Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05BC8D90406611F0A0D63C95DAE4EC9C.roa
File: 05BC8D90406611F0A0D63C95DAE4EC9C.roa (raw, json)
Hash identifier: kiSWUoGyQaUbaL2LHtykOMwp52Hs4VklAbmYQt/GVV0=
Subject key identifier: CA:AB:20:BB:A6:40:C6:EB:06:5A:C4:96:2D:E8:34:2E:9D:A3:14:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018459
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05BC8D90406611F0A0D63C95DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 10:32:18 +0000
ROA not before: Tue 03 Jun 2025 10:32:13 +0000
ROA not after: Fri 03 Jul 2026 10:32:13 +0000
asID: 984
IP address blocks: 154.222.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99417 (0x18459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 10:32:13 2025 GMT
Not After : Jul 3 10:32:13 2026 GMT
Subject: CN=683ecf32-35ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:39:fb:99:1a:fd:32:0e:80:00:11:ca:c3:
32:8c:f8:04:19:ca:6b:57:40:81:95:af:df:00:53:
88:dd:67:6b:e8:fe:89:4c:bd:d7:c8:06:06:1a:88:
ca:b8:68:87:1b:b9:a8:7a:c6:3f:14:87:b5:72:ec:
20:4f:5f:e7:50:4c:1e:1a:02:d2:21:5a:4a:88:58:
74:a9:54:a2:5f:d2:a5:f1:1b:5b:0c:05:3a:dc:c4:
65:20:95:e8:2d:a3:0f:d6:e4:f9:3c:6d:f1:8a:3d:
f0:8b:f9:04:6c:ff:c1:ad:f5:30:79:5e:69:e4:ce:
ff:45:73:7e:ef:62:cc:71:a9:4a:c9:98:14:33:f4:
05:e1:5d:a6:0b:09:40:c7:10:0d:0c:92:51:f5:fb:
c4:c5:b1:d4:f5:bb:e3:ff:75:57:0f:6f:6d:cb:1b:
1a:cf:49:78:86:0b:67:c8:78:33:34:e2:0b:58:71:
48:88:9b:16:80:be:49:40:a2:f4:ad:c3:c3:45:33:
eb:03:e4:af:bb:e4:e6:47:e9:43:62:d2:1f:af:3e:
b8:02:ae:cd:ad:49:ba:6b:b0:59:df:ee:ac:a2:04:
1b:32:8d:a1:45:f9:6c:00:be:c5:46:4d:b4:29:35:
b3:2d:bf:03:5d:af:9a:b0:17:5a:cd:ee:03:f9:73:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AB:20:BB:A6:40:C6:EB:06:5A:C4:96:2D:E8:34:2E:9D:A3:14:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05BC8D90406611F0A0D63C95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ec:33:d0:87:b7:43:93:36:d0:a9:78:d3:b6:16:3f:36:79:
0a:21:ba:8e:5d:68:47:c4:c4:e2:b0:43:ec:3f:a0:e7:07:38:
19:58:1e:61:95:85:b0:7e:91:6a:70:71:02:68:9b:fb:1e:6a:
9e:24:c1:0f:58:db:78:84:7a:26:c4:75:d5:91:7f:c7:9b:2d:
66:71:84:c3:d6:21:76:24:f0:26:b4:30:d5:49:2f:fb:7f:45:
a5:5f:82:0e:e8:f2:57:5f:75:81:ba:85:58:b2:08:2a:92:f8:
f7:0f:a9:3d:23:73:53:c7:c9:64:55:da:35:23:73:09:97:8e:
db:25:54:95:cd:99:53:23:ab:16:0f:4e:83:c8:84:29:cd:e8:
3a:bb:e5:d7:e4:5b:f7:0d:2d:13:d4:ae:5f:c5:bc:15:3f:c8:
c5:85:55:53:4b:51:4a:39:af:8a:9b:67:7c:44:07:2e:57:7a:
db:d0:1f:84:80:1d:ad:1c:fe:83:cc:63:51:41:58:50:09:3a:
85:9d:86:72:f8:c6:06:c1:f2:08:14:00:79:a7:96:70:2e:c4:
52:da:af:5b:06:04:0d:dc:69:40:dc:69:ba:ad:69:9c:63:27:
48:d0:c9:2b:54:b3:22:4a:01:a4:57:60:ee:c3:ab:be:a5:f5:
97:e3:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:42:56 2025 by rpki-client