Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD37CE92407311F0B1C897EDDAE4EC9C.roa
File: FD37CE92407311F0B1C897EDDAE4EC9C.roa (raw, json)
Hash identifier: qCtS0YDoL+qtkPDneG9vSqdJcdE3tskUGXBXLBNGniE=
Subject key identifier: 88:F1:91:49:AA:28:92:BC:BE:13:6D:A4:41:40:5D:48:D5:D3:33:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018473
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD37CE92407311F0B1C897EDDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 12:12:17 +0000
ROA not before: Tue 03 Jun 2025 12:12:12 +0000
ROA not after: Tue 15 Jul 2025 12:12:12 +0000
asID: 63139
IP address blocks: 154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.203.170.0/24 maxlen: 24
154.203.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99443 (0x18473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 12:12:12 2025 GMT
Not After : Jul 15 12:12:12 2025 GMT
Subject: CN=683ee6a0-d475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:cb:87:c4:3c:16:75:d1:28:c0:46:bb:99:
51:3f:1d:d3:0d:ba:c4:c0:fd:cd:7e:18:d1:1e:81:
f0:ce:a2:3c:7b:ca:47:16:30:3b:0b:bd:20:b3:21:
aa:ed:8c:ea:e7:a3:6e:c4:cb:aa:28:6e:5a:99:9f:
1e:c8:4c:e9:18:e7:f6:5d:21:66:94:8c:52:a9:cf:
eb:18:64:2f:1c:9e:04:41:6f:d2:e0:ce:72:88:5b:
0f:a8:88:0d:b3:2d:d5:a6:fd:72:21:50:e8:7e:8f:
25:20:da:91:20:16:1e:62:d9:d2:f7:ae:ba:cf:ed:
8c:ac:74:7f:15:36:94:ba:ba:f7:2b:2f:d5:fc:e3:
75:d4:03:36:8a:0e:5d:1b:fb:32:47:10:c6:cf:67:
b4:0c:7a:ad:ac:90:78:cf:82:59:b0:c3:97:9e:6f:
66:ef:15:0d:0b:20:94:ba:4d:79:64:c9:7d:6d:2d:
9c:ec:1b:b1:cd:a2:b6:5d:0c:30:51:7d:0e:b1:ff:
47:28:98:4b:05:d8:35:e3:e5:26:6b:5d:44:a1:09:
be:88:a9:9d:58:6c:67:5c:be:7d:f4:ef:1d:f5:72:
76:74:7e:44:af:af:1a:19:26:62:46:a5:b4:d0:26:
39:44:00:b3:dd:df:c1:83:8d:00:85:98:03:c1:a4:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F1:91:49:AA:28:92:BC:BE:13:6D:A4:41:40:5D:48:D5:D3:33:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD37CE92407311F0B1C897EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.162.0-154.203.170.255
154.203.172.0/24
Signature Algorithm: sha256WithRSAEncryption
79:56:91:77:4a:fa:64:dd:d7:bb:e1:94:bd:96:f2:47:e4:8c:
a2:f7:40:fa:be:ab:4f:b0:48:f0:5d:70:b8:36:44:fa:5f:bf:
94:39:f3:da:a9:4b:7e:2b:51:bb:ea:ea:6a:df:65:42:72:04:
2e:b0:7e:d6:cb:f3:40:0d:5a:cd:2b:73:c3:84:21:03:52:cc:
bb:bf:a4:0c:4d:56:2d:04:4e:26:d6:16:bb:ec:21:0f:41:0e:
54:1f:39:74:ea:2e:83:c1:d7:14:6d:ed:33:75:d6:a8:02:b8:
f7:30:27:ab:a1:da:cb:7a:7c:e4:0c:36:71:10:9a:24:9f:5d:
27:4d:92:21:29:97:55:97:c3:86:bb:73:38:40:8d:ba:fd:b0:
05:88:03:f5:bf:19:54:f3:31:74:bf:60:a4:e3:b3:b7:ee:3f:
8c:e7:30:15:c3:89:72:fa:aa:55:11:bd:1c:90:7e:97:b7:bb:
16:87:35:34:b4:0d:e9:ab:25:5f:f4:8e:ce:11:5b:ce:82:07:
d8:d6:7e:80:63:f3:8f:6d:1e:4a:32:a9:e7:7b:f0:20:9c:34:
13:f2:6b:74:02:9b:65:60:d7:d3:8c:c8:f2:d4:ad:77:58:07:
f9:0c:5a:8c:5d:21:67:7a:23:f5:b8:b0:93:b6:67:9d:b3:b6:
14:ca:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:11:43 2025 by rpki-client