Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF7D1B83E2111F0B37FA4D2DAE4EC9C.roa
File: 4AF7D1B83E2111F0B37FA4D2DAE4EC9C.roa (raw, json)
Hash identifier: LxGDsSI/FJUPyFI2wWZdUl+JQw+MwsrBtzO3ErLUyTU=
Subject key identifier: BB:BD:FB:5B:DA:C4:2A:EA:49:B2:89:F0:42:6E:4D:5B:EE:51:56:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018406
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF7D1B83E2111F0B37FA4D2DAE4EC9C.roa
Signing time: Sat 31 May 2025 13:15:16 +0000
ROA not before: Sat 31 May 2025 13:15:12 +0000
ROA not after: Tue 08 Jul 2025 13:15:12 +0000
asID: 62084
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99334 (0x18406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 13:15:12 2025 GMT
Not After : Jul 8 13:15:12 2025 GMT
Subject: CN=683b00e4-2bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:b6:b3:98:2e:f2:45:fa:1c:37:c5:3a:05:
80:f6:3b:0c:f4:93:61:97:27:a1:7b:c7:b6:29:5b:
94:91:51:f7:c3:d2:99:1c:c6:ab:48:e5:e0:16:81:
d7:da:c7:b7:3e:8a:75:83:b4:a3:ca:ac:b4:21:08:
30:e2:f1:2f:dc:70:ee:d2:f7:65:e4:93:04:59:5f:
21:50:b2:cb:77:4d:82:96:ed:30:05:d5:f4:d3:3b:
1b:24:fd:5f:f9:5c:67:02:48:9d:ce:3a:75:1e:d6:
d3:3d:4b:9b:02:f9:6b:0b:96:81:b2:5f:d9:74:be:
78:41:24:a2:f6:11:99:b8:03:45:de:b1:0d:3c:57:
59:2f:d2:ec:9d:c0:53:7a:61:f0:31:07:fe:a7:83:
df:13:85:b0:0f:7e:00:41:a7:46:8e:26:bf:d5:78:
45:b1:3b:7c:21:67:4e:ee:51:95:d8:70:2a:af:c8:
c0:bb:dc:e4:4b:bf:6d:1a:33:28:f0:54:16:ad:ac:
7c:13:e1:8d:9e:39:7f:c9:96:21:e3:49:d9:61:c4:
fb:c1:24:60:39:00:c0:04:80:b6:4f:bd:3a:e5:db:
ef:1b:24:df:f8:42:83:28:9c:e2:0d:5d:ae:79:da:
dd:21:71:cb:06:1e:c1:40:be:42:61:f2:95:d7:63:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:FB:5B:DA:C4:2A:EA:49:B2:89:F0:42:6E:4D:5B:EE:51:56:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AF7D1B83E2111F0B37FA4D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:4a:88:df:ab:ac:2b:ab:e2:87:62:5b:da:b0:51:95:49:ce:
72:a9:bb:1c:f8:a9:6e:26:12:3c:75:37:1b:45:45:5c:8c:5c:
a5:bc:cd:1b:83:08:58:f0:18:c6:4d:14:66:af:82:d8:4f:21:
c6:65:eb:52:05:37:4c:28:a6:32:11:57:88:f0:bb:49:e1:63:
63:77:3e:74:07:36:f1:90:3d:55:8f:db:95:02:8f:0d:6d:e1:
ab:91:05:76:c6:e4:5c:15:ce:4c:45:b1:1a:58:bf:23:1d:49:
5e:ab:d4:42:c4:47:17:49:a5:bb:a4:31:80:08:a4:0c:eb:ce:
c8:b7:43:f1:ae:35:5b:ba:1a:5c:5c:91:9f:6b:b0:f0:ae:c0:
ff:da:3d:45:cb:a1:2e:c2:c9:83:37:40:f8:a9:07:5d:d3:a8:
03:1f:66:d4:5d:c1:e6:9c:7a:15:30:ca:fa:19:ee:60:68:1d:
a9:60:ff:08:41:9c:04:11:7a:d4:37:7b:60:9b:ad:b7:70:76:
2d:40:97:20:09:6a:9a:ab:e1:ee:ce:8f:0a:b5:7f:b2:5c:4e:
1e:f0:b0:51:d0:31:80:aa:b4:98:cc:43:70:93:02:db:2f:0e:
5e:e1:3b:c3:ac:b6:a0:80:3a:6a:4d:a0:b9:1d:cc:60:58:de:
d6:8f:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:55:57 2025 by rpki-client