Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B58903E3D5511F0A13D41A7DAE4EC9C.roa
File: 8B58903E3D5511F0A13D41A7DAE4EC9C.roa (raw, json)
Hash identifier: HkwPJbAU/ucjLpDuUVNdmpTYIwfF37PFgfHqRkXg0ko=
Subject key identifier: E3:AB:18:49:56:07:FF:D3:E6:64:14:13:20:93:C6:87:ED:0E:26:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B58903E3D5511F0A13D41A7DAE4EC9C.roa
Signing time: Fri 30 May 2025 12:56:47 +0000
ROA not before: Fri 30 May 2025 12:56:42 +0000
ROA not after: Sat 05 Jul 2025 12:56:42 +0000
asID: 61112
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99289 (0x183d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 12:56:42 2025 GMT
Not After : Jul 5 12:56:42 2025 GMT
Subject: CN=6839ab0f-f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:01:a8:12:29:dd:8b:bb:1f:d2:a3:b5:58:
94:41:a1:75:6a:9c:83:39:be:c9:76:78:0c:12:74:
dc:36:43:ea:aa:9f:79:fe:1c:52:56:7c:aa:6a:46:
30:28:92:06:26:b7:57:7c:71:d9:51:fa:af:28:df:
74:b6:7d:85:67:6a:7a:a5:c5:a4:78:ba:09:dd:ad:
1c:36:07:bf:9a:ad:77:cf:6d:f2:f2:fe:11:8a:b3:
c2:54:ad:69:e5:12:df:b9:1e:58:5f:d1:47:92:1a:
ec:9d:62:f0:63:86:f1:42:41:c5:a6:11:2d:c0:d3:
07:bc:7e:7d:72:67:23:32:ba:22:16:2c:6b:0d:e0:
4c:f3:ff:15:af:03:1f:ee:37:a6:8d:af:7c:48:8b:
e5:d6:ff:95:a4:4a:83:f8:12:9e:4f:27:43:37:d3:
ab:9b:33:6b:9e:72:bd:6c:cf:39:53:a6:47:92:ea:
b4:c5:51:72:79:d6:24:b0:b7:7e:bc:0f:66:68:2f:
21:08:4e:9e:25:22:59:a3:f8:72:a9:80:e1:bb:13:
81:ca:72:d0:f3:33:c4:43:df:69:2a:f5:44:f6:70:
d0:50:df:f6:e1:c6:c5:5b:20:9b:0a:ad:4d:4f:00:
5a:ec:e6:38:77:72:ec:59:7e:f0:bf:5e:c9:64:89:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:18:49:56:07:FF:D3:E6:64:14:13:20:93:C6:87:ED:0E:26:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B58903E3D5511F0A13D41A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
94:93:73:c2:08:00:f4:22:33:4f:1b:29:fd:7c:ec:e0:9e:b2:
6b:95:da:63:35:e7:1a:10:bf:35:00:00:46:4e:a5:d5:8b:08:
51:9f:0a:ee:23:cd:04:26:62:4c:db:9d:cb:89:f0:40:5a:35:
bd:02:e9:d9:3e:7a:2a:1d:e4:bf:01:49:99:62:07:1d:f1:27:
6d:41:b8:93:fd:e4:45:ed:04:d7:9c:67:61:30:12:bf:81:47:
f8:94:93:01:ef:83:1c:7b:bf:48:a9:b7:b6:a4:ac:71:35:83:
50:ab:2c:af:8f:9c:8d:ba:6c:12:9d:0c:08:93:04:2c:c4:b1:
d2:7e:15:0f:a8:36:f3:2a:18:7e:cf:22:f5:cb:14:09:ac:ce:
82:af:a8:41:d9:58:30:05:dd:04:be:26:8b:41:5a:00:45:73:
d0:dc:0a:2c:75:7f:4a:11:c2:3b:5f:0f:41:7b:30:96:18:2f:
c9:47:f8:2b:0f:03:f5:7f:a1:cd:65:40:c0:9c:5b:dd:07:96:
ae:70:69:95:f6:6c:5b:ba:78:20:de:a9:04:d4:0d:35:32:60:
25:ac:da:cb:2a:5e:ab:f6:f7:a2:1c:71:f9:b1:82:a6:7e:6a:
1e:30:97:5f:4e:60:d1:fc:a2:bf:b6:07:bf:58:a0:2d:f9:94:
5d:be:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:25 2025 by rpki-client