Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E9DFBF83EDF11F0A8F945AADAE4EC9C.roa
File: 9E9DFBF83EDF11F0A8F945AADAE4EC9C.roa (raw, json)
Hash identifier: 1UqW2Pfca+9Ex2i3wspL2YrAwAqa+vFZDm4/Aavs78I=
Subject key identifier: ED:E1:22:CA:76:5B:23:E1:4A:56:51:50:AF:EF:CC:53:0B:88:36:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01843B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E9DFBF83EDF11F0A8F945AADAE4EC9C.roa
Signing time: Sun 01 Jun 2025 11:57:41 +0000
ROA not before: Sun 01 Jun 2025 11:57:36 +0000
ROA not after: Fri 11 Jul 2025 11:57:36 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99387 (0x1843b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 11:57:36 2025 GMT
Not After : Jul 11 11:57:36 2025 GMT
Subject: CN=683c4035-daf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:7a:df:53:e9:b5:03:a8:01:64:49:ff:f5:
fc:00:48:d5:1c:e6:aa:01:d3:7f:56:02:a4:d8:58:
a8:37:8a:c1:f9:e4:b3:d4:f9:1a:0e:3a:64:1b:6f:
65:d6:fa:77:29:cd:ca:fe:d3:55:de:6a:db:ec:f2:
1e:20:a1:b7:77:d8:02:0c:b1:5b:ac:dc:9a:9b:ab:
5b:66:91:d1:e9:d4:ca:1d:08:73:0c:72:06:cc:b4:
64:bb:35:64:27:ea:9d:11:b0:71:39:82:3e:40:d9:
94:00:d5:ce:08:65:53:9d:8b:76:4c:9b:c5:a2:86:
3b:e1:81:c3:9d:d2:6c:bc:a1:24:bd:3f:32:f6:fe:
0e:6f:cc:3d:0c:4f:b7:9a:2a:47:28:e2:de:f5:83:
d2:02:53:e3:e8:2c:62:7b:9d:39:56:30:f0:31:65:
f5:9a:ff:ec:e1:45:45:51:d3:dc:19:8e:e8:66:ed:
7b:03:4f:5a:9c:b0:65:9c:22:f5:25:c6:51:19:23:
b0:c3:58:cc:b0:99:52:82:0e:d8:c9:2d:ec:d2:e9:
c7:38:9e:b1:03:3f:bc:69:22:e5:1e:da:c0:5e:bc:
bc:72:9b:dc:be:ee:25:be:02:da:18:14:ea:99:ab:
22:b1:b8:e2:5d:12:4f:4b:e2:82:e8:91:95:6f:1a:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:22:CA:76:5B:23:E1:4A:56:51:50:AF:EF:CC:53:0B:88:36:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E9DFBF83EDF11F0A8F945AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
44:88:87:74:1a:04:86:64:b3:df:29:58:79:df:f0:45:d8:40:
31:18:8f:16:42:11:9e:6a:62:0e:13:c1:a3:db:36:40:43:50:
8d:f8:30:3c:d0:c3:ef:1d:92:f4:d1:5c:2b:f2:ac:7c:79:ab:
06:26:77:e1:fe:60:8e:cc:d5:88:7e:df:fd:d2:cd:07:6e:c0:
84:d1:13:f7:26:04:02:b4:1b:77:50:e3:b8:e1:9a:d5:5c:4d:
6c:da:3c:dc:48:a0:83:9b:9d:bf:b0:39:28:08:39:76:03:fa:
7f:65:04:bc:f1:c7:9f:13:9e:ce:ae:5b:74:90:a9:d1:56:b1:
67:49:ae:63:0f:0f:08:bd:80:e0:67:ae:bc:fc:50:a4:87:2a:
8a:c4:87:ab:30:88:3e:c3:f4:ed:38:06:fc:98:e9:26:25:12:
53:a1:4c:ab:a5:c4:f9:16:cd:73:45:73:e1:ba:65:51:f1:ea:
79:df:51:e3:7f:0c:aa:f1:ce:d3:8d:3e:96:c3:bb:23:2c:ba:
0c:54:18:28:a5:dd:1b:aa:7a:90:d7:0b:97:c2:75:d2:b7:fe:
74:fa:65:fc:8d:45:d7:e9:05:e0:5c:f7:d2:16:8b:7b:bd:85:
d7:a4:ab:f9:d1:f8:16:15:0f:56:33:56:f4:fd:70:0d:43:ed:
72:02:d1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:38:11 2025 by rpki-client