Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91AC526C408A11F0A948D67DDAE4EC9C.roa
File: 91AC526C408A11F0A948D67DDAE4EC9C.roa (raw, json)
Hash identifier: 5k6THbgvfwPNovl3I7nDkzs5qOQ0jBq3YgjmWz8DMaU=
Subject key identifier: C4:FC:3D:1B:64:13:68:7C:65:05:8C:F9:C0:E3:78:82:B6:6D:4C:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01849F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91AC526C408A11F0A948D67DDAE4EC9C.roa
Signing time: Tue 03 Jun 2025 14:53:54 +0000
ROA not before: Tue 03 Jun 2025 14:53:50 +0000
ROA not after: Sun 03 Aug 2025 14:53:50 +0000
asID: 63139
IP address blocks: 154.94.94.0/24 maxlen: 24
154.94.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 07:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99487 (0x1849f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 14:53:50 2025 GMT
Not After : Aug 3 14:53:50 2025 GMT
Subject: CN=683f0c82-2ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:97:9a:99:9a:7c:f8:4e:c9:35:00:5a:ff:
9e:12:d5:77:b6:42:01:47:ad:80:55:ca:8c:fb:de:
b1:a9:f2:4e:10:c7:a2:1c:0d:90:6f:fc:71:32:c9:
7f:47:66:51:73:4e:8e:35:45:6f:e5:0b:e1:fd:1a:
51:50:56:e4:ac:bc:61:cc:7e:95:d3:18:1f:1b:1f:
97:09:26:97:3e:4f:5a:3d:7b:48:3b:ec:ae:7a:f9:
c7:e9:c8:95:61:8f:ed:2c:ef:44:1d:a5:66:50:b9:
48:f3:1b:61:c3:8f:8c:d2:09:46:ec:8a:c5:75:ae:
30:b4:b9:6f:16:20:8d:eb:59:13:2a:74:8b:21:c2:
42:37:62:7f:fc:10:02:26:d2:f7:bf:95:e0:d9:66:
1a:b0:70:63:fa:7c:7f:a1:e7:a6:6a:5d:26:cb:e5:
41:39:b9:d0:c9:48:4c:a7:f2:f0:fd:a2:16:07:56:
e3:bb:53:3d:5a:7b:71:72:1c:4e:11:33:a5:c6:3e:
85:2b:bc:1c:86:bf:2b:70:f7:5c:29:82:de:f6:be:
79:4f:90:07:0b:2b:1b:0e:de:48:12:b2:a3:fd:6b:
6c:d3:7e:05:fe:fc:32:fe:a7:b3:98:e1:3b:db:cc:
65:c7:de:08:68:87:8e:0f:06:d9:53:f2:2f:fa:50:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FC:3D:1B:64:13:68:7C:65:05:8C:F9:C0:E3:78:82:B6:6D:4C:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91AC526C408A11F0A948D67DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.94.0/23
Signature Algorithm: sha256WithRSAEncryption
31:72:34:a3:de:51:5c:7f:e1:1a:30:6a:b7:2d:ce:12:d2:74:
ff:7f:a7:b1:2d:41:90:86:5b:15:87:15:26:53:b2:b0:d8:a3:
f1:a6:ae:31:2e:37:84:90:41:12:d0:b9:cf:21:f3:20:80:a5:
c0:52:c1:05:f5:96:fc:d2:16:72:56:3e:ef:c9:fd:63:17:5f:
9a:9c:a4:0f:54:74:42:d7:9d:75:2d:19:09:0d:ad:c6:50:28:
90:e8:55:a9:14:f9:8b:44:56:b3:31:9d:55:be:79:50:de:98:
6a:70:24:6f:51:2b:a3:78:2b:00:dc:df:f7:cd:49:96:b3:e1:
eb:36:94:21:5d:59:2d:a5:0d:34:0b:b2:54:2c:be:07:f8:06:
20:aa:1b:08:a4:ad:43:87:59:5d:32:7d:99:3c:e7:2c:89:3b:
69:c9:11:6a:d4:d9:eb:0f:74:ac:fa:3d:2a:5a:37:0e:44:1d:
75:db:ce:7a:7b:7d:d7:22:13:aa:84:de:f1:2a:54:38:00:d5:
64:02:37:57:43:69:fd:7a:8e:9b:49:8a:d8:4b:62:3c:28:cc:
0f:5a:a3:67:05:71:b7:47:51:82:3a:25:f6:ee:21:f4:c7:43:
9c:d7:e0:4d:8d:88:06:bf:4a:8e:75:ba:3b:4f:84:7a:c9:0b:
f8:5d:83:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:37:01 2025 by rpki-client