Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAD9A71E41DC11F0BBC2869DDAE4EC9C.roa
File: FAD9A71E41DC11F0BBC2869DDAE4EC9C.roa (raw, json)
Hash identifier: 09PwgV5rUhlgHd7b4FiBBZfuV822ybmWfefjSvHeMlI=
Subject key identifier: 97:2E:AE:97:02:1C:C4:C7:1C:23:75:BF:FE:A2:42:E1:DF:98:9E:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAD9A71E41DC11F0BBC2869DDAE4EC9C.roa
Signing time: Thu 05 Jun 2025 07:16:21 +0000
ROA not before: Thu 05 Jun 2025 07:16:16 +0000
ROA not after: Sat 19 Jul 2025 07:16:16 +0000
asID: 4760
IP address blocks: 154.88.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99564 (0x184ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 07:16:16 2025 GMT
Not After : Jul 19 07:16:16 2025 GMT
Subject: CN=68414445-e413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:98:c1:47:76:f1:55:47:13:4f:52:08:61:
1b:26:aa:c4:8b:a6:0f:85:b9:2d:8f:35:33:30:db:
b8:db:a4:7b:17:2c:2d:96:78:f8:8d:30:14:d9:08:
f6:60:b0:48:d2:d7:b1:50:cd:62:ee:43:08:99:80:
66:44:bd:6c:91:8a:22:57:e0:d8:18:6b:e9:ba:cb:
eb:90:30:ea:e9:90:37:f8:c1:d2:ea:1a:c7:f5:bd:
a0:3e:ae:42:b0:32:ef:0f:0a:fa:d7:dc:14:0e:56:
1d:de:00:ba:fe:83:c5:7a:c1:65:17:3d:54:00:6c:
95:f5:66:dd:3f:57:c9:74:01:4c:ed:79:d2:07:45:
18:c3:a3:20:9c:a2:21:51:3e:14:46:c0:a7:81:47:
4c:5f:6e:f6:bf:41:ec:9e:6e:1e:95:ec:a4:96:78:
04:c4:6d:cf:49:ac:f3:88:0f:fe:7c:02:ca:84:89:
af:ad:c1:00:92:19:48:04:5d:88:52:88:17:67:96:
30:9a:b9:7d:4f:f7:5e:dd:10:93:da:10:23:1e:fa:
04:cb:88:d3:64:bb:4f:b0:0c:d8:cf:c1:73:75:71:
7b:72:c2:48:7d:cd:ed:ab:d2:fb:80:e3:8d:f8:6c:
d6:69:a6:95:c0:82:2d:00:1f:09:87:af:0e:b7:75:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2E:AE:97:02:1C:C4:C7:1C:23:75:BF:FE:A2:42:E1:DF:98:9E:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAD9A71E41DC11F0BBC2869DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.80.0/20
Signature Algorithm: sha256WithRSAEncryption
55:9d:e7:06:6b:6e:92:4c:19:cc:d6:3e:df:2e:61:cb:81:f8:
a1:67:5c:e8:ee:62:bb:0f:00:63:83:7e:46:0f:2d:28:99:39:
b6:26:00:fe:f9:4c:05:a0:ab:b8:04:48:d1:42:11:76:f3:be:
e9:5f:a1:6c:4a:06:08:98:9c:86:5c:59:68:81:79:58:de:5c:
0b:98:25:ad:1b:7e:f3:be:ab:96:2c:3e:e2:51:52:84:08:99:
96:29:6b:a3:dc:9c:04:af:9b:3b:9d:fe:13:67:af:d0:1a:3f:
dd:26:b0:54:cd:5d:a2:42:ef:dd:1b:ca:73:d1:dd:d7:c4:d5:
55:b1:5e:60:95:ac:9f:94:0b:24:f8:d4:ed:d5:17:e4:f8:95:
77:f4:25:fd:90:b6:bd:c9:5f:3a:4c:11:f7:43:e3:77:3c:f3:
8f:17:56:5c:66:86:c1:99:3f:b9:9b:cf:1c:4a:64:bd:21:bb:
93:ef:51:7e:4f:df:c5:24:28:01:42:a9:d6:15:25:00:11:45:
f0:7e:8e:23:b7:a8:29:57:d9:e3:56:8e:62:74:c2:be:3b:6a:
03:45:1c:93:0f:8b:c0:52:45:fd:d2:7a:75:e1:07:df:96:0c:
40:1a:60:6c:51:91:e1:1f:18:25:7c:40:1e:0d:5d:35:e9:48:
d3:ca:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:58:45 2025 by rpki-client