Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631ED3EE37E711F0B3F217CBDAE4EC9C.roa
File: 631ED3EE37E711F0B3F217CBDAE4EC9C.roa (raw, json)
Hash identifier: P9L3vETMsBpcnWsy/6fe03FpbE4ZFUJ0kAa40zzglkY=
Subject key identifier: DA:90:F3:9B:FD:DA:D5:0A:DF:2E:CE:DC:33:9C:BA:2C:5B:A0:DB:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01821F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631ED3EE37E711F0B3F217CBDAE4EC9C.roa
Signing time: Fri 23 May 2025 15:05:39 +0000
ROA not before: Fri 23 May 2025 15:05:34 +0000
ROA not after: Mon 30 Jun 2025 15:05:34 +0000
asID: 149513
IP address blocks: 154.201.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 01:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98847 (0x1821f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 15:05:34 2025 GMT
Not After : Jun 30 15:05:34 2025 GMT
Subject: CN=68308ec3-6d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:6f:b7:74:a7:12:f1:9d:be:99:9d:c8:ea:
53:38:0a:d9:81:7f:47:d3:36:69:68:87:40:bd:46:
04:4e:6b:3d:9b:7c:9c:29:5e:9b:3e:37:c4:8a:88:
47:6c:c3:13:c3:46:b2:66:0e:6e:a1:4b:de:f5:d4:
7e:a3:bc:0f:90:e1:59:5e:89:34:e4:0c:f1:89:23:
2c:00:41:d9:7e:d8:30:d6:22:c8:59:df:85:22:24:
1c:c4:37:7f:a8:85:69:f1:33:e8:e5:7a:47:10:d8:
81:f0:5d:cc:7a:1f:ae:73:49:2d:a0:ca:2c:2d:a2:
90:38:54:fe:23:57:72:80:72:f7:76:10:f2:04:85:
99:75:62:26:e4:78:96:59:77:bb:ef:5d:be:1b:6d:
2d:23:f1:e2:94:2d:13:91:c9:ef:f3:94:29:fc:ee:
a4:76:65:85:32:d1:b2:bb:d7:b4:38:57:db:90:e2:
54:63:2f:91:9e:1e:c5:14:ee:d4:42:b2:43:a6:17:
75:31:71:96:ef:01:60:9b:bb:3c:85:fe:97:1b:b3:
30:1a:dd:3f:8f:9a:fc:d0:55:f0:51:18:3e:4c:f7:
2c:12:77:60:cc:6e:30:fb:0d:fa:71:d0:ae:55:83:
05:05:1b:31:5e:e8:54:49:64:cb:6a:8a:e6:30:f7:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:F3:9B:FD:DA:D5:0A:DF:2E:CE:DC:33:9C:BA:2C:5B:A0:DB:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/631ED3EE37E711F0B3F217CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.94.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:9a:bd:3c:95:5c:16:43:21:75:cb:cc:d8:31:50:9f:9d:cd:
cb:e0:44:8c:38:48:c6:53:c4:da:5b:5e:4b:31:a3:d8:39:3a:
09:28:0b:26:5f:a5:d1:09:66:ce:27:8f:87:f5:a5:d1:37:90:
0d:ba:93:ba:9c:fb:f5:f7:b4:93:bf:ff:c4:53:ac:91:07:56:
41:5c:2d:9b:3d:7c:7e:ee:38:d5:d3:9c:0b:47:d4:90:d3:83:
2c:7d:d1:8e:46:df:11:f0:a1:4a:c5:0d:43:80:de:5d:18:89:
46:c1:5c:a6:f8:36:29:53:14:ea:32:b0:84:24:2b:6e:45:10:
fe:7e:98:5a:5c:12:db:c7:0e:49:fa:1a:9c:48:02:90:c5:ff:
e6:6b:7f:47:e9:d2:71:7c:76:00:9d:e6:51:4b:b8:c5:8e:32:
55:28:66:98:29:cd:90:1a:84:7e:84:4c:71:3c:db:bb:a8:7c:
e7:e5:58:61:a9:b7:d6:92:6a:26:bf:46:c8:71:f1:b7:68:dc:
46:a7:15:cb:88:b9:a8:39:2a:92:fd:3e:93:21:ea:87:8d:d9:
34:2c:95:a6:a7:96:b8:4a:77:3e:22:38:ec:a1:9b:86:6c:e2:
e3:1b:25:25:bc:90:1e:f4:73:82:20:6f:aa:e4:04:30:ab:fd:
08:94:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:45 2025 by rpki-client