Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F3CFFA37E611F0810DA1C6DAE4EC9C.roa
File: A4F3CFFA37E611F0810DA1C6DAE4EC9C.roa (raw, json)
Hash identifier: EoABScHInevxp6NdIJzZfa7q2QXrynPtaqh6IhcEkbE=
Subject key identifier: FF:B9:72:BE:E0:3C:75:86:2B:06:C7:E1:B8:24:9E:6A:5E:E5:45:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01821D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F3CFFA37E611F0810DA1C6DAE4EC9C.roa
Signing time: Fri 23 May 2025 15:00:20 +0000
ROA not before: Fri 23 May 2025 15:00:15 +0000
ROA not after: Mon 30 Jun 2025 15:00:15 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98845 (0x1821d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 15:00:15 2025 GMT
Not After : Jun 30 15:00:15 2025 GMT
Subject: CN=68308d84-5772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:64:46:5f:e7:c5:bb:50:27:a9:71:f8:d1:
fc:34:ab:5e:a4:8c:1b:94:1c:9c:b4:b0:37:4d:77:
3d:04:d2:6b:42:41:e3:52:08:40:1a:a7:8d:d2:b3:
eb:93:16:34:90:b6:95:fd:e5:e4:4e:ed:3c:b1:6e:
c5:7d:66:a2:c0:0e:ec:f7:f7:53:40:32:5c:de:4a:
a0:0f:ae:20:62:b2:12:f0:1b:7e:61:e9:93:7d:a6:
8d:6a:ec:f7:04:9d:d7:ec:70:5e:3f:a2:47:80:d8:
dd:11:32:07:d6:40:02:52:e9:9a:8a:86:ef:56:c2:
d8:04:29:6d:f6:e7:e7:f0:d0:ab:5a:55:4a:ec:28:
3d:f6:9e:7e:a9:4e:3d:f9:a7:19:ba:54:6e:05:6d:
5a:1b:3d:d5:4f:74:00:33:08:80:c7:80:ca:3b:22:
36:68:27:79:a1:2e:99:49:33:3b:6f:94:d4:94:1b:
36:b9:15:4b:05:5f:48:65:75:f0:c8:39:fa:8d:c6:
48:d7:af:40:3e:e8:68:da:fc:e6:b7:b6:9f:49:c1:
00:fd:96:df:59:52:39:98:91:8b:67:56:f2:b1:be:
40:50:16:78:f5:d1:85:e4:6b:0b:84:37:05:6d:73:
4e:5d:97:0e:21:84:8f:32:6b:78:3a:c8:e5:47:d2:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:72:BE:E0:3C:75:86:2B:06:C7:E1:B8:24:9E:6A:5E:E5:45:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4F3CFFA37E611F0810DA1C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
89:d0:04:50:9e:dd:9b:fe:9a:e5:bf:45:59:fc:cc:78:7f:b0:
cc:aa:c4:58:94:3c:bf:fb:3e:a7:28:13:91:38:9f:ff:c5:f8:
68:c8:e2:3d:4b:a2:6c:2e:66:d7:74:59:9c:a4:7a:f1:fc:03:
11:b2:82:e7:09:fe:22:c7:03:d2:0c:d4:ad:f5:b3:33:71:51:
23:60:26:fb:cc:5b:7f:fe:44:7e:1d:0b:e5:18:5d:50:9d:d7:
77:fe:41:37:fe:4b:73:4e:65:a2:db:66:5e:b7:a5:cb:58:a7:
a2:53:b4:f1:63:4b:13:8f:4d:b6:5b:25:26:47:2c:a9:a7:2f:
40:b8:ad:b9:2a:5a:b9:c6:6a:b7:97:5e:22:8c:f1:19:64:52:
34:28:9b:e5:86:67:42:b6:0f:74:c9:31:a5:9e:13:ec:c7:4a:
cc:f9:06:78:a1:47:16:53:6b:a9:ff:4e:eb:ad:c1:bc:3f:03:
11:59:eb:12:a0:f3:46:1f:08:b0:f0:04:da:3d:ea:75:be:04:
5c:35:67:4e:ef:2f:9a:25:6e:73:0d:21:63:15:16:d5:9d:b7:
8c:8d:59:8c:0e:97:23:5a:93:c2:0f:16:ad:95:ad:a3:34:6b:
89:1c:71:d6:22:32:8f:ef:b6:2c:88:80:78:20:60:cc:b5:ad:
d1:e6:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:49:55 2025 by rpki-client