Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/992FD1CE3C8111F0A5A96EC6DAE4EC9C.roa
File: 992FD1CE3C8111F0A5A96EC6DAE4EC9C.roa (raw, json)
Hash identifier: Bgck6lb1m5lj+kYSezFrVWHrxsOu6mLnbl6+4LIgsGE=
Subject key identifier: 2E:13:AD:51:A9:2B:DD:38:89:72:88:83:11:C3:AF:5E:79:3F:4C:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0183C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/992FD1CE3C8111F0A5A96EC6DAE4EC9C.roa
Signing time: Thu 29 May 2025 11:39:37 +0000
ROA not before: Thu 29 May 2025 11:39:32 +0000
ROA not after: Wed 03 Jun 2026 11:39:32 +0000
asID: 135423
IP address blocks: 154.205.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Jun 2025 11:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99264 (0x183c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 11:39:32 2025 GMT
Not After : Jun 3 11:39:32 2026 GMT
Subject: CN=68384779-20de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:53:35:53:9d:ce:61:8a:da:6b:4e:1a:19:
db:b2:84:32:14:e3:31:0f:b5:a1:5d:86:6c:3b:16:
fb:a8:1d:c2:e6:0d:1c:8f:58:92:0b:12:0c:bf:e3:
25:59:36:2e:cf:33:8e:79:3b:9b:18:46:8f:20:25:
4b:0e:99:c1:e9:ef:33:e7:69:c3:5d:9d:e7:51:55:
39:e4:2e:63:16:9f:3c:08:62:9a:50:62:c4:b9:7f:
5f:5d:74:34:8a:71:6b:95:d0:64:7b:fe:77:f0:4a:
e9:03:a0:f5:53:ea:64:e8:44:0b:23:7b:6f:a1:6d:
9f:4a:d9:fc:8a:14:e8:a4:95:3d:f4:c5:32:ca:ad:
01:9e:dc:e7:b4:bc:36:94:3b:fd:8e:2f:70:51:ae:
fe:ce:61:95:0b:94:af:5e:d2:9f:15:49:c4:51:f0:
eb:cc:68:20:6d:85:94:a5:51:6e:d3:28:43:21:51:
b2:46:ab:4c:e2:29:7d:b6:5c:0e:5d:98:66:2d:a0:
c8:9f:a3:59:f1:26:e5:71:a8:65:cc:0c:cd:9a:22:
a7:94:65:59:f0:17:29:ad:75:a3:75:63:fe:c6:e7:
80:c0:81:cd:7c:b6:27:b6:9d:38:f4:b8:ad:ab:2d:
1f:1d:ae:10:55:08:1f:6d:f1:54:89:dd:25:d5:ec:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:13:AD:51:A9:2B:DD:38:89:72:88:83:11:C3:AF:5E:79:3F:4C:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/992FD1CE3C8111F0A5A96EC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.20.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ce:c0:73:d2:17:ed:7b:f3:33:2e:ad:5b:22:c2:19:3d:b2:
4a:c2:75:ec:4b:3f:cb:52:6d:25:3a:c0:fa:c2:0d:78:09:08:
97:60:17:54:0c:a8:b5:c5:6e:99:ae:f1:19:31:e3:22:a2:57:
70:b0:db:9a:55:a3:c4:c4:73:03:ce:f4:62:2e:96:38:c7:fc:
8b:82:17:b5:74:16:03:f5:0d:78:8c:78:4a:21:4e:f3:46:a5:
15:68:50:b8:25:7e:13:78:cd:5b:20:9d:65:51:9c:f3:19:f8:
44:31:47:dd:5f:c4:63:7f:96:03:68:19:75:07:5e:d9:f6:48:
5a:d7:82:8e:b7:5f:56:f6:aa:fd:03:c2:de:44:4e:9a:92:7c:
39:96:64:5c:6a:70:27:c4:8c:56:cc:1d:ce:c5:56:0d:f5:6c:
65:a7:bf:ff:41:24:fc:41:15:f1:1e:be:58:0e:b2:dd:94:6a:
e4:89:13:89:d6:e7:c6:c4:17:86:93:df:dd:70:85:d4:18:b9:
90:fc:73:98:41:1a:bb:26:71:ee:6a:6f:2c:ec:97:ae:5f:28:
7e:d5:59:eb:e9:9c:40:24:09:ac:b5:08:6e:11:d1:ee:48:46:
90:cd:76:45:45:4c:cd:18:6e:f5:18:8f:58:39:6e:c9:d5:97:
e9:ec:09:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:35:48 2025 by rpki-client