Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4441A2A6437E11F09757D3B2DAE4EC9C.roa
File: 4441A2A6437E11F09757D3B2DAE4EC9C.roa (raw, json)
Hash identifier: Kw2p1kbkjfxcyACktsF640JeG45d0rzQZXsgzgn2o9E=
Subject key identifier: 11:CD:7A:24:CF:4E:6E:E8:00:31:3A:AE:BB:CB:00:B4:E1:6E:44:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018542
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4441A2A6437E11F09757D3B2DAE4EC9C.roa
Signing time: Sat 07 Jun 2025 09:03:24 +0000
ROA not before: Sat 07 Jun 2025 09:03:20 +0000
ROA not after: Wed 09 Jul 2025 09:03:20 +0000
asID: 45194
IP address blocks: 154.84.212.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
154.84.214.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Jun 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99650 (0x18542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 7 09:03:20 2025 GMT
Not After : Jul 9 09:03:20 2025 GMT
Subject: CN=6844005c-a86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:ab:3d:41:86:3b:4b:8b:7f:b0:b9:98:2b:
d0:bd:c8:05:3b:bc:67:32:03:90:5e:82:e3:4c:32:
6b:c6:b2:9b:de:3c:79:64:83:08:2d:4d:cf:31:a6:
a0:fa:e5:e3:e0:00:79:5f:71:a9:92:b4:4d:69:65:
1c:67:20:13:2b:e8:a2:73:08:36:b7:94:20:2e:f1:
d5:93:ed:cb:fb:56:29:52:28:a9:72:69:f6:bf:88:
88:fb:a9:12:e0:0e:dc:bb:f3:93:c0:ba:46:70:00:
42:19:b3:85:ad:2f:10:4d:ee:0c:17:ef:44:22:f3:
37:0f:25:e4:6a:18:9d:31:b3:7a:74:0e:a6:9b:19:
12:3d:f4:fb:ef:80:0d:4d:5f:5f:0d:1a:f9:c0:3a:
39:09:a0:58:a3:a5:77:89:b6:0e:3b:33:ec:86:0c:
05:b3:5f:26:85:ed:98:b1:5b:46:86:4b:23:5b:36:
ed:e8:91:44:36:71:d7:f4:3d:57:75:8a:68:ec:7a:
3b:58:91:c5:99:9f:20:df:f1:47:df:c9:26:de:df:
24:f9:9f:de:55:d8:d0:8d:73:5c:0e:e9:ad:f1:6c:
9a:2b:c2:d6:81:27:17:db:1f:8b:62:4f:f6:97:bb:
aa:3f:3c:8a:a4:9b:7b:f9:44:9a:da:14:d7:01:3e:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:7A:24:CF:4E:6E:E8:00:31:3A:AE:BB:CB:00:B4:E1:6E:44:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4441A2A6437E11F09757D3B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.212.0-154.84.221.255
Signature Algorithm: sha256WithRSAEncryption
6d:ba:f2:da:b3:d7:ec:62:d4:5a:67:7a:11:38:a8:51:9b:38:
89:5f:ad:19:8d:93:21:da:23:67:29:89:dc:7f:20:1d:46:1c:
99:36:88:ec:7e:2c:1e:f7:35:d6:f4:24:e3:3b:14:db:72:1d:
25:4c:6e:0c:f6:2c:20:d7:4d:ac:a4:81:1d:37:df:94:3f:e9:
6e:84:f8:8e:ea:61:fd:d6:a4:9e:6e:4b:21:29:94:5c:3d:b3:
e0:3a:61:01:56:66:ca:d8:5a:fb:3c:95:9a:f0:1d:1b:f3:eb:
cc:32:41:2e:16:ce:01:15:15:b7:be:0f:09:da:44:e9:9c:d6:
50:ab:1c:da:4d:52:ad:2c:19:bf:0a:65:6a:1d:b1:d9:2c:39:
90:a8:ec:62:2a:1c:3f:18:be:94:4b:b4:86:38:b2:fd:1c:ef:
cb:64:13:e5:12:dd:22:84:61:b8:2b:b1:6e:5f:48:94:e8:ba:
d3:a7:4f:1d:e2:d9:02:8c:28:07:8f:b6:04:c6:15:f5:bb:1c:
f6:7b:5a:93:82:2e:a2:b5:a3:dd:b2:5e:ff:b3:f0:7d:68:e9:
38:10:d2:92:39:e7:ce:5c:59:c0:e5:96:9f:a9:d1:b3:84:29:
3f:fc:c7:58:ab:9c:b3:a8:75:2f:23:cc:74:82:a2:2b:9c:27:
6e:ba:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:25 2025 by rpki-client