09:7a:
f1:ab:99:c5:5d:ff:cf:45:81:4f:46:3f:6f:6e:83:
e2:51:bf:11:5b:19:e0:e7:fc:86:00:f3:a1:7a:63:
60:29:2b:81:6e:a8:d6:74:f4:0c:5d:82:75:33:9e:
67:81:ba:15:61:1d:70:9c:b0:bf:d5:03:74:5e:d2:
bf:42:d9:54:1a:c9:fb:04:7a:de:8e:d3:30:e0:20:
1f:71:06:49:cb:d6:aa:89:a7:44:b3:2e:b1:11:db:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:69:16:92:E3:33:DA:1F:4B:17:3C:10:7C:43:E3:36:A2:9F:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4F8A312482E11F08C4622C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:87:17:e5:33:f9:e9:dc:1c:e5:6d:dc:8d:cd:f8:04:19:cf:
d4:3d:cc:ce:36:32:17:b8:fe:f0:3f:c2:2a:cb:c7:e3:d7:35:
27:39:6c:10:a2:6e:94:f4:d0:df:49:ec:db:6a:03:30:8d:01:
4e:3f:99:01:33:a2:85:bc:ea:79:79:b4:6e:8b:18:28:53:4c:
3f:d9:43:5d:35:7a:f1:37:78:2d:0a:03:44:8d:5e:90:4f:02:
68:e0:4f:f5:d9:65:06:85:c5:b1:63:05:06:c7:19:12:df:de:
0e:99:2a:f7:bf:6f:c5:11:11:1b:8b:14:be:e6:1c:17:de:1a:
a5:7d:cd:9d:d3:f7:72:b8:9c:58:8d:1b:04:01:9d:54:e0:36:
13:69:01:ef:8f:4e:a0:e3:33:18:2b:9d:80:ae:8d:79:59:04:
f2:51:e0:57:b0:32:cb:f9:7c:dd:ce:04:5d:6d:bb:c3:fd:c7:
22:fa:02:6c:34:e5:67:b9:68:9b:17:71:c0:b2:ce:b7:41:8c:
3e:30:f0:a0:ea:41:1a:32:3a:f3:45:07:96:68:7a:a0:34:96:
f3:03:d7:96:dc:aa:41:a1:78:8b:96:3d:1c:a1:55:24:ef:46:
75:5a:fa:b2:47:f2:ac:9a:74:8d:ec:a9:73:40:80:ba:75:3e:
94:67:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:18:30 2025 by rpki-client