Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003D88CA3D5411F09CB3BE9CDAE4EC9C.roa
File: 003D88CA3D5411F09CB3BE9CDAE4EC9C.roa (raw, json)
Hash identifier: 48g0hpOyBkPrknLEALNxKwwvFDI9QZEG24ZacJIUSrg=
Subject key identifier: AC:C7:E2:A4:3E:93:77:B9:94:27:27:4A:01:B1:5C:1A:A2:3F:A2:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003D88CA3D5411F09CB3BE9CDAE4EC9C.roa
Signing time: Fri 30 May 2025 12:45:44 +0000
ROA not before: Fri 30 May 2025 12:45:39 +0000
ROA not after: Thu 14 Aug 2025 12:45:39 +0000
asID: 984
IP address blocks: 154.193.6.0/23 maxlen: 24
154.193.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99285 (0x183d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 12:45:39 2025 GMT
Not After : Aug 14 12:45:39 2025 GMT
Subject: CN=6839a878-655b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:4f:39:dc:f6:5b:6b:96:5a:88:a9:45:94:
b7:d5:c0:9c:4c:1e:cf:c3:39:bc:69:4d:0b:63:ab:
17:18:38:14:b0:d2:98:ad:6c:92:75:98:ab:44:50:
60:e0:36:00:2f:ed:1c:45:57:f2:14:b7:b6:28:f3:
39:97:cc:e4:ee:e8:01:c1:e7:7b:6a:72:8f:cc:15:
d9:22:f2:86:4b:c2:66:55:ba:54:90:f1:09:5b:1d:
5a:39:04:85:1d:93:d9:9d:3b:df:01:e8:8d:19:0c:
a0:f6:46:c6:58:a9:79:00:53:b8:4d:9f:4c:06:2a:
12:1e:fa:a9:ef:79:7e:5c:13:b6:d1:57:a6:a8:54:
07:1b:1d:a7:6a:4b:a5:28:3d:ce:a8:05:8b:bf:a2:
84:4a:95:7e:f9:c9:4d:38:ca:a0:b4:51:7b:be:ea:
9b:2f:6e:9d:fb:97:ea:82:4c:f3:2a:32:58:f4:cc:
fa:87:61:f3:3f:06:c5:49:8b:65:f4:e6:d7:04:9c:
1c:a9:5c:0a:e3:ef:5b:7a:ec:d8:2b:bc:23:d6:8b:
88:02:37:43:12:84:31:25:62:41:6a:ca:a2:9c:39:
40:b6:0d:a9:f0:2f:c8:3c:4f:0b:74:ed:ea:49:c9:
b2:1c:78:59:5c:22:7d:09:d2:48:0e:79:b8:e0:58:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:E2:A4:3E:93:77:B9:94:27:27:4A:01:B1:5C:1A:A2:3F:A2:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/003D88CA3D5411F09CB3BE9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.6.0/23
154.193.38.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:7e:ee:3e:a8:dc:83:a1:dd:00:6f:ac:ec:21:ce:ca:ef:f8:
c4:3f:01:fc:f7:f5:fd:2e:a1:57:bc:6b:e5:f7:2b:c7:d3:c8:
f3:dc:3d:80:b2:af:d8:5b:c2:aa:81:a6:07:16:f4:fb:fb:a2:
01:1a:7e:3f:f0:e9:30:db:0c:bd:77:33:24:c5:de:00:70:a6:
39:5a:32:ab:88:a5:a6:e1:90:24:03:dc:36:b4:48:14:c1:5d:
97:ea:82:ab:89:25:03:b6:fc:40:5f:e5:85:1e:56:b9:51:c8:
fe:c9:5b:29:23:26:74:24:da:d5:22:19:7b:67:d1:50:e9:e7:
0f:e2:b6:6e:df:54:d8:d9:3b:10:4c:aa:4e:e1:eb:ca:03:7e:
15:bd:9c:25:1a:3e:99:41:5a:02:9f:7d:5b:f0:46:64:5c:3f:
c0:a3:68:df:9d:e6:16:a1:29:64:e8:5b:a7:7f:5b:09:09:26:
35:28:99:4a:ff:5f:f8:58:ef:be:1a:7c:06:5d:fb:95:9f:83:
77:74:b9:c3:da:47:4e:cf:7c:cf:7d:71:12:c6:5f:1b:2a:7c:
9e:fe:d1:f3:e0:01:90:a2:7b:12:c3:b4:7a:59:44:ee:27:1a:
d2:3a:73:0e:e9:05:6d:83:c6:00:4e:82:9b:0c:6a:90:8f:ad:
01:f9:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:13 2025 by rpki-client