Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF031F8483E11F0A69389ABDAE4EC9C.roa
File: DFF031F8483E11F0A69389ABDAE4EC9C.roa (raw, json)
Hash identifier: G6kh6ZO1c36A01U2c35fOSokasakslcjoZ4t5/qvVlw=
Subject key identifier: 1E:BD:FC:22:77:50:FA:4D:A4:1E:A5:6F:FD:08:5D:D5:1B:B8:18:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018666
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF031F8483E11F0A69389ABDAE4EC9C.roa
Signing time: Fri 13 Jun 2025 10:12:13 +0000
ROA not before: Fri 13 Jun 2025 10:12:09 +0000
ROA not after: Sat 19 Jul 2025 10:12:09 +0000
asID: 202736
IP address blocks: 154.88.53.0/24 maxlen: 24
154.88.54.0/24 maxlen: 24
154.88.56.0/24 maxlen: 24
154.88.57.0/24 maxlen: 24
154.88.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99942 (0x18666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 10:12:09 2025 GMT
Not After : Jul 19 10:12:09 2025 GMT
Subject: CN=684bf97d-deec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:62:40:e5:22:2f:3d:93:88:f1:3f:0f:10:4a:
ee:fd:66:e1:f3:90:c2:8f:d7:ad:bf:95:75:5f:2f:
ca:1d:97:a4:5d:4e:35:a2:ab:0d:98:50:05:7c:df:
24:53:57:b6:bc:93:6a:00:f2:00:66:ad:73:aa:04:
13:a0:aa:cb:f3:6f:c2:28:ae:ac:8b:50:51:0c:f6:
c8:ae:24:1a:2e:28:f6:59:35:e7:f9:b6:21:fb:79:
4c:1b:a3:93:49:25:b1:73:a4:20:9e:ae:39:2c:16:
fb:03:c5:05:86:e1:ad:2b:37:cf:a1:ca:cf:43:04:
cd:3d:50:35:1a:7c:da:ff:78:15:6f:8e:cb:bd:50:
24:fa:8b:46:42:7e:78:42:0d:9e:fa:1f:11:38:d3:
40:66:3b:6c:6b:b7:d0:ca:77:1d:7c:34:76:c6:66:
10:0d:5a:b8:f6:f6:8c:a9:7d:23:9e:87:b1:26:69:
ac:7e:b8:0b:61:5d:1b:28:22:5e:8e:d4:8a:30:a9:
57:a9:d4:68:0c:14:0b:e6:dd:31:f4:32:7a:39:74:
92:a3:25:99:67:f9:a3:2e:d9:ed:eb:6a:a7:4f:87:
7c:67:28:3d:f6:c8:d6:03:b3:fc:fa:80:9a:b6:81:
d3:3c:80:d3:e5:7b:35:20:da:c5:a2:c4:aa:5d:5b:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:FC:22:77:50:FA:4D:A4:1E:A5:6F:FD:08:5D:D5:1B:B8:18:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF031F8483E11F0A69389ABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0-154.88.54.255
154.88.56.0-154.88.58.255
Signature Algorithm: sha256WithRSAEncryption
9d:76:21:2e:8b:cb:09:79:d7:92:91:1f:cf:28:a4:ea:0f:c3:
4b:a3:e4:92:02:b5:6d:dd:4f:ec:17:3b:22:bb:80:fd:93:ce:
27:49:03:b6:bb:e3:a3:70:db:04:fa:31:14:f5:9a:b9:95:80:
91:aa:b7:6d:32:6a:41:0a:c2:3e:69:85:aa:7a:cc:5f:99:eb:
60:9a:fd:3a:8a:a5:94:dd:5f:47:f3:dc:c1:ab:28:c1:eb:64:
68:a9:fc:4a:b6:20:d8:b0:1e:5b:86:80:d3:dc:c9:f5:ae:91:
2c:d0:48:33:32:e7:f3:c8:56:1f:5c:43:f5:25:4a:53:9c:12:
92:aa:d8:92:e6:6d:31:3f:3f:88:df:54:a1:57:8e:b6:86:20:
a0:5f:36:8a:32:d7:3d:bb:bc:fd:db:4d:1e:5c:02:2f:aa:5d:
74:39:dc:c2:53:f0:6f:14:e8:a7:9e:63:6f:e3:b4:0d:1f:15:
ae:3f:62:5d:f7:7e:bb:66:27:70:e8:68:20:41:45:90:62:02:
4f:7c:fd:f9:86:25:98:05:bf:3c:19:ca:d8:cf:40:ee:4d:e3:
3d:95:9c:4a:f8:94:aa:17:c2:f0:9f:1d:73:4c:f1:68:1c:93:
f6:05:75:cc:5b:e7:6b:fd:27:f6:b8:3b:88:88:52:03:c9:49:
da:e7:1e:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 12:05:16 2025 by rpki-client