Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95FF78F041F011F0A532849ADAE4EC9C.roa
File: 95FF78F041F011F0A532849ADAE4EC9C.roa (raw, json)
Hash identifier: aRwgLzjNQxbeC7ZHhqqGdw4JXm5yKdvgBecnp6r3bUY=
Subject key identifier: 74:A4:1C:1F:0B:8F:7A:D5:98:A5:A8:DA:E6:43:EE:A6:E1:24:49:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0184FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95FF78F041F011F0A532849ADAE4EC9C.roa
Signing time: Thu 05 Jun 2025 09:36:42 +0000
ROA not before: Thu 05 Jun 2025 09:36:37 +0000
ROA not after: Sun 13 Jul 2025 09:36:37 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99580 (0x184fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 5 09:36:37 2025 GMT
Not After : Jul 13 09:36:37 2025 GMT
Subject: CN=6841652a-71f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:b1:3c:70:a4:0d:7a:76:55:26:e5:41:e7:
f0:d7:76:31:a1:c6:cd:9e:7b:27:5d:6f:42:95:71:
a7:a0:4a:57:e4:45:42:7e:ac:e8:b3:6f:4c:35:04:
2d:3e:f7:b9:52:fa:c1:58:eb:c8:de:05:47:0d:e1:
a3:ec:84:4d:0b:5b:4d:67:da:54:bc:0e:e7:8c:b5:
d7:17:20:65:5d:47:87:29:f2:eb:61:2c:84:fa:35:
dd:c6:04:ac:c1:bf:53:6b:d9:2f:2a:b8:15:92:b3:
32:58:c5:96:db:27:aa:b9:28:ba:5e:45:40:45:52:
b9:23:11:d0:b5:3a:ef:a5:c8:08:77:0f:e7:60:55:
eb:27:02:fd:fd:73:bb:28:c2:e3:3b:9d:f1:44:4f:
1e:de:07:ce:4a:fb:49:ff:78:8f:98:29:11:17:a1:
fb:36:a3:b7:70:01:5b:a9:89:e8:66:47:47:14:1a:
d9:4f:76:ae:39:df:40:1a:8d:3d:95:a5:11:47:92:
b1:5a:45:d8:7f:c6:d8:46:d0:ad:b2:a1:69:99:1d:
7e:85:f2:02:7d:ce:b9:ad:8f:cf:9f:07:02:42:14:
85:79:dd:c7:59:c3:79:31:f4:e9:d7:73:3c:9a:fc:
2a:ba:dc:50:84:82:25:d8:2a:4e:b4:87:46:34:34:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A4:1C:1F:0B:8F:7A:D5:98:A5:A8:DA:E6:43:EE:A6:E1:24:49:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95FF78F041F011F0A532849ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
80:98:5f:3d:59:32:69:59:9e:74:99:cc:7f:e1:6b:48:a1:4a:
f5:ab:38:cd:95:21:78:22:bc:df:bd:eb:bd:31:7e:48:ac:05:
dd:06:2c:64:39:83:ef:23:0f:2b:8b:d7:0c:d3:4e:88:b8:13:
16:d1:d4:0b:2d:6c:59:cb:0e:04:25:25:3c:df:5f:56:29:8a:
99:da:e0:18:3c:9d:fa:61:2c:78:63:35:03:c6:91:d2:d3:94:
a1:c1:ec:ac:e6:b1:79:71:47:97:d1:e6:ba:68:7c:db:c9:99:
87:91:62:b9:96:51:a3:b6:93:7b:2b:fe:5f:eb:b2:ee:66:d0:
50:29:8f:ad:8f:ba:bc:e8:f8:ac:3a:f7:ba:a3:2b:48:3d:3a:
54:1c:a5:ae:91:bd:f1:50:62:46:34:07:e9:88:cf:57:17:42:
83:e0:38:12:7e:cf:39:44:db:cf:2d:23:60:43:06:13:13:35:
08:d1:21:0b:a0:79:c1:35:bf:04:91:75:f8:90:fb:53:36:5f:
13:77:f2:73:bd:ed:35:37:26:37:1f:68:01:cf:ca:bd:86:a4:
7c:33:df:14:3e:67:c9:55:d1:68:44:b4:b1:3d:0f:65:32:44:
d3:c5:19:7b:6e:23:35:c1:6a:34:61:68:bd:12:a7:06:38:7b:
2e:12:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:02:00 2025 by rpki-client