Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745EB9838A511F0BC7145A3DAE4EC9C.roa
File: 5745EB9838A511F0BC7145A3DAE4EC9C.roa (raw, json)
Hash identifier: 6aETjQUkEm3t36fAqwJQv0eGQkCAP8JJfA9YVT1ckZc=
Subject key identifier: 18:F3:98:97:39:E1:51:59:AA:DB:D2:7F:2B:5A:DE:EF:8B:D1:5D:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018290
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745EB9838A511F0BC7145A3DAE4EC9C.roa
Signing time: Sat 24 May 2025 13:45:24 +0000
ROA not before: Sat 24 May 2025 13:45:19 +0000
ROA not after: Tue 23 Jun 2026 13:45:19 +0000
asID: 984
IP address blocks: 154.82.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98960 (0x18290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 13:45:19 2025 GMT
Not After : Jun 23 13:45:19 2026 GMT
Subject: CN=6831cd74-7a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:48:b0:32:0d:ff:d1:4c:69:2e:33:62:95:
a3:b9:60:9d:99:a9:c6:fa:53:51:cb:2c:ad:c3:93:
b6:81:d8:e6:a5:94:e3:a7:5a:2a:4b:46:75:45:3e:
09:35:43:42:dc:77:bc:37:f3:9c:bb:f6:23:1b:98:
00:26:43:94:a7:17:6e:dd:7c:78:60:2c:7f:12:9f:
18:71:a9:af:72:bc:cf:2f:54:ae:55:eb:69:4d:b1:
72:93:b8:6e:83:c8:af:a7:30:5c:75:0e:22:2b:82:
e7:15:8f:cb:9f:47:4d:3c:a9:11:ab:86:b1:83:d7:
24:b6:aa:c2:f1:c2:e6:6d:54:bf:05:1e:2d:86:bc:
ed:e5:a1:df:d4:33:bf:bd:c1:2b:f2:db:f1:b2:42:
6b:bd:f1:6a:30:b0:64:66:8e:87:c6:de:57:86:83:
ae:a4:63:e6:a7:b9:10:6b:36:ad:ce:9d:fe:b0:9c:
c0:34:33:ed:87:ec:c9:68:61:f5:8e:47:74:22:15:
5d:59:7e:34:7d:93:37:06:47:b7:80:75:03:74:3c:
c4:1b:25:86:95:83:9c:f0:9a:82:90:03:27:e5:f0:
86:a1:b5:7c:c6:a8:3d:7e:b9:e6:df:1b:24:8d:fa:
fa:8f:58:1c:5b:52:d5:62:ae:99:f8:56:1e:65:1f:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F3:98:97:39:E1:51:59:AA:DB:D2:7F:2B:5A:DE:EF:8B:D1:5D:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5745EB9838A511F0BC7145A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d2:df:7d:a4:ca:98:b1:dc:43:16:a4:61:cf:22:77:79:c0:
db:e1:20:24:9e:8d:f8:ee:30:4f:2d:56:f7:fb:9c:14:98:99:
d7:aa:89:6e:14:f0:78:30:64:90:92:e1:97:dc:a0:15:5c:b5:
6d:28:ef:4d:1e:1f:72:0f:6a:50:d0:9b:19:c8:ae:b7:90:9b:
19:39:fb:45:9f:fc:ad:c3:7f:a5:ca:4f:e5:9d:1f:a5:d7:d7:
1c:6e:b0:30:c5:73:ec:c7:48:d3:c2:1c:e0:98:fa:4b:99:1c:
08:1b:57:e3:c2:d3:e2:d7:6d:94:bd:c0:ed:12:a8:d7:3b:ed:
60:76:30:25:c1:0a:96:4d:06:df:4d:b7:28:1d:81:70:65:91:
91:47:b0:ab:1a:e0:29:d6:ab:2f:3d:99:bb:de:f4:70:f6:58:
c0:81:59:8a:9e:fb:7a:47:ed:ae:d2:57:f4:df:37:9c:08:75:
e1:33:5c:d7:84:ee:54:df:2c:6e:ea:9c:5e:a5:a1:b9:80:d8:
8c:7d:43:ee:e3:00:67:24:82:b1:8b:a0:97:e1:89:f5:e2:df:
19:72:31:58:65:56:c2:e1:7e:e2:f0:0b:6c:da:7d:a8:48:b2:
bd:05:3b:91:6d:44:2e:11:39:15:70:28:76:2d:a8:a3:c7:ae:
b8:e4:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:48:51 2025 by rpki-client