Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEA4EC2A3E2611F0BDC69BF5DAE4EC9C.roa
File: DEA4EC2A3E2611F0BDC69BF5DAE4EC9C.roa (raw, json)
Hash identifier: BgXQm9bKgrUeLY2vFM8mqGeUHESCdw57a1L3faR0VXk=
Subject key identifier: B2:A3:90:DD:7C:29:6B:B4:49:C5:F5:7A:BC:99:C8:52:2C:03:94:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01840C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEA4EC2A3E2611F0BDC69BF5DAE4EC9C.roa
Signing time: Sat 31 May 2025 13:55:12 +0000
ROA not before: Sat 31 May 2025 13:55:07 +0000
ROA not after: Thu 10 Jul 2025 13:55:07 +0000
asID: 40779
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99340 (0x1840c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 13:55:07 2025 GMT
Not After : Jul 10 13:55:07 2025 GMT
Subject: CN=683b0a40-16d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:77:0d:68:d0:a2:7a:28:68:5f:66:f5:1a:
cd:31:01:e7:29:94:36:3b:4e:9b:00:cd:d4:40:70:
4c:3e:ae:b6:14:65:34:82:b6:d8:28:77:f5:ca:74:
94:67:d1:49:c8:2a:66:a9:ae:17:b0:77:21:cf:96:
92:cb:c4:d6:63:7c:54:3c:10:fb:cc:16:b7:53:bf:
3c:17:35:44:d4:a0:fd:a3:76:5e:aa:4b:e0:d1:f7:
57:6d:ec:76:71:eb:5d:24:eb:68:ca:f6:dc:54:de:
71:5f:6e:86:e5:da:0d:62:07:54:4b:46:55:24:95:
28:fc:f5:d8:6e:4f:5a:3e:17:bd:53:c6:ed:8a:f6:
8b:65:1e:b9:a3:c7:f2:5c:5a:eb:32:68:45:25:26:
e3:da:5f:cd:9a:b3:fe:f4:f0:c7:98:6a:30:be:8c:
c5:92:22:02:d4:a8:aa:b9:5d:b0:d5:7d:99:27:e5:
3b:56:78:af:e8:eb:a9:9b:1c:4e:de:e3:99:3e:c3:
8c:50:bc:c0:c8:6f:77:69:69:8e:fe:9c:8c:31:31:
18:4a:eb:dc:f6:27:b6:99:f0:5d:6e:3f:9b:31:6b:
55:e4:1b:8a:ff:f0:4a:66:fc:42:02:cb:13:ec:e7:
6d:c0:01:88:a8:95:04:e4:00:5f:04:8d:54:97:7d:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:90:DD:7C:29:6B:B4:49:C5:F5:7A:BC:99:C8:52:2C:03:94:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEA4EC2A3E2611F0BDC69BF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
d1:b2:c1:7f:de:ef:00:ea:44:6f:f2:7c:d1:7e:2a:c1:cf:bf:
8f:88:a3:60:e4:d3:8f:f7:1d:51:e2:03:6e:dc:40:0d:e0:95:
a9:96:a3:58:d3:d2:2b:c1:79:01:ed:8f:4f:05:c0:a5:c6:af:
32:6a:ca:65:51:3b:ed:63:b8:4f:82:7c:b7:7b:5d:9e:74:87:
9a:05:97:40:11:59:8d:cd:25:d2:7d:de:53:4e:dc:94:3b:44:
e8:bd:0d:81:16:cd:46:74:e0:87:32:dc:ac:83:ee:6a:13:a0:
fd:31:7d:ae:10:63:c5:e8:af:42:cf:4a:73:99:54:67:5a:8a:
6d:6e:80:6e:75:b5:3a:b1:9d:a3:65:6a:58:e0:7e:65:86:af:
3c:14:dd:06:8a:8c:85:7c:1f:bc:d0:f4:73:f6:e2:9d:ee:d8:
14:74:07:77:53:1d:3a:5b:bf:d8:fb:99:4b:bf:01:56:c3:c1:
49:83:b5:1f:f0:54:50:d0:75:f7:5a:0d:4b:7e:e2:c5:30:17:
2d:31:c0:56:26:74:cf:e7:6c:47:b5:28:c0:a7:06:b2:31:21:
8e:9c:aa:ad:fb:4e:b3:1b:04:0b:d8:3e:74:09:be:fc:8d:a6:
d7:f8:3a:0f:25:4f:58:24:40:b0:e6:b6:da:f1:85:91:1b:cc:
91:73:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:53:33 2025 by rpki-client