Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C3C5AEE407311F0A7FD1FE6DAE4EC9C.roa
File: 0C3C5AEE407311F0A7FD1FE6DAE4EC9C.roa (raw, json)
Hash identifier: RHkch4Ya76XXcN8uhFOicnWv3DiQqnjElM9RlkbYJgk=
Subject key identifier: 39:06:02:58:64:65:FE:34:E7:C2:87:28:CC:3F:DF:1C:74:40:0B:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018471
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C3C5AEE407311F0A7FD1FE6DAE4EC9C.roa
Signing time: Tue 03 Jun 2025 12:05:32 +0000
ROA not before: Tue 03 Jun 2025 12:05:27 +0000
ROA not after: Tue 15 Jul 2025 12:05:27 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99441 (0x18471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 12:05:27 2025 GMT
Not After : Jul 15 12:05:27 2025 GMT
Subject: CN=683ee50c-f1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:06:f4:93:2c:06:4c:ce:93:a9:b4:3f:89:
df:c8:d3:6a:c1:e6:8c:72:9a:cd:b8:7a:09:56:39:
6a:06:03:29:06:c0:8e:b0:80:0d:dd:7a:ea:7b:77:
53:b5:f2:7d:bf:71:64:94:8a:92:4b:0a:05:76:6f:
44:30:5d:52:1c:71:d1:d2:3d:08:7f:8c:b9:2b:03:
69:9f:26:a4:c9:85:1b:e0:e0:6f:95:8a:e5:57:a8:
bc:53:f4:21:23:f7:59:96:73:8c:db:7b:a7:86:95:
07:0c:a0:ae:39:63:5c:80:8b:d5:26:37:9a:e9:6a:
a8:f4:21:ee:c3:ec:f7:4e:7e:bc:58:41:52:4a:2b:
81:be:df:90:fa:ca:a5:62:00:6a:25:91:b0:06:e2:
29:d0:a0:60:ae:53:0f:2d:e2:3e:a0:0c:ac:cb:83:
4a:a2:f3:cc:65:77:5b:12:fb:00:9d:6a:1a:29:59:
ef:25:12:9f:21:c7:f7:57:9c:9b:7e:77:47:d5:48:
0e:83:29:64:11:e3:e7:2c:a1:df:fb:a5:dc:95:7b:
f4:88:86:f8:66:c9:c5:6e:27:6f:17:51:60:50:20:
f6:f2:1b:91:48:a8:89:21:ea:78:09:34:27:dc:d1:
c6:eb:f8:5e:ff:9d:36:6a:0a:59:ed:36:80:c0:1c:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:02:58:64:65:FE:34:E7:C2:87:28:CC:3F:DF:1C:74:40:0B:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C3C5AEE407311F0A7FD1FE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f9:85:bd:2c:13:4e:be:63:f7:58:81:f3:a3:e5:07:4c:66:
d5:7a:6e:21:e5:17:41:f0:7b:67:96:5e:22:3d:49:c7:8e:33:
a3:03:e9:a8:c4:11:42:8b:e9:db:20:3d:de:38:b1:da:1b:df:
15:93:cd:aa:14:3d:49:70:09:68:93:e5:a3:a6:bd:f5:9d:bf:
73:64:72:1d:3e:bc:d1:d4:f6:bb:b3:67:fc:30:86:38:4d:10:
3d:f5:52:48:82:7f:af:56:3e:31:6c:d6:50:66:90:60:35:1f:
88:ff:12:37:62:a3:e1:7d:9e:d0:c1:71:30:22:b6:37:b9:34:
65:b8:1b:d8:f8:58:8d:1d:01:e2:eb:24:b9:b4:a0:8c:ca:e7:
3a:0d:eb:89:1b:c2:14:7a:c4:3b:76:ce:58:65:e3:80:aa:d5:
85:34:c7:43:f8:ca:12:cd:1d:04:17:d8:6e:31:bc:36:0c:9f:
0b:94:7e:bc:92:10:66:e8:6e:bc:7a:fc:43:48:17:52:a5:f5:
1e:32:51:f7:65:69:28:bc:f2:92:42:54:26:24:7c:77:95:4b:
ac:e8:31:4a:94:e7:4b:3a:26:bd:3e:c5:4c:95:4b:74:cf:1a:
d9:ae:e6:7e:46:f1:85:93:43:42:9d:cc:b0:6a:a4:21:ee:1a:
0b:d9:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:45:57 2025 by rpki-client