Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/628130223E2B11F09BC2DF94DAE4EC9C.roa
File: 628130223E2B11F09BC2DF94DAE4EC9C.roa (raw, json)
Hash identifier: DLEGZY64hr0cstOHGCSlc6BTgMsyrfYO4r7B9bor/NE=
Subject key identifier: 24:5F:3B:1C:78:94:D3:DC:6C:50:C6:40:8E:66:AD:B3:61:09:A5:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018416
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/628130223E2B11F09BC2DF94DAE4EC9C.roa
Signing time: Sat 31 May 2025 14:27:31 +0000
ROA not before: Sat 31 May 2025 14:27:26 +0000
ROA not after: Mon 07 Jul 2025 14:27:26 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99350 (0x18416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 14:27:26 2025 GMT
Not After : Jul 7 14:27:26 2025 GMT
Subject: CN=683b11d3-76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:3a:47:39:e0:99:af:73:68:71:bf:e4:aa:
d9:ea:42:c7:1b:e3:08:32:9e:b0:d3:41:28:0e:35:
9d:0b:9b:3e:dd:4a:92:27:3a:4d:91:f9:eb:dd:67:
40:b3:64:19:9e:f3:69:3f:17:64:5a:1d:4e:dc:04:
8d:e0:1a:3a:de:0d:f0:f2:42:ef:36:37:f3:4b:0a:
bb:d9:fa:b0:5d:2b:e2:01:a2:9d:a8:32:70:8c:02:
55:9d:ac:7b:e6:dc:03:f6:f3:fb:46:99:61:88:52:
10:67:e5:df:3e:88:3e:4a:25:37:99:de:31:0f:15:
fd:41:71:a8:5a:86:ee:1d:19:b9:b1:d2:8e:85:0c:
32:af:e5:3f:ba:72:6c:9b:ac:82:91:2a:36:06:24:
c0:b7:da:4a:dc:13:6c:45:cc:86:3d:71:bb:4e:9e:
ac:25:ec:fa:21:3e:e8:b6:b4:e6:15:73:4c:61:ac:
44:ce:ef:36:50:de:e7:1b:2d:00:f8:1c:65:25:3e:
b5:3b:22:e2:e5:56:c7:ac:8e:12:b6:b7:0a:1a:6f:
40:9c:51:7c:16:50:5d:d2:10:0c:7c:f5:64:d4:2b:
6f:f7:60:71:f4:eb:a7:d8:68:b5:02:a1:6c:7d:4e:
c6:b0:3f:dd:3b:71:23:07:ff:bc:46:57:2a:a5:10:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:3B:1C:78:94:D3:DC:6C:50:C6:40:8E:66:AD:B3:61:09:A5:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/628130223E2B11F09BC2DF94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:01:9f:0d:48:5f:98:be:1a:bf:c6:89:7c:a9:e8:5d:05:09:
de:f1:51:3a:03:7b:c9:08:fe:b7:ed:43:7b:e1:58:9a:aa:5b:
70:be:8a:16:99:20:c7:e2:90:50:e4:de:52:0f:59:e5:cc:30:
68:6b:56:43:52:55:6a:f1:9d:1e:9f:6b:94:a3:e5:e3:b8:dc:
c2:00:ca:8c:27:bb:f4:86:e7:b9:40:f4:18:e1:ba:ea:4a:76:
99:11:ad:2c:45:34:b2:62:fd:cd:fe:2f:44:ce:3b:16:7e:ef:
fd:19:62:ec:f1:df:20:32:25:86:22:c2:5a:fa:3f:8f:9a:a3:
64:d2:51:29:3c:64:f7:ca:86:20:50:dd:bd:77:e2:ae:6a:73:
c5:3b:c2:60:b6:66:89:67:ca:d9:b5:a1:19:90:f3:99:d5:4b:
18:fa:fa:24:f5:99:7f:8b:5a:6d:d6:9e:06:0d:72:d0:27:ee:
d1:10:55:f4:81:1f:96:52:72:3b:48:e1:31:ab:60:1b:5d:82:
3b:73:50:6f:53:24:0f:2b:a7:b2:71:e6:2b:55:db:7b:fb:3c:
38:f7:a4:3d:fd:47:fd:d1:6f:9c:98:d8:c7:76:06:f1:ae:3d:
87:b6:55:2b:40:eb:bb:f7:b8:eb:6c:14:41:f5:5f:0b:ed:2b:
c9:dd:bf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:04 2025 by rpki-client