Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D47D44037F111F08CA71A8DDAE4EC9C.roa
File: 8D47D44037F111F08CA71A8DDAE4EC9C.roa (raw, json)
Hash identifier: 8fAMPKyeUUkMN7pA6h8fEmVAoL6H177KSd7ITn5iDfI=
Subject key identifier: 44:C2:66:4C:B9:90:81:09:F3:73:B0:A2:64:69:0F:77:EB:8A:7B:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018231
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D47D44037F111F08CA71A8DDAE4EC9C.roa
Signing time: Fri 23 May 2025 16:18:25 +0000
ROA not before: Fri 23 May 2025 16:18:20 +0000
ROA not after: Fri 19 Jun 2026 16:18:20 +0000
asID: 984
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98865 (0x18231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 16:18:20 2025 GMT
Not After : Jun 19 16:18:20 2026 GMT
Subject: CN=68309fd1-8ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:ea:78:01:7f:d7:af:1b:d4:a8:8b:8b:56:
b5:c1:ae:ef:9e:36:c2:41:98:7f:9a:22:42:4a:cb:
66:db:33:87:dd:c2:44:ad:c8:f7:f1:c8:d7:ea:64:
58:5e:75:f3:2b:f9:b5:73:34:86:ec:6c:c1:80:8c:
ab:c1:04:93:68:71:76:47:0f:f6:c4:a9:c0:7c:0f:
34:de:80:5f:26:b5:cd:e2:b1:41:5e:c8:2b:df:0e:
b3:35:d1:d4:a0:83:2f:d4:03:20:a2:89:d9:a0:41:
2f:21:ce:2a:8b:df:d4:fd:07:7e:47:70:10:cf:31:
e6:1a:de:a6:7d:cb:80:53:17:6a:32:e7:9e:d5:82:
56:6e:9d:7b:f5:80:dc:d4:76:e1:05:43:bd:ab:5e:
f6:be:c6:73:82:e6:95:22:ee:15:c8:5e:24:e9:22:
22:89:32:8a:14:95:db:5f:30:ff:62:24:a6:90:1c:
bd:2d:11:0c:b8:ff:5f:32:b3:2a:b3:af:6b:20:e7:
d5:8e:79:55:cf:d7:7d:e1:64:c5:10:f7:78:13:29:
19:bd:01:78:08:9f:6b:1a:1c:a3:7f:cd:51:3e:99:
cc:4e:78:35:26:d9:44:2a:00:6a:26:e0:49:53:26:
87:8e:c1:7f:8d:fe:9a:88:46:8e:6c:f2:4d:95:cb:
fe:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C2:66:4C:B9:90:81:09:F3:73:B0:A2:64:69:0F:77:EB:8A:7B:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D47D44037F111F08CA71A8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0-154.82.154.255
Signature Algorithm: sha256WithRSAEncryption
be:10:a0:5d:59:f8:ff:92:9c:13:0a:f2:23:70:cb:3c:74:99:
0a:e2:c5:35:f2:64:0d:e2:58:54:47:9c:46:70:55:d9:68:52:
a0:02:b8:16:73:2f:bf:67:54:7f:9f:ae:45:6a:fc:37:2a:9d:
e6:5d:99:4c:64:a5:6f:14:71:cc:6c:7a:bb:19:68:ab:7b:f3:
db:61:b7:ba:1a:f9:3f:82:ea:0c:be:74:5a:d1:dc:5e:70:39:
51:d1:24:b0:58:a2:6c:0e:de:ba:cb:64:76:6f:76:99:71:5c:
01:a5:a6:b5:2c:49:11:04:69:23:01:a4:48:ce:de:9e:e6:b8:
3b:1d:66:07:dd:a2:07:f9:21:2a:a0:b5:54:6c:c6:e4:87:c2:
15:c5:ac:91:d8:1c:4f:0f:d1:44:61:28:72:8b:fd:90:3b:03:
87:6e:0d:a0:ff:fc:05:b6:01:5b:de:77:e6:ca:b5:83:ac:ae:
a5:17:85:c7:d1:1b:9c:35:22:5a:c4:66:55:82:61:4d:5e:57:
af:39:c3:b8:47:b4:cc:aa:23:70:51:d5:41:42:1f:39:4b:e0:
4d:34:dc:f6:55:0d:32:f2:db:db:03:c6:c7:da:4f:4c:ef:94:
09:dc:1d:c1:26:27:00:13:7f:59:79:94:17:91:b4:8e:42:c9:
aa:81:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:13 2025 by rpki-client