Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08B1D7743F9111F0AA3733AEDAE4EC9C.roa
File: 08B1D7743F9111F0AA3733AEDAE4EC9C.roa (raw, json)
Hash identifier: VWMD/g0GJB/cuXBTBTptr8imUplUe0a3rKt4Sv1oqFU=
Subject key identifier: 5F:BF:F8:86:25:76:E4:C3:7E:13:75:44:48:3E:05:09:0C:AA:F8:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01844C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08B1D7743F9111F0AA3733AEDAE4EC9C.roa
Signing time: Mon 02 Jun 2025 09:07:40 +0000
ROA not before: Mon 02 Jun 2025 09:07:35 +0000
ROA not after: Mon 30 Jun 2025 09:07:35 +0000
asID: 329029
IP address blocks: 154.90.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Jun 2025 11:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99404 (0x1844c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 09:07:35 2025 GMT
Not After : Jun 30 09:07:35 2025 GMT
Subject: CN=683d69dc-09c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:74:19:20:13:54:ac:5b:f5:56:c4:a1:f5:
07:d0:e3:0b:86:ad:34:85:3c:ca:2d:00:17:7a:34:
0d:80:6b:9e:35:f2:d8:69:a3:6f:37:05:86:38:1a:
d8:e7:29:8b:6a:af:8f:4b:89:82:b7:2d:54:f5:a2:
5e:33:ff:07:06:31:86:8a:65:a9:c9:a1:82:e5:d2:
bf:e4:54:cf:c5:04:49:08:13:17:fb:d5:fa:66:7f:
73:b6:be:fd:f9:0a:e6:32:af:ef:be:e5:a1:29:26:
b0:1a:08:ec:ba:0c:c9:a0:80:58:45:cb:eb:ed:6a:
c4:dd:4b:ee:ea:36:e1:23:9a:36:f7:1d:0d:b2:83:
3b:97:a7:29:d9:1a:f9:96:2a:73:b9:4f:d9:2e:1a:
37:76:45:43:50:38:b5:c5:0e:22:01:b4:37:fd:a5:
7e:74:2a:c2:2d:9a:c3:31:d1:9e:17:a4:77:fa:4a:
62:ea:19:2b:e0:67:3e:85:a5:03:a7:af:84:5b:34:
55:98:27:c2:48:d9:57:37:fc:8a:61:16:3d:08:84:
27:37:31:6f:c4:88:0e:9f:51:c0:90:f7:15:0a:a6:
7e:dd:52:a2:fa:64:62:84:b8:1d:c2:1d:73:06:d6:
fc:07:3c:5c:36:0a:8e:81:57:1f:b8:e7:eb:fd:6c:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BF:F8:86:25:76:E4:C3:7E:13:75:44:48:3E:05:09:0C:AA:F8:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08B1D7743F9111F0AA3733AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.174.0/23
Signature Algorithm: sha256WithRSAEncryption
17:ff:93:34:3f:45:8c:d6:22:10:1d:b1:1e:8e:ee:f8:24:8d:
49:92:ef:df:56:cc:78:00:d6:80:f3:d7:31:2e:7c:12:06:9e:
68:67:4b:6c:4f:f2:2e:5e:a5:9f:3a:e8:5c:f2:35:90:2c:24:
ff:52:e3:40:22:c0:70:c5:9e:8e:bd:a6:ee:62:c8:0a:64:4d:
d0:93:67:1d:b8:9b:b8:be:4d:bd:c6:fe:09:9c:74:02:3d:88:
23:09:4f:a4:1e:f0:68:20:30:83:a5:f6:79:43:8c:52:c8:b0:
05:3c:a9:1e:63:61:e9:bf:3a:f8:07:30:73:48:96:02:4f:aa:
a6:80:b5:97:7b:e1:28:65:f3:40:1c:b6:eb:50:21:1f:07:0f:
c7:77:fe:05:cd:8d:0d:cc:14:d3:b6:f1:cb:e7:86:85:e8:48:
e5:3f:cc:ef:53:b4:c5:38:92:c3:73:c7:d8:5b:f0:0e:ed:a7:
69:5d:1f:a6:e9:36:83:b7:96:ea:9a:53:58:74:d7:6d:27:f0:
f9:64:6a:da:b7:88:3e:91:a0:d8:a9:c6:f5:c9:a6:5b:e1:52:
93:0c:80:79:09:5c:3e:1a:a8:45:07:66:79:53:4a:28:cb:82:
74:f7:d3:02:a8:af:8b:3a:92:4f:a9:9f:7d:4d:ee:7f:c1:35:
4e:e6:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:20:50 2025 by rpki-client