Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0EA93C443AB11F0B7440AD6DAE4EC9C.roa
File: E0EA93C443AB11F0B7440AD6DAE4EC9C.roa (raw, json)
Hash identifier: 6mgeBbFRFarJ7NA24cBcDzZhBwaJK7npLekHdtjk8B0=
Subject key identifier: C8:92:40:40:6E:7E:49:1A:F9:E5:A9:35:00:F2:13:44:36:5C:12:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018572
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0EA93C443AB11F0B7440AD6DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 14:29:54 +0000
ROA not before: Sat 07 Jun 2025 14:29:50 +0000
ROA not after: Wed 16 Jul 2025 14:29:50 +0000
asID: 137899
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99698 (0x18572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 14:29:50 2025 GMT
Not After : Jul 16 14:29:50 2025 GMT
Subject: CN=68444ce2-bd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:c4:3a:db:d3:3f:50:14:b2:1f:aa:7d:b8:
97:0b:d8:15:40:b3:5e:dd:af:74:13:f2:0a:3d:13:
0f:ca:b8:04:cc:43:91:1a:89:ba:43:63:f8:73:87:
84:e1:6b:4d:b2:89:d1:df:f0:25:dc:bc:9a:4f:cc:
87:a6:56:6e:fa:bf:56:a8:8f:89:6d:92:af:84:ab:
0b:0e:a8:16:e6:0b:31:4c:89:72:8a:ca:dd:04:39:
e9:f8:a9:a9:d8:88:88:51:c1:25:80:e3:eb:3f:b0:
3c:2c:81:a3:00:23:94:89:7f:b1:ec:9f:0e:2b:4c:
06:d9:d6:a0:52:05:33:ba:ea:14:f3:8b:78:4b:08:
a7:0c:4b:75:3e:f7:8c:9f:cf:b3:99:1a:41:9b:b2:
af:ea:0c:c4:c5:24:13:38:19:2e:05:01:e4:9f:f0:
5e:a2:d2:28:02:61:da:91:77:6b:40:a9:bb:d9:88:
4a:80:6c:dc:48:a5:78:14:1e:e1:3d:9f:6e:0d:0f:
51:9b:18:1e:a6:ce:db:fd:d6:80:ab:0a:10:26:26:
dd:83:9c:bb:8d:3c:30:c5:b4:39:fe:f1:ec:72:73:
aa:9e:d8:c3:17:f1:07:01:f1:90:64:f5:9e:2d:b7:
83:ca:ae:2f:bf:34:34:b4:0e:16:cd:07:2a:05:81:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:40:40:6E:7E:49:1A:F9:E5:A9:35:00:F2:13:44:36:5C:12:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0EA93C443AB11F0B7440AD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:e8:79:47:46:9a:20:fd:a0:53:ae:6a:08:bc:c3:25:e8:3f:
21:a3:cb:9e:5d:91:eb:bc:fd:0f:74:86:1f:a3:53:02:38:24:
e7:85:eb:33:e9:94:a9:ac:0f:01:5c:58:a0:6a:af:60:29:3d:
c7:65:98:c7:a6:a4:a0:f4:e9:fd:c3:46:d4:d6:19:b2:b3:91:
7e:4a:0a:42:96:f8:e1:2c:a5:27:a8:1d:fb:72:47:f8:49:2e:
14:6c:ad:9a:56:46:da:96:43:58:d1:7f:6c:ca:9f:4d:0f:54:
6f:fa:06:26:fa:47:35:98:07:45:08:e6:91:1b:20:61:3e:49:
2b:8c:26:a3:8b:85:87:39:7a:3f:55:06:bf:5c:29:bf:57:79:
5c:81:d8:fd:90:6c:ce:b5:97:21:22:7f:38:64:62:30:bf:59:
c2:60:53:6a:cf:b9:e6:d3:9d:26:0f:d3:c0:09:ed:07:b9:07:
e3:69:39:d2:52:fa:f6:bd:ad:5e:3f:fd:19:b1:c6:06:6f:42:
ff:85:c0:70:63:c1:84:7d:17:f4:e7:e5:2c:d4:96:bb:77:55:
1e:a8:c2:61:52:55:e7:40:00:ea:e1:d6:c7:ab:53:c1:57:e5:
be:f8:e9:7b:96:b5:f3:87:89:59:50:60:dd:30:21:0e:b4:4a:
53:ae:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:21:21 2025 by rpki-client