Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC3BE7A4382211F0889711C7DAE4EC9C.roa
File: DC3BE7A4382211F0889711C7DAE4EC9C.roa (raw, json)
Hash identifier: wh23OOFB93CkC5h6GL8fyaX0m40+R4X4+66P5+fhnhI=
Subject key identifier: 93:A2:BC:8B:81:A7:62:06:06:0C:98:88:AA:29:E0:60:50:20:FD:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018275
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC3BE7A4382211F0889711C7DAE4EC9C.roa
Signing time: Fri 23 May 2025 22:11:23 +0000
ROA not before: Fri 23 May 2025 22:11:17 +0000
ROA not after: Fri 24 Oct 2025 22:11:17 +0000
asID: 142267
IP address blocks: 154.91.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98933 (0x18275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 22:11:17 2025 GMT
Not After : Oct 24 22:11:17 2025 GMT
Subject: CN=6830f28b-4ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:8c:cf:1f:f8:cb:fb:c6:4c:a9:58:e3:3f:
dd:75:92:86:99:8a:41:d0:f4:1f:c1:a1:3a:1b:95:
fc:2b:91:32:b4:80:03:9d:15:44:1a:93:b7:85:e9:
3c:1f:27:5e:0e:6f:79:d2:fd:e4:7c:af:70:a4:67:
91:c3:b0:f2:1c:7a:e0:28:81:20:6d:5f:90:7b:57:
71:50:3b:d0:98:f7:fa:90:ea:9a:e8:a1:ab:11:c6:
68:5d:bc:5d:ec:5f:6c:46:6b:3d:13:0c:4b:d6:67:
85:dc:40:37:4e:fe:26:4c:33:18:57:f9:96:d9:a5:
ce:9d:b4:46:fa:f5:e9:7d:9c:3a:3b:32:59:ca:59:
36:64:c4:96:e7:82:b6:17:4b:4a:40:77:98:f4:a4:
3e:68:2f:47:bd:dd:e1:55:92:cc:b5:61:52:e1:99:
92:5f:48:ef:a7:36:57:48:50:0f:12:10:87:6f:91:
6c:83:d6:ae:1c:71:9e:37:3f:2a:ca:2d:c6:2d:76:
84:46:1c:59:38:43:47:a0:ff:64:78:0b:c7:70:98:
39:27:69:50:a0:31:72:8b:c6:3f:82:4b:48:4d:23:
e4:7a:db:e1:e9:47:42:ee:31:a4:a2:74:f9:fe:6e:
15:6c:74:86:de:72:3f:3d:82:37:b2:87:37:25:96:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A2:BC:8B:81:A7:62:06:06:0C:98:88:AA:29:E0:60:50:20:FD:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC3BE7A4382211F0889711C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:dc:c0:a8:09:11:80:b7:f7:58:2f:b8:a3:30:55:4f:8e:65:
7a:50:d7:5b:a1:76:de:d3:bf:78:8a:9d:c3:1c:67:19:d0:fb:
9a:e9:26:31:9d:8c:11:c3:e8:28:86:12:56:df:ef:5d:94:00:
a1:4b:ff:b4:d8:da:54:97:8c:d5:cc:36:6d:d0:55:a0:23:e5:
d3:e2:39:61:68:93:3d:b3:75:df:0f:f3:ca:de:05:05:92:b1:
f3:84:40:90:b9:80:e3:a4:ef:6a:34:34:06:b4:8b:ae:6d:64:
04:d9:3d:32:e4:fc:f4:c7:bb:9f:17:70:ef:31:a3:47:58:63:
cf:7c:29:05:ca:57:a4:8f:cd:7c:1b:fa:f2:6a:1f:d8:c6:f7:
80:19:8e:c3:54:f4:04:af:9d:60:95:e2:28:5c:79:e0:b5:44:
cb:d5:c5:3c:31:41:ea:c3:e7:f6:8f:e0:68:a8:d3:cb:59:d7:
36:47:f0:13:ca:5c:a1:d4:6f:cd:8f:cb:9b:be:5c:9c:ba:32:
d7:41:be:b7:89:5e:06:b4:14:d3:b8:77:95:a0:89:5e:3a:a4:
33:e5:de:53:d0:b6:37:5a:a6:34:25:54:a3:3d:6f:7d:65:fa:
c9:dd:aa:84:4f:00:38:3f:3d:50:d1:f1:3b:12:27:c0:e8:e0:
6b:8f:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:11 2025 by rpki-client