Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47027418332811F0A3450DBADAE4EC9C.roa
File: 47027418332811F0A3450DBADAE4EC9C.roa (raw, json)
Hash identifier: o2afe3K5kgaqes5UbAgVWa0DN+Kt/P9pnPgOcn3c9aY=
Subject key identifier: 7E:EE:06:71:6D:9D:81:51:14:5F:BE:D9:AB:26:95:AA:E3:03:F0:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01813C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47027418332811F0A3450DBADAE4EC9C.roa
Signing time: Sat 17 May 2025 14:07:33 +0000
ROA not before: Sat 17 May 2025 14:07:29 +0000
ROA not after: Tue 10 Jun 2025 14:07:29 +0000
asID: 141159
IP address blocks: 154.94.228.0/22 maxlen: 24
154.94.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98620 (0x1813c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 14:07:29 2025 GMT
Not After : Jun 10 14:07:29 2025 GMT
Subject: CN=68289825-d42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:57:e5:00:1d:ba:99:da:c9:cb:6f:ea:52:
46:53:ba:d3:12:57:dd:09:c6:3f:68:7e:10:31:80:
c1:80:d1:e9:18:18:c5:48:33:5b:ef:ba:82:5a:17:
06:d7:bf:9d:9e:ec:9f:5c:3a:ec:23:c1:0c:c7:d9:
43:7a:a8:e5:c8:ef:e7:0d:15:7c:54:03:12:2d:56:
d6:20:d3:02:15:3c:64:53:c7:63:8d:d2:c8:52:d1:
cb:e3:72:86:b4:2f:87:77:de:2a:46:8f:6e:6e:ca:
71:07:95:16:45:d0:b9:e7:4f:7b:18:f5:c0:5a:77:
d7:87:35:64:76:ae:69:d8:8d:c1:7e:10:58:52:bd:
80:0a:f2:89:7b:21:33:d2:43:01:f7:8d:fe:a8:1c:
ad:91:5b:30:a3:1b:69:ef:e2:ab:ac:01:6d:dd:c0:
d2:f7:ea:89:a7:3a:1b:98:af:92:ca:b4:35:5c:74:
58:29:73:37:40:1a:f9:06:00:27:fd:7c:44:cd:2f:
e6:d6:59:73:24:d8:c3:10:0c:8f:97:ed:8e:2e:c0:
ba:51:af:fc:b8:b9:f4:4d:fa:7c:b0:17:45:d5:30:
a4:a5:95:e3:d6:e8:03:f6:8b:46:98:d2:e1:0d:ad:
66:fe:8f:5b:62:97:06:2a:d7:a8:10:07:b3:9e:9c:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:06:71:6D:9D:81:51:14:5F:BE:D9:AB:26:95:AA:E3:03:F0:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47027418332811F0A3450DBADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.228.0/22
154.94.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:c4:c8:a6:49:13:68:98:8c:a3:c6:e4:27:e5:39:83:a3:1b:
db:ca:b1:12:93:12:e0:40:d3:98:81:c2:06:5f:b6:39:ad:b2:
27:c8:63:63:03:5f:61:ce:56:92:55:0c:6e:ae:51:4b:88:27:
25:b6:a1:af:ae:c6:e4:5f:8e:c5:54:af:58:48:c7:b2:7e:dd:
8d:d9:31:c4:53:50:88:27:84:d0:4d:4c:b0:0d:fb:89:f9:fc:
85:02:8e:70:0f:14:45:bc:14:0e:1f:f1:18:93:a3:fd:6f:48:
d8:bf:8d:3c:a2:b5:0b:e7:89:75:71:bb:e9:39:d5:a7:78:b3:
77:35:4b:ea:b2:7e:f6:b7:80:74:37:d1:c2:2c:39:1b:ee:84:
27:fd:37:12:49:06:a1:74:e3:79:ce:d9:6e:ba:11:81:7c:ed:
d7:b7:a8:ad:bd:55:4c:29:d9:b2:32:64:5f:af:fe:22:9b:ae:
8c:f4:c3:09:51:bf:67:9f:a3:ea:f9:32:2a:01:e7:ee:3e:88:
dd:df:c0:b9:bb:1d:31:4d:db:5c:cb:41:4a:df:37:72:2d:66:
14:3d:6b:c8:c4:d9:f4:a9:c7:e0:fb:b8:b4:a0:9d:bf:01:47:
85:08:50:af:80:82:8e:e3:82:13:8e:45:4b:71:2f:a1:d7:53:
05:47:a7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:20:24 2025 by rpki-client