Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A5B6AD437EA11F08C3888DEDAE4EC9C.roa
File: 6A5B6AD437EA11F08C3888DEDAE4EC9C.roa (raw, json)
Hash identifier: 5zc/WeycP1ZnjV+05I6jfGVMO7Yl7o0eDPBUmHvVaS8=
Subject key identifier: A5:43:A7:20:AE:14:B5:0F:92:B3:11:59:EC:EE:01:36:59:F6:14:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018227
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A5B6AD437EA11F08C3888DEDAE4EC9C.roa
Signing time: Fri 23 May 2025 15:27:20 +0000
ROA not before: Fri 23 May 2025 15:27:15 +0000
ROA not after: Mon 30 Jun 2025 15:27:15 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98855 (0x18227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 15:27:15 2025 GMT
Not After : Jun 30 15:27:15 2025 GMT
Subject: CN=683093d8-dfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:3c:e9:69:00:33:df:a2:39:e8:df:6e:87:
35:92:17:87:e1:fd:06:31:4e:18:07:b8:bb:4f:1f:
fa:89:78:51:15:eb:0a:6a:16:a3:ff:38:3f:5d:bd:
1c:69:18:54:af:21:cb:5d:db:4e:97:a1:71:51:e8:
42:cb:9b:8b:71:cd:06:42:4a:7e:04:8a:54:f3:83:
f4:d6:bb:8c:8c:d8:06:e7:d4:10:7f:45:fb:c7:43:
d6:56:76:7e:ff:62:cb:04:f9:4b:c4:72:56:f5:1e:
f3:89:36:5c:c7:0b:8a:46:a6:21:e4:5e:cc:af:42:
d4:0b:41:f0:d8:c6:ce:2d:05:44:a1:2d:dd:3a:e4:
ad:e2:06:77:28:5e:06:55:be:a7:9f:f4:21:ff:8c:
c2:bd:05:2a:c0:a3:74:75:a0:37:c9:03:77:25:1e:
cd:33:2a:8c:96:60:ab:a1:79:a2:c6:9f:eb:ca:49:
45:e5:a6:9c:0a:c3:5b:e7:7d:fa:c1:0a:6d:c1:c8:
97:57:92:e8:a3:63:e4:ee:7e:a7:f4:dc:d1:a6:4f:
28:3a:2d:55:3b:92:1d:0b:3e:0b:64:33:6b:b1:92:
43:85:c6:f6:56:1a:b1:ca:88:c8:d6:2f:f3:a9:93:
12:f0:33:8d:0a:3b:73:b0:4d:b1:47:4f:ba:62:f7:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:43:A7:20:AE:14:B5:0F:92:B3:11:59:EC:EE:01:36:59:F6:14:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A5B6AD437EA11F08C3888DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
2e:df:af:36:6a:dc:bc:7b:ff:0e:8e:fe:5f:10:8b:46:b9:36:
3d:0e:dc:82:69:2d:6b:02:f6:f4:86:60:ac:aa:8d:24:ca:1a:
0b:70:96:b3:f5:e3:c7:04:bc:91:0a:40:1a:6d:ec:b9:48:55:
34:24:89:b3:ea:1f:07:a2:95:7a:ae:da:a3:53:f8:d5:dd:9a:
8e:06:3f:d1:d1:60:67:2d:6d:5b:ee:10:d5:09:35:56:ce:93:
b1:af:8c:bd:b4:23:ae:50:cf:4e:17:4b:b5:12:53:ea:1c:0c:
e0:f8:1a:04:af:a3:41:8a:6d:4f:fa:b3:cf:a7:5f:26:c7:26:
a1:7e:f2:42:c5:31:21:21:a1:d1:26:1d:a6:11:39:5f:c2:22:
45:94:e5:e6:ad:76:6a:08:2d:b7:0e:e3:fd:b7:7d:0b:18:b1:
c6:41:6b:72:b5:92:1c:84:13:fc:d8:4f:0c:b0:ca:80:71:8e:
26:41:a7:b2:e4:7e:d8:5a:d0:9d:88:01:a9:dd:f3:6b:40:8b:
c9:c1:4e:5e:a4:a9:91:70:af:c9:2b:b1:53:ab:9c:2d:2c:ef:
42:fe:2e:08:28:7e:6c:c0:c2:c5:9c:11:44:bf:e3:9c:f5:ba:
60:c8:3d:f6:fb:1f:1e:4c:12:d6:9f:7b:5b:d5:10:d9:0f:75:
58:1b:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:24:31 2025 by rpki-client