Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE933A50483211F0B0419EDCDAE4EC9C.roa
File: DE933A50483211F0B0419EDCDAE4EC9C.roa (raw, json)
Hash identifier: 5oI/Gel4tFovt9NJqjY6jiA1W7QPlFyvQSsTWNlVyrA=
Subject key identifier: 30:D0:D1:0D:76:8F:44:B5:E2:FC:8E:DB:A2:38:9E:67:C8:BB:67:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018654
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE933A50483211F0B0419EDCDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 08:46:17 +0000
ROA not before: Fri 13 Jun 2025 08:46:12 +0000
ROA not after: Sat 20 Dec 2025 08:46:12 +0000
asID: 138678
IP address blocks: 154.202.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99924 (0x18654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 08:46:12 2025 GMT
Not After : Dec 20 08:46:12 2025 GMT
Subject: CN=684be559-01ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:1a:a6:96:2a:53:54:90:63:fa:cd:47:e6:
76:63:40:ce:a6:3f:28:e1:17:fd:84:4f:11:ee:54:
c3:db:fc:13:a8:d1:bc:44:04:d9:8b:bb:a1:fd:69:
1f:59:4f:fc:cf:03:a3:8e:dc:dc:1d:a0:98:9a:b4:
d0:c4:52:44:bc:5d:66:e7:94:a8:69:31:7e:07:8d:
09:72:90:4a:69:c8:84:b2:6e:56:63:05:a0:38:04:
5c:40:8f:65:cd:c1:0c:44:45:ea:f4:65:9f:fc:8e:
b2:5e:55:9b:36:a4:f1:85:98:e2:2e:e6:19:50:0a:
5b:e3:44:3f:1b:47:c9:d6:ea:99:a2:a7:15:b2:d0:
6d:a5:ce:5f:69:86:f9:40:48:57:76:4f:1d:fe:1e:
25:79:48:58:f9:38:aa:56:07:8f:11:65:09:e1:c6:
30:fe:f0:92:26:f1:03:65:f3:c4:48:23:75:cd:72:
03:80:cc:38:a4:1a:4e:ad:61:c4:95:09:38:48:2c:
00:c7:c3:f9:d1:11:4b:6d:ef:90:f9:77:17:b1:cc:
bc:ef:c8:35:73:de:89:15:c5:a9:2b:36:31:37:3b:
14:5e:16:ab:56:7e:0a:b3:55:3d:b6:de:26:2a:3f:
2e:b8:e9:3b:f1:5c:4e:d5:88:b8:57:4c:81:36:86:
6e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:D1:0D:76:8F:44:B5:E2:FC:8E:DB:A2:38:9E:67:C8:BB:67:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE933A50483211F0B0419EDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:38:84:3e:11:41:54:b9:92:cd:05:fc:61:47:dc:8b:86:2f:
d1:06:ca:e0:ab:54:88:58:6c:e2:f2:a4:0a:a5:1e:cd:9e:d0:
f4:7c:96:8f:f9:b4:66:54:dc:a7:b3:ab:11:a0:84:71:b7:fa:
48:aa:7d:c7:1a:a0:92:f2:74:1f:f5:c4:af:ef:00:97:1a:3e:
2c:f8:cc:b0:c4:a9:53:91:ff:aa:e8:aa:30:2f:fe:a9:eb:53:
9a:bd:51:b6:95:2d:51:1d:52:5c:f3:71:8d:82:24:e5:0a:bc:
5c:40:5d:4b:54:a3:5f:e2:3c:65:96:57:85:65:81:03:91:5c:
56:db:49:a6:9b:98:fb:10:23:89:47:16:ba:12:19:43:de:88:
aa:e8:84:0d:18:9e:36:dd:79:a0:a3:8b:d7:a5:16:71:21:ad:
5b:56:00:18:c7:ce:90:4d:b5:7d:08:52:54:47:ef:70:e1:29:
10:4d:df:65:c9:78:4d:7e:d9:7a:c4:8b:80:39:5a:54:f4:83:
d9:2b:80:1a:86:bf:67:96:f9:36:3b:40:a4:67:2e:81:9f:6b:
f6:f4:f3:03:36:3e:3b:08:05:a6:12:21:5e:14:b7:46:20:79:
81:bc:7b:dd:fd:3b:d9:5b:a4:5a:d3:19:b7:2a:39:19:c3:5c:
53:de:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:57:02 2025 by rpki-client