Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CF9CDB8408311F092154ACFDAE4EC9C.roa
File: 4CF9CDB8408311F092154ACFDAE4EC9C.roa (raw, json)
Hash identifier: wYEtZbTsh0LPqTWVgnW6hu5xCi4UTsClDpsaa7/drhc=
Subject key identifier: 43:19:D8:6E:98:E8:72:FD:3D:CA:44:EA:A8:39:1A:CF:72:B5:30:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01848F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CF9CDB8408311F092154ACFDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 14:01:53 +0000
ROA not before: Tue 03 Jun 2025 14:01:48 +0000
ROA not after: Sun 03 Aug 2025 14:01:48 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99471 (0x1848f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 14:01:48 2025 GMT
Not After : Aug 3 14:01:48 2025 GMT
Subject: CN=683f0051-b5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:b6:6a:d4:7f:71:29:14:e1:fb:42:bc:0d:
0c:2b:cb:c6:1d:f9:43:cc:34:b7:88:40:7a:6c:d6:
54:a6:79:ca:85:9d:70:57:5b:53:b1:07:2c:9f:ee:
99:c4:b9:88:f4:eb:8c:40:3a:08:b3:e4:10:0a:4c:
0f:ac:00:bb:8a:57:80:1f:7f:c5:2d:8d:03:4f:00:
08:18:56:9c:ac:35:08:98:bb:cf:63:2a:2f:0a:c7:
8a:93:b3:a6:da:c2:de:56:70:51:87:83:ff:11:b8:
41:26:c7:3c:94:73:3f:55:c7:d0:ed:0e:5b:23:70:
05:49:45:46:e3:e2:0f:a9:a9:b9:47:b4:30:43:d5:
60:55:fc:51:c8:13:fa:ff:32:22:1d:e8:ad:34:eb:
8d:a2:e3:57:5d:95:a2:c6:ea:16:0d:59:6b:7d:f5:
22:8c:05:be:df:b9:28:ea:09:8b:b3:4f:0b:e9:90:
92:75:85:38:d1:f0:c5:cb:96:df:96:27:71:5e:22:
3c:6f:39:99:1c:8d:48:df:65:e2:e3:8f:88:cf:b2:
5f:c8:02:0d:2e:38:b6:ae:39:19:00:fc:e1:db:09:
03:09:b2:da:e5:87:6d:51:1d:65:9b:45:e1:ef:04:
5b:85:bc:e9:dc:6c:ad:2d:ba:b8:13:b9:88:be:e4:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:19:D8:6E:98:E8:72:FD:3D:CA:44:EA:A8:39:1A:CF:72:B5:30:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CF9CDB8408311F092154ACFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
154.94.86.0/23
154.94.116.0/24
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
20:dd:16:e0:96:d8:f6:e0:65:f9:ad:49:e5:e5:94:83:14:49:
29:a4:61:3e:54:71:68:9e:e9:da:74:d6:95:73:fe:a5:43:35:
b9:44:32:52:37:7d:4f:db:ca:85:fc:5e:10:72:29:64:07:62:
99:f6:aa:fb:4d:8d:60:43:3f:79:e4:fc:b4:c4:a5:ff:2f:19:
33:a2:f5:8a:b6:09:d0:fe:c8:a3:10:3a:30:c9:97:ef:73:bc:
b7:80:73:05:1d:54:76:fa:84:ad:0b:17:b4:2c:c1:51:30:b5:
d9:c3:5b:37:18:19:5b:6f:44:6a:53:4a:86:67:59:db:4f:85:
b2:39:d7:04:5e:15:f9:5f:07:33:bf:1a:f0:b7:8c:78:58:30:
eb:fa:49:f9:c7:6d:fd:7d:87:07:66:78:27:91:5a:41:fc:9a:
b8:c5:e5:10:71:c4:06:d1:d1:f7:3b:42:96:e2:2d:9d:0c:2d:
06:08:33:ad:38:77:11:c0:27:b5:1d:bd:62:5c:f2:70:db:81:
10:b7:29:3e:92:5f:de:a0:49:ab:5b:22:ea:7e:d0:8b:f4:99:
5e:5f:40:f5:8c:67:c0:12:86:e7:9c:77:e8:da:3c:4f:23:e6:
60:64:6f:5a:ee:0b:14:c5:33:45:70:9f:b7:14:2c:77:11:96:
85:23:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:49 2025 by rpki-client