Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B4674E408D11F0B189608FDAE4EC9C.roa
File: 35B4674E408D11F0B189608FDAE4EC9C.roa (raw, json)
Hash identifier: 2vEzdJ97LKgmcXzHZpqlL2id7BjoZo2zJZ0VnajcVo4=
Subject key identifier: FD:BD:FE:92:B4:C9:2A:F4:00:66:B0:47:66:B9:36:2A:5F:A9:FB:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B4674E408D11F0B189608FDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 15:12:49 +0000
ROA not before: Tue 03 Jun 2025 15:12:44 +0000
ROA not after: Sun 03 Aug 2025 15:12:44 +0000
asID: 140666
IP address blocks: 154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99493 (0x184a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 15:12:44 2025 GMT
Not After : Aug 3 15:12:44 2025 GMT
Subject: CN=683f10f1-f1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:79:7f:5c:31:cd:11:7e:31:fa:10:ed:51:
98:7a:ef:d6:bd:41:46:a6:d1:97:6d:64:63:b1:52:
96:89:23:cb:bd:1e:5c:ea:96:5a:04:db:e5:43:94:
11:eb:3a:f8:2e:98:d3:aa:5e:66:84:2a:93:c6:d0:
ce:9d:36:fc:81:0b:25:35:d6:ed:e3:f4:a5:38:21:
e3:fd:30:88:62:c3:28:82:45:67:02:b7:9e:b8:2f:
47:97:c9:b4:d6:69:78:62:5b:16:e6:ce:92:03:9a:
33:fd:e2:c0:33:7e:59:4e:fc:b2:c4:c8:bf:01:bd:
74:37:58:9a:3a:58:4b:64:81:8b:57:07:10:03:19:
90:01:b8:48:d5:c8:2a:c8:e2:5b:93:7e:98:f4:e3:
b7:a4:68:7a:6f:3b:29:28:55:43:7b:9b:56:77:d3:
76:1a:0e:86:3e:16:b4:ab:26:02:50:3f:68:b5:3a:
35:89:98:de:75:53:22:64:06:ac:3c:af:af:0e:3a:
b6:4a:8f:44:32:f9:4d:e1:7b:70:63:18:70:05:51:
81:03:7d:ea:5f:f9:a4:2b:cb:3f:e3:e7:b5:bf:d6:
32:f8:26:f3:42:78:41:2c:6b:9b:5b:57:2e:2a:cf:
05:3e:2b:02:eb:b2:32:5e:16:ec:1b:df:c2:a6:7f:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:FE:92:B4:C9:2A:F4:00:66:B0:47:66:B9:36:2A:5F:A9:FB:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B4674E408D11F0B189608FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:22:4f:11:0e:69:77:6b:aa:c0:e1:b1:9b:22:f3:c7:1e:e1:
4d:ba:5b:5f:cf:4d:ce:71:c9:9a:9c:1d:99:19:ee:ac:6d:b0:
68:94:08:51:9e:4e:1f:14:b1:71:b1:7b:4c:d8:ca:7c:8f:17:
9d:85:36:65:89:c7:1c:4a:e2:a5:78:f7:5b:5b:cc:9a:29:9d:
f3:c7:c5:88:1c:b5:5a:d7:0d:11:2f:e2:52:18:18:8a:20:2d:
94:0c:47:3e:ab:16:15:20:55:79:24:10:0a:f2:13:cb:12:04:
b2:be:99:53:af:39:c7:13:c4:a1:f7:c4:88:93:85:22:06:5a:
77:2c:b8:03:ed:66:0c:eb:d6:77:b5:7e:66:14:e5:2c:9c:f9:
fd:7f:71:6e:5b:fd:a4:30:18:bd:3d:23:0e:30:e1:45:7e:20:
8e:e6:9d:d5:8c:ed:44:2e:a1:31:79:5d:64:bb:b2:a3:09:2d:
5d:3b:0c:47:b6:c0:50:d8:3b:c4:db:15:d9:86:f4:66:2b:43:
0c:39:d3:9d:51:2d:ec:02:ef:f2:9e:e1:00:e2:7d:4b:e6:23:
38:24:e8:68:71:5f:47:6b:61:59:63:55:97:58:4d:89:54:24:
55:c8:04:1a:ab:87:5f:ac:ee:6f:66:aa:ef:62:c8:8d:1a:27:
af:2b:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:07:29 2025 by rpki-client