Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7F465E3E2611F0A9F7F3F0DAE4EC9C.roa
File: 1C7F465E3E2611F0A9F7F3F0DAE4EC9C.roa (raw, json)
Hash identifier: ed7kSTsZpvxc+yK0oV6xnfoNuiBhhtoneevWpikNwrc=
Subject key identifier: 3D:34:E2:24:1E:7A:61:EE:15:84:68:24:E9:D1:E4:F8:80:5A:B8:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01840A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7F465E3E2611F0A9F7F3F0DAE4EC9C.roa
Signing time: Sat 31 May 2025 13:49:46 +0000
ROA not before: Sat 31 May 2025 13:49:41 +0000
ROA not after: Thu 10 Jul 2025 13:49:41 +0000
asID: 401696
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99338 (0x1840a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 13:49:41 2025 GMT
Not After : Jul 10 13:49:41 2025 GMT
Subject: CN=683b08fa-741d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:dd:48:4c:34:9c:3e:61:f9:08:10:d0:2d:
c2:e4:30:00:16:98:15:06:6f:bd:f2:ab:99:b1:46:
a9:dd:05:23:4f:77:14:b6:a1:43:ea:d5:0a:a7:f7:
02:0f:b0:96:4d:bb:b2:dc:17:68:3f:1e:00:0b:4d:
5a:5d:b1:b2:99:a0:91:e9:19:cc:a4:c6:f8:71:16:
92:e0:bd:78:b5:4d:81:db:6c:ec:1e:a6:6f:b6:4e:
38:49:b6:99:9b:76:a9:f6:9c:85:d9:75:da:6b:e1:
5b:65:98:af:36:32:6e:eb:fa:ad:93:a0:5a:1c:78:
20:94:fa:70:ac:1e:05:82:4f:1f:5c:62:80:1e:d0:
bb:01:7c:4a:e9:ee:86:11:f2:e5:5e:c3:6b:fb:8a:
e9:14:b5:91:80:83:ff:4f:a3:83:b8:07:6b:4f:db:
db:04:13:32:9a:db:7d:67:80:ed:ee:8b:25:be:4c:
3a:74:f8:31:06:10:e5:e5:84:73:cf:15:e4:cf:f7:
59:31:1f:8b:8d:dc:98:73:8c:51:81:9b:79:93:14:
57:bd:3d:a3:1e:77:59:87:39:04:3c:cd:50:44:b4:
67:ee:8a:a2:84:92:b8:f4:60:f1:cb:21:29:2e:7d:
d6:8f:8a:44:32:73:45:24:70:41:d6:3a:f6:6c:43:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:34:E2:24:1E:7A:61:EE:15:84:68:24:E9:D1:E4:F8:80:5A:B8:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C7F465E3E2611F0A9F7F3F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:9c:2e:0c:03:d3:34:dd:5d:42:60:76:7a:87:7c:ab:da:04:
55:35:b5:cc:90:84:dd:ea:0e:5f:16:c9:ca:2f:5a:37:43:7d:
d3:a5:8a:4a:f0:17:4f:04:76:b9:77:cc:63:ac:08:c5:af:43:
cc:9c:a7:b5:82:2d:ab:7b:56:e7:a2:e4:e2:2b:75:d0:1d:e1:
05:5a:51:03:32:55:28:82:1a:63:5c:b8:63:d7:bd:e0:9f:54:
ba:aa:72:b6:1f:f0:c1:10:26:2f:7b:2f:4e:65:60:8c:56:ed:
9c:75:63:f6:9f:99:a4:06:09:e9:34:25:c0:b8:83:70:1e:d2:
f2:f7:39:f0:b4:93:f8:ce:2c:e3:bf:d4:db:81:8a:bd:4c:73:
f4:f6:a3:64:ef:1a:df:07:70:71:af:7f:a4:58:84:ca:b6:f2:
54:61:dc:df:86:04:e7:8b:18:47:77:37:1f:09:ae:bb:8f:e7:
d0:55:66:c8:b2:92:fc:89:6c:df:18:05:11:05:fc:d4:be:fe:
2b:e8:bd:cc:ef:9a:2d:b9:5c:f2:04:1a:49:0c:24:f6:c8:4d:
32:c2:a3:c9:f3:dd:69:99:62:d3:e7:65:d8:4b:3c:a1:2a:09:
eb:30:d9:07:06:39:60:d9:55:37:3c:a0:d0:0c:30:d0:66:fd:
37:5c:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:47:09 2025 by rpki-client