Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E4DA7C37D411F0847F54D2DAE4EC9C.roa
File: 75E4DA7C37D411F0847F54D2DAE4EC9C.roa (raw, json)
Hash identifier: +/mHfYJ3tqUqFSfnt+WRV58ep//eexvnQ0CQhdNbENI=
Subject key identifier: D6:B0:5B:1F:E9:3C:E4:80:0C:BC:FC:59:3E:27:BE:D6:72:1D:35:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018206
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E4DA7C37D411F0847F54D2DAE4EC9C.roa
Signing time: Fri 23 May 2025 12:50:10 +0000
ROA not before: Fri 23 May 2025 12:50:06 +0000
ROA not after: Fri 27 Jun 2025 12:50:06 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98822 (0x18206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 12:50:06 2025 GMT
Not After : Jun 27 12:50:06 2025 GMT
Subject: CN=68306f02-6ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:2e:ea:7e:6b:c3:57:e5:09:c3:a1:23:6e:
91:53:10:84:17:90:29:02:b4:89:27:fd:6f:1d:3a:
f3:d3:26:ee:d7:63:89:3f:1f:63:93:3f:d9:58:e2:
22:88:92:74:2f:43:ab:39:3d:7c:9e:0b:e4:54:75:
15:77:22:27:64:68:29:29:26:ea:5a:46:f0:79:84:
53:f1:d8:d4:f1:5b:34:8e:81:5c:18:59:99:c8:b0:
08:9f:61:c7:c8:e2:d8:76:66:e3:c0:29:e8:cc:df:
f2:63:02:b2:c4:33:12:88:40:ca:9d:d8:93:84:da:
2a:1a:ff:87:47:21:90:90:aa:31:92:25:61:98:61:
60:71:66:8b:d3:54:20:9f:f1:11:6e:50:7e:25:d0:
58:4e:7d:3c:46:41:01:8e:89:0a:4f:ce:33:2a:f5:
31:53:2f:88:96:b1:35:3d:36:c9:7c:82:dc:f6:0e:
b4:51:78:b8:e9:fd:f7:a4:cf:73:79:c2:30:77:cf:
39:77:6e:83:f6:a3:e7:31:33:75:f7:cc:d1:24:28:
51:f5:82:c6:1e:a4:15:0b:2c:58:35:93:5e:b6:ea:
f4:a9:0c:25:ca:59:f9:b2:fc:8e:60:c9:b7:cd:11:
d8:31:a4:4c:8f:00:46:e3:57:58:f3:4f:6f:cb:94:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:5B:1F:E9:3C:E4:80:0C:BC:FC:59:3E:27:BE:D6:72:1D:35:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75E4DA7C37D411F0847F54D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:e2:66:e8:e2:3e:7b:ab:e7:86:f7:3c:89:5c:82:75:cb:01:
8a:4f:47:a4:70:85:dc:27:b0:f6:c3:a8:14:85:c9:c8:8a:a5:
ce:89:e4:07:44:3d:95:53:a2:58:2b:39:5f:89:f6:0e:1b:3a:
cc:5f:6b:ab:e4:2f:1c:9e:2e:b9:d4:88:27:79:28:9e:13:55:
72:37:fb:1b:67:ef:4c:5e:68:87:f6:3c:83:97:72:10:43:81:
e8:cc:3f:bc:ff:73:1a:43:3f:08:b4:ab:3c:1f:03:3d:e6:26:
57:f0:c8:bb:39:46:4a:71:c6:10:2b:6c:51:ac:e4:1a:69:71:
4e:a4:e5:99:92:70:9d:bd:5d:28:01:8c:d4:ef:44:d5:ab:96:
71:1e:cf:de:1a:f5:58:ae:f2:22:9a:c0:46:7d:16:34:a0:28:
17:51:55:ba:7d:30:5d:1f:49:98:c0:3f:35:a1:e4:4b:7c:68:
87:a8:3b:3b:78:a4:ce:32:fe:84:6f:30:32:4d:c3:a5:c1:0d:
42:08:82:38:8f:2b:b4:fd:54:14:e2:36:58:03:41:7c:bf:1d:
fa:d7:3f:74:5b:41:00:f3:84:0e:69:fc:20:5e:29:74:de:33:
04:f7:2b:78:3a:3c:aa:fa:ba:a0:6a:f0:f4:fb:4c:da:8e:c9:
18:cf:1a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:06:45 2025 by rpki-client