Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67836E5A3BB011F09294A0F5DAE4EC9C.roa
File: 67836E5A3BB011F09294A0F5DAE4EC9C.roa (raw, json)
Hash identifier: uwAktUdnPF62c/LHsRKfS9/RdxIDrgeXGMv5vY2yQBY=
Subject key identifier: 5B:21:E2:6F:6C:3A:BE:A4:24:BC:1D:D4:44:FF:AE:E9:10:E6:4C:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018346
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67836E5A3BB011F09294A0F5DAE4EC9C.roa
Signing time: Wed 28 May 2025 10:42:09 +0000
ROA not before: Wed 28 May 2025 10:42:04 +0000
ROA not after: Sat 07 Jun 2025 10:42:04 +0000
asID: 7029
IP address blocks: 154.194.16.0/22 maxlen: 24
154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99142 (0x18346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 10:42:04 2025 GMT
Not After : Jun 7 10:42:04 2025 GMT
Subject: CN=6836e881-1d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:04:8d:d2:c2:69:c7:f4:d2:0a:d8:7f:10:
28:6d:dd:7d:37:9a:57:04:c6:ce:ba:38:a2:32:e9:
3b:a9:2d:08:ba:7f:0d:d7:5a:2f:c0:34:99:60:3d:
f9:d7:6e:f9:94:e0:96:43:96:5e:13:4a:ea:7b:89:
8e:ac:e5:23:7b:27:35:9c:ec:a8:86:48:c8:3a:2a:
7f:3b:79:fd:28:be:15:d6:e5:8b:a2:12:29:99:2b:
d1:34:62:6e:41:fc:7f:4b:e9:ac:c9:38:da:88:ea:
8f:5f:7c:b0:fc:60:6d:17:05:a7:3b:8a:0f:8a:95:
45:42:dc:ff:87:45:9a:9b:64:f9:34:45:bc:3f:c9:
8a:5a:b0:4b:83:ba:71:e0:6f:db:7a:4d:f2:47:06:
b3:ae:69:38:e7:14:4f:f9:43:0d:b2:d6:7e:bd:36:
97:d2:a6:68:21:38:ec:5c:3d:44:ad:86:86:d0:70:
7b:c0:b7:8d:80:43:90:1d:a3:1f:ff:86:4f:1a:dc:
a5:36:3f:8e:fb:db:47:20:56:2f:b9:e5:b1:c6:6b:
ec:6a:ea:63:e7:e7:5c:65:9d:6f:c6:a6:d4:f9:b6:
9a:b9:0b:0c:b0:f9:60:d9:5f:e4:92:57:d8:6e:2f:
20:e3:68:42:df:1e:7b:7d:ce:62:b6:3f:52:0c:c9:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:21:E2:6F:6C:3A:BE:A4:24:BC:1D:D4:44:FF:AE:E9:10:E6:4C:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67836E5A3BB011F09294A0F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
77:48:7d:2f:81:a8:9b:de:0b:b1:22:9e:27:4c:97:42:dc:19:
2e:6d:81:67:e3:95:ed:e3:6e:e5:f4:0d:cc:31:d1:cb:50:16:
81:e5:6e:90:02:3a:92:73:1a:74:f4:35:61:f9:5b:f2:19:ec:
d6:6d:ef:13:c1:4e:a3:df:a3:bc:ed:ab:96:c6:ad:e4:30:9a:
c8:11:13:62:44:04:4d:c9:d1:da:0d:28:c4:e7:a2:0f:65:55:
ef:a9:21:f3:d0:78:bd:ba:a2:35:fb:56:6f:92:3f:ae:2a:69:
5e:90:59:b7:a7:3c:91:1a:6c:15:6e:e5:fd:37:1b:fb:3d:72:
62:b3:55:fd:e7:1a:15:e9:2d:44:a8:bf:e8:b6:18:c5:f8:76:
87:9d:ed:51:5e:da:46:26:ca:15:72:32:66:8f:11:52:0b:22:
b7:8f:bc:d2:35:86:10:28:5b:7f:f9:41:71:e9:aa:af:af:e6:
d9:c9:39:53:d6:98:f8:1c:9c:9c:4c:33:05:b5:cd:42:a4:00:
e3:ed:52:a6:f0:c3:85:41:0a:b6:8b:93:24:5f:9f:71:3c:68:
e5:2a:31:61:b3:0c:36:58:82:47:43:02:0e:2d:04:2e:ac:53:
92:8f:87:8f:5f:38:6f:ac:92:0c:64:1f:65:f4:db:1a:2a:b6:
7a:69:c0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:10:26 2025 by rpki-client