Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9954E08038A411F0A7BF969EDAE4EC9C.roa
File: 9954E08038A411F0A7BF969EDAE4EC9C.roa (raw, json)
Hash identifier: Vz+8GBvuF0/L/AsUlnYeqAZvcWxUSwGyFiFOTtM0VbA=
Subject key identifier: 50:C1:C6:20:20:01:73:F2:F1:03:2C:B0:82:DB:A9:94:50:9A:2F:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01828C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9954E08038A411F0A7BF969EDAE4EC9C.roa
Signing time: Sat 24 May 2025 13:40:05 +0000
ROA not before: Sat 24 May 2025 13:40:00 +0000
ROA not after: Tue 23 Jun 2026 13:40:00 +0000
asID: 984
IP address blocks: 154.200.157.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98956 (0x1828c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 13:40:00 2025 GMT
Not After : Jun 23 13:40:00 2026 GMT
Subject: CN=6831cc35-87cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:16:b3:97:14:28:26:3b:09:86:c7:64:05:
94:4e:02:19:4a:92:e2:ff:80:46:25:18:cb:d4:3e:
26:92:ca:19:d0:7d:1d:08:39:cc:3b:47:a9:53:0b:
28:84:04:ad:dc:29:7b:68:23:db:35:e8:1a:01:5c:
f0:be:e2:85:65:67:39:52:0f:f8:fe:56:73:9d:4f:
c4:62:fd:52:0c:e6:a4:38:5b:7d:dc:1b:cc:21:21:
2f:89:d8:fd:3a:14:31:5d:10:25:ae:a0:6e:86:e7:
8c:e0:53:13:0d:91:0f:fc:a5:e4:19:23:76:da:9d:
36:87:7f:b9:3e:69:6a:7f:9b:de:c6:88:d6:17:72:
4d:d6:e8:c5:e4:ed:3d:86:d2:f2:ce:c9:3b:f9:78:
b2:9b:6e:32:2c:11:55:1c:f4:8c:f6:2b:18:e3:ad:
3e:d8:47:20:19:ac:61:14:fa:ca:2f:02:52:77:e5:
bb:78:5b:d6:d4:19:73:bc:b6:a0:c4:f1:65:b3:62:
31:3e:44:08:81:05:3e:55:bc:65:f1:f3:ba:cb:e9:
65:a3:70:d3:5f:d8:54:5d:c1:01:2f:0e:05:ab:15:
1b:c4:d9:0c:88:37:cb:83:4b:57:e4:4d:02:a0:02:
4d:20:03:5f:0a:fe:e4:61:36:cf:ec:89:87:41:78:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C1:C6:20:20:01:73:F2:F1:03:2C:B0:82:DB:A9:94:50:9A:2F:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9954E08038A411F0A7BF969EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.157.0/24
154.200.159.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ef:89:b6:5e:6e:71:71:42:fe:cf:6f:96:29:6c:3e:e6:21:
52:b6:6a:11:6c:76:da:e5:54:a9:f4:67:74:16:85:b2:bb:42:
fb:b1:88:dd:91:09:3f:fa:6b:cd:9e:03:c9:0a:65:ee:b4:2b:
c2:b6:e1:2b:18:0a:2c:d7:c5:b2:4c:bc:f3:a8:1d:c6:49:a7:
90:55:60:94:75:56:5a:f1:44:43:ef:85:b6:55:1c:24:13:05:
2c:fb:2f:f5:6c:9c:21:92:df:7e:4f:39:3e:11:94:75:46:ed:
2a:9c:38:56:8a:2d:a1:a1:6d:da:a6:73:f7:bf:39:b1:ef:76:
61:1c:28:2d:e2:b7:e2:12:04:61:3d:89:cf:b8:15:99:09:7e:
cd:88:0d:11:83:93:06:95:d1:1a:fe:44:93:be:3e:cf:31:f5:
38:8e:24:9f:e9:1d:fb:ca:89:34:8c:99:3b:6e:25:b3:ef:42:
cf:67:22:04:1b:57:ca:c4:c5:83:44:f3:9f:c0:b6:91:6b:4e:
17:55:68:17:06:1a:b6:39:41:f8:02:22:48:5d:cb:a5:ca:34:
c0:7e:bc:6d:45:57:fe:d3:31:02:f1:f8:14:92:2f:da:a9:de:
57:2b:b8:96:63:2c:4e:4d:28:ad:90:f9:99:c9:33:b1:a5:91:
26:5d:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:17:18 2025 by rpki-client